Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/gIUgoRTyJmRfCQYS7uklAVhDlWU.roa
File: gIUgoRTyJmRfCQYS7uklAVhDlWU.roa (raw, json)
Hash identifier: K7KWFvQ91COOPs2G9/YPr+v2xa3Bl9m3cSR+0EKlTlQ=
Subject key identifier: 80:85:20:A1:14:F2:26:64:5F:09:06:12:EE:E9:25:01:58:43:95:65
Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial: 019427B48F89F020A34FFEA12F4C4E586440
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/gIUgoRTyJmRfCQYS7uklAVhDlWU.roa
Signing time: Thu 02 Jan 2025 15:48:52 +0000
ROA not before: Thu 02 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61154
IP address blocks: 77.87.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:8f:89:f0:20:a3:4f:fe:a1:2f:4c:4e:58:64:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Validity
Not Before: Jan 2 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=808520a114f226645f090612eee9250158439565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:57:72:7c:66:ea:5f:06:ee:9c:02:c6:a0:
6c:92:69:19:82:07:82:a4:97:b1:d5:c9:8b:df:72:
47:3c:fc:05:5e:84:64:4e:44:f0:5b:8b:63:69:ad:
7c:9a:9e:4e:34:4c:30:28:77:6b:a2:76:30:fd:c0:
04:58:a9:3e:3b:7a:bb:81:3b:4a:92:c6:65:30:48:
9e:d6:ff:d5:d2:8a:7e:8f:cc:7f:61:b6:71:2a:21:
dc:e9:b1:1f:03:eb:50:68:f0:03:1f:ee:94:6c:e3:
68:bc:b4:d4:85:10:78:50:9c:4b:52:1a:e2:25:6c:
e4:2b:7f:64:89:e5:53:f5:81:fa:ad:74:c2:cc:53:
32:ab:a2:3f:98:40:9b:e9:b6:89:e2:b6:c4:31:b7:
10:2e:da:a2:8a:fb:28:8c:d1:c9:51:90:00:fa:aa:
93:45:51:81:e1:8f:25:7c:20:68:4b:e7:29:d5:c5:
79:1d:c2:d2:b4:75:b9:b8:0e:82:9d:0b:f1:c3:9b:
67:3d:86:de:3c:d9:72:e7:47:19:68:fd:ed:0c:3f:
af:ff:50:d4:df:6f:b0:65:34:ef:43:a4:4d:b2:07:
2f:60:a7:36:83:d2:69:cf:4f:12:0f:58:4c:77:cb:
9f:71:2a:2a:06:e8:4a:e8:2b:a0:15:0f:4c:ed:e7:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:20:A1:14:F2:26:64:5F:09:06:12:EE:E9:25:01:58:43:95:65
X509v3 Authority Key Identifier:
keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/gIUgoRTyJmRfCQYS7uklAVhDlWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.78.0/24
Signature Algorithm: sha256WithRSAEncryption
88:86:12:3e:e3:3f:87:e2:b6:d5:38:9f:4c:39:79:b3:c5:6d:
88:7a:ae:5e:be:48:56:dd:be:c1:d1:7b:46:00:50:e8:59:c0:
67:49:3c:9c:c3:c4:9c:99:df:de:7a:7a:d4:70:54:57:c7:84:
50:47:97:5e:48:85:fb:3f:2a:d9:6f:e8:08:7e:d0:74:4b:4f:
48:74:52:f3:75:75:0d:ce:00:91:da:4e:37:67:35:95:1f:3e:
4f:71:f6:8a:bb:70:0e:ff:53:af:ac:f2:74:d1:35:51:49:d7:
bc:0d:21:7b:1c:9c:b8:cb:34:b8:02:35:90:fa:97:09:14:e8:
9b:eb:92:b1:82:62:07:59:55:06:0d:81:62:35:7a:7b:92:59:
bc:15:50:02:14:70:33:e3:10:04:cb:62:94:37:f1:8e:4d:61:
3f:df:a2:f6:a8:35:9b:80:7a:7f:de:58:fe:23:b4:db:32:22:
a3:89:46:bf:6f:ed:e6:60:81:ca:a1:e4:c8:89:7a:d4:b6:78:
fe:62:3c:98:a8:e6:b7:b8:4e:60:3e:51:aa:8b:24:7c:d5:42:
bb:16:7e:ea:e3:e0:d5:b4:ed:d4:f1:03:9d:02:cb:55:b4:5d:
6f:8b:3a:e5:05:3f:c2:6d:47:7c:ce:d2:5d:96:1b:5d:25:35:
b7:8e:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:10 2025 by rpki-client