Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/p_hNg1I_cbqt6egbyJw-HSXBL48.roa
File: p_hNg1I_cbqt6egbyJw-HSXBL48.roa (raw, json)
Hash identifier: M9QswOhGzmXH7fbkRYRx7r4HyIYNbN+ZHrZ0tmRC4O4=
Subject key identifier: A7:F8:4D:83:52:3F:71:BA:AD:E9:E8:1B:C8:9C:3E:1D:25:C1:2F:8F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746BB4E7A4AF5E3889415C69723BF42
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/p_hNg1I_cbqt6egbyJw-HSXBL48.roa
Signing time: Thu 02 Jan 2025 13:48:54 +0000
ROA not before: Thu 02 Jan 2025 13:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214021
IP address blocks: 77.92.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:bb:4e:7a:4a:f5:e3:88:94:15:c6:97:23:bf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7f84d83523f71baade9e81bc89c3e1d25c12f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:6f:a7:88:31:35:40:7b:36:c9:6a:20:5e:
c8:5b:e6:e3:86:6e:fb:62:4e:ca:c9:17:45:09:cf:
b7:b1:93:94:93:53:14:c9:53:04:0f:cb:dd:07:d9:
bc:15:a0:bb:f3:fb:db:62:75:12:91:ae:0c:fb:09:
b5:03:86:b0:c7:60:20:9e:48:be:a4:ac:d6:ee:de:
64:d5:e6:93:0f:ba:2a:fb:c7:8b:ed:c6:db:53:9d:
4b:ce:fa:17:16:bd:07:57:2b:4b:1c:a7:e2:67:1a:
1f:62:27:d9:71:5c:42:a7:b2:89:a7:97:75:9c:41:
db:39:8d:ee:82:2f:4c:83:ad:33:af:f7:4a:cd:ba:
23:03:d0:71:b9:ea:36:f3:7d:63:54:66:db:41:13:
81:ae:e7:83:a1:1a:79:d1:e8:9f:60:6b:8e:ae:9e:
ed:25:c6:63:89:5d:60:7c:9e:33:8c:34:67:ea:86:
91:35:a2:4a:46:36:ff:b1:89:52:eb:4c:52:ee:63:
0d:83:72:b0:db:33:4d:0a:92:fa:d1:d1:4d:f9:46:
bd:e7:7a:01:a8:f1:c6:63:53:b2:cd:06:d7:98:41:
7d:5e:00:49:7f:41:3b:4e:8d:30:27:fd:93:0c:7a:
31:57:83:fe:3f:4a:f3:26:e7:b6:8e:69:f2:24:25:
b3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F8:4D:83:52:3F:71:BA:AD:E9:E8:1B:C8:9C:3E:1D:25:C1:2F:8F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/p_hNg1I_cbqt6egbyJw-HSXBL48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.130.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e6:48:4f:cd:42:f4:96:f2:21:12:3b:e1:8e:69:d3:63:f9:
5d:06:ad:1e:57:03:57:cd:ac:db:e1:95:8b:6c:86:a8:1b:b9:
cc:41:fd:60:3c:24:9f:53:61:a9:24:28:b2:69:7b:e7:58:32:
40:27:6d:9a:f4:33:2a:0b:f8:40:46:ba:c9:8c:49:9a:b5:a8:
98:9d:c1:e7:16:e9:0e:65:c4:ef:f7:87:6b:b4:21:b9:41:4e:
37:f5:90:a0:31:cb:d2:b1:e2:24:38:d2:c3:e4:cb:63:ed:cb:
d0:4c:3c:48:8e:b2:e7:d1:7a:58:c4:99:88:c2:5a:4d:e3:a9:
51:65:85:c3:a0:1b:4e:08:64:d9:32:fb:d4:b9:38:0f:e6:f6:
c0:9d:26:38:cc:89:0a:22:15:2d:e7:55:0a:6c:05:d3:d2:2f:
ed:da:86:58:e1:e0:a4:fc:01:8e:ee:15:de:c7:55:20:77:c7:
14:d6:f3:eb:e2:71:73:a2:ea:07:28:07:d1:fb:72:a9:22:98:
5a:fd:89:c7:fe:64:25:3d:ef:28:24:1c:43:8b:4f:47:1b:19:
59:a7:25:22:d8:a4:03:b3:36:d7:62:2a:4a:23:6c:8e:62:5c:
fd:e7:f0:9a:7c:f7:f9:cb:b0:ce:ee:29:31:d1:43:12:84:73:
c6:13:db:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:34 2025 by rpki-client