Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/yj8S8MOtSmVKNjXl11Yr8esDgtY.roa
File: yj8S8MOtSmVKNjXl11Yr8esDgtY.roa (raw, json)
Hash identifier: px/AqUdCFaeUdcOlWlEpkaK3sSjZNzpfw2t/zU4ncMc=
Subject key identifier: CA:3F:12:F0:C3:AD:4A:65:4A:36:35:E5:D7:56:2B:F1:EB:03:82:D6
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 019425FC4B3804E7E553A27E383865B745DA
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/yj8S8MOtSmVKNjXl11Yr8esDgtY.roa
Signing time: Thu 02 Jan 2025 07:47:58 +0000
ROA not before: Thu 02 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31317
IP address blocks: 77.87.191.0/24 maxlen: 32
2001:678:e40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:4b:38:04:e7:e5:53:a2:7e:38:38:65:b7:45:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Jan 2 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca3f12f0c3ad4a654a3635e5d7562bf1eb0382d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1e:87:d6:dd:20:21:ce:f7:f9:5b:f1:fe:19:
7b:10:94:73:60:05:3a:63:94:1a:02:2a:2b:a9:ea:
a2:4a:27:d4:a9:47:97:19:c5:7a:32:9e:71:7d:7c:
55:ca:55:e0:99:49:3e:bb:39:74:69:87:64:08:f8:
e5:c9:5e:b4:06:c2:57:b7:ab:2d:de:61:d3:f0:5a:
38:a6:79:14:0e:7c:2f:9b:c2:2f:6b:1d:5f:cd:c0:
0b:ab:59:ce:4d:a8:83:77:6e:2f:69:0e:b2:6d:5c:
21:6f:cb:8c:d3:6f:8d:a5:83:9f:c1:09:4f:58:6a:
7d:c2:3b:17:46:36:d5:9a:07:37:56:ee:de:fd:07:
f1:6f:d7:ba:df:4f:65:5b:ca:0b:9c:d8:9c:e8:99:
b4:e5:d6:9f:78:40:37:f8:e0:73:8b:a2:09:d9:cf:
b2:88:42:fb:56:19:40:43:b9:f8:cb:95:72:bc:eb:
d6:1d:c9:eb:cc:49:0b:cf:06:e6:15:f5:ad:17:26:
d8:20:c6:84:dd:04:1e:db:70:4e:45:0e:ff:8e:b2:
dc:cb:a3:bf:86:96:10:42:6a:5e:11:3c:e4:41:94:
0f:42:e8:4b:32:ae:d5:c5:e2:03:4b:51:f6:81:7f:
50:33:61:bf:b4:81:b2:e0:c8:90:00:3c:4f:37:99:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3F:12:F0:C3:AD:4A:65:4A:36:35:E5:D7:56:2B:F1:EB:03:82:D6
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/yj8S8MOtSmVKNjXl11Yr8esDgtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.191.0/24
IPv6:
2001:678:e40::/48
Signature Algorithm: sha256WithRSAEncryption
03:65:36:67:fe:d1:16:10:ef:dd:a5:c9:54:aa:ab:9d:cd:0a:
15:78:c0:8a:a4:07:38:2a:9c:bb:a3:54:45:2b:12:14:42:b1:
34:fc:73:5a:50:94:42:72:68:04:44:17:82:ef:52:de:94:49:
a8:5c:09:af:9d:de:6d:d1:fd:da:31:c9:9c:db:37:a9:e4:53:
27:b4:8a:5f:6d:16:eb:85:de:35:ea:de:60:8b:42:83:c5:85:
b5:18:26:ff:24:db:fe:e7:14:23:49:e5:4d:f6:a9:28:04:22:
b3:a7:9a:f4:01:01:76:8e:e4:2e:54:4d:d8:9e:28:f0:a6:44:
d9:54:3c:0f:2a:2b:59:64:3b:c4:9b:0d:81:4c:9c:4f:39:8f:
78:a3:e1:f7:8e:d3:8d:79:69:96:57:d9:72:ee:b0:6e:81:f6:
3e:4b:7e:d8:7f:84:62:d2:82:31:60:7f:7c:4f:dd:a5:7e:bd:
2b:7c:97:9c:9e:14:41:15:71:82:ba:4b:42:97:f8:a1:7a:bb:
99:b8:38:ec:60:d4:0f:ce:a4:5e:73:82:ad:5a:c9:e9:fe:19:
93:da:e4:60:1c:8e:c2:12:3e:1a:06:53:8a:4f:28:fd:b4:a0:
78:83:91:0d:42:aa:96:b9:67:0a:dc:e5:ab:24:ea:43:d4:f8:
1c:f3:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:46:27 2025 by rpki-client