Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/X8j-g5UXznvugZtsX4vPUTZkNCs.roa
File: X8j-g5UXznvugZtsX4vPUTZkNCs.roa (raw, json)
Hash identifier: m7iBDDotS9ucjB95WAdQ3fETMEIIDDjOdH3AnU2GIAM=
Subject key identifier: 5F:C8:FE:83:95:17:CE:7B:EE:81:9B:6C:5F:8B:CF:51:36:64:34:2B
Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial: 0194228E3959CC0CDDBE73F66080217F2216
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/X8j-g5UXznvugZtsX4vPUTZkNCs.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61237
IP address blocks: 77.247.239.0/24 maxlen: 24
92.241.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:39:59:cc:0c:dd:be:73:f6:60:80:21:7f:22:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fc8fe839517ce7bee819b6c5f8bcf513664342b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:0e:65:29:27:5f:af:3a:69:08:6e:d2:f9:
4e:4e:a4:ae:ab:9c:28:18:10:68:6b:57:98:2c:99:
d3:c8:95:3f:2e:b1:2e:cd:09:bf:2c:ce:4a:1f:00:
b5:10:4d:bb:5b:1d:94:58:79:4f:15:2d:cc:5c:a9:
87:49:7c:68:82:9b:9a:96:5b:9c:19:04:b5:5b:9f:
c1:dc:76:0a:59:37:c5:4d:e2:2f:83:a8:e8:a3:95:
4a:4c:d9:42:79:c1:46:fd:2d:a5:43:31:ff:61:f8:
98:48:a1:a7:85:09:be:1a:23:e9:24:03:b6:c5:8a:
f6:05:87:f4:2e:b9:cb:06:2e:3a:07:63:1e:7b:06:
09:28:2f:b6:cd:ac:10:5e:eb:20:af:7c:af:c9:7b:
38:e9:80:1a:58:8d:da:43:78:a0:34:9b:da:32:b6:
e9:0f:eb:f9:f5:e9:b4:f0:6f:f3:33:94:90:68:e1:
0b:00:2f:6a:c9:ab:d9:73:43:cd:7b:f8:4a:52:ca:
03:74:39:c1:c5:92:93:f6:13:6a:05:bc:b6:9a:b6:
bf:3a:c3:91:26:80:6f:ff:f5:dd:31:f3:d8:d3:34:
78:64:bb:ff:0b:d4:5f:0a:4b:8c:c1:f1:ab:be:0b:
97:ab:45:14:f3:c5:96:b6:b5:a5:55:5e:48:95:8d:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C8:FE:83:95:17:CE:7B:EE:81:9B:6C:5F:8B:CF:51:36:64:34:2B
X509v3 Authority Key Identifier:
keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/X8j-g5UXznvugZtsX4vPUTZkNCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.239.0/24
92.241.21.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b0:8b:b6:d8:6e:e7:02:7f:3c:a0:57:a1:2d:2a:d7:72:5a:
c9:03:62:7b:02:a8:8a:83:ca:71:e5:1e:78:31:cd:ac:5d:6f:
50:d4:08:7d:c0:4d:fb:b3:58:0a:4e:a1:cf:69:53:0a:cd:df:
28:2a:a7:bd:e3:4e:c9:59:0a:d1:f6:cb:79:20:65:b3:62:d5:
38:cf:d8:5e:62:d2:85:4e:23:cf:ac:4f:50:a7:e1:3a:88:6b:
13:14:d4:d0:18:b2:5f:9c:0e:a9:22:7b:99:04:27:cc:3f:63:
1d:f4:f5:fc:5e:7f:30:a9:66:8c:a0:10:94:0b:43:70:4f:0c:
0a:38:07:4e:9d:70:f7:de:fb:30:f5:77:58:a8:33:6c:e9:2c:
92:97:d0:c3:2c:26:ab:6c:da:40:b5:fb:d1:6f:c4:ef:e4:9c:
76:6b:3d:8b:8a:0c:2c:9d:f8:24:a5:ae:07:ee:9f:a8:cc:43:
76:32:4a:05:82:de:d4:34:df:44:cc:f7:36:53:2c:70:5d:93:
0c:60:fb:80:be:88:bb:98:37:ab:11:d3:ad:ac:c8:c9:d3:bc:
06:8d:74:69:e7:7e:4f:fe:55:5c:90:a2:6e:29:2b:07:80:2f:
8b:02:ab:80:b4:a2:fe:59:18:10:29:7d:b6:b1:b3:68:65:b7:
69:9b:8a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:34:35 2025 by rpki-client