Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/_qLxIOi7VmVEBLaS1YixdxXiwBA.roa
File: _qLxIOi7VmVEBLaS1YixdxXiwBA.roa (raw, json)
Hash identifier: 0p2ssxxIHIoQau1gQDFigWlgz8Te2D1iMIcwAH/P3eQ=
Subject key identifier: FE:A2:F1:20:E8:BB:56:65:44:04:B6:92:D5:88:B1:77:15:E2:C0:10
Certificate issuer: /CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Certificate serial: 01946BCF2B6044F1DD5EDBAF34937124F1D5
Authority key identifier: D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/_qLxIOi7VmVEBLaS1YixdxXiwBA.roa
Signing time: Wed 15 Jan 2025 21:12:06 +0000
ROA not before: Wed 15 Jan 2025 21:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43293
IP address blocks: 77.93.64.0/20 maxlen: 20
2a01:350::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:cf:2b:60:44:f1:dd:5e:db:af:34:93:71:24:f1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Validity
Not Before: Jan 15 21:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fea2f120e8bb56654404b692d588b17715e2c010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:e9:13:bf:a5:e5:36:fc:62:65:c4:a4:a2:
3e:40:c8:ee:00:c5:37:e5:f0:0f:59:f9:36:a7:e6:
2f:50:80:42:ee:1b:54:d3:fc:04:fc:1c:2a:bd:b9:
37:80:65:47:f0:36:e0:10:07:e7:f9:3e:f5:f7:1a:
25:be:47:33:33:5e:a3:07:cd:02:14:9c:cd:fc:d1:
0c:c5:16:37:62:13:8f:5a:d2:ac:f4:9c:05:a7:af:
e3:58:b6:ad:4f:0b:dd:f5:68:27:1c:7c:36:62:57:
06:e8:47:33:33:3e:ec:24:bb:33:2c:0e:e1:cf:d5:
93:55:ea:84:31:79:e9:5e:cd:8e:78:ed:d1:31:ea:
f7:23:ee:fd:31:ad:55:4c:60:41:f0:6a:b0:dd:4e:
1c:99:5b:73:45:a4:fe:5b:7a:71:73:fb:a7:c7:99:
e0:13:34:dc:e1:8b:21:a7:fc:b4:e5:4c:28:4b:19:
b3:86:e5:50:7b:11:b7:0f:01:af:74:44:d2:bd:50:
08:e7:88:7d:39:b6:c4:fb:09:c9:aa:40:bc:c2:7c:
71:6e:64:7a:b0:26:61:64:89:7f:5f:e4:72:6a:50:
ad:66:4e:ec:70:6d:f9:7c:d2:e9:f7:02:8d:bf:03:
17:d3:c0:16:17:20:26:91:3e:ce:f0:18:7b:fb:13:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A2:F1:20:E8:BB:56:65:44:04:B6:92:D5:88:B1:77:15:E2:C0:10
X509v3 Authority Key Identifier:
keyid:D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/_qLxIOi7VmVEBLaS1YixdxXiwBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.64.0/20
IPv6:
2a01:350::/32
Signature Algorithm: sha256WithRSAEncryption
37:49:c8:7b:b9:70:4d:7a:d0:48:74:a4:96:bf:ac:ea:7f:7e:
0d:6b:35:91:4a:6e:78:45:a8:3d:00:8a:b1:66:5f:f3:d9:90:
d4:7d:d1:e5:e3:ee:02:99:14:5e:f8:f6:e2:d0:d6:bb:d8:38:
e7:d0:7d:86:4f:e3:7d:2f:e3:d0:6f:18:cb:83:a6:df:ba:9e:
76:40:30:e0:34:a0:86:bb:0b:88:de:10:61:c7:ac:db:9d:2d:
53:1f:32:c3:69:15:79:d8:00:dd:ff:a0:e2:a7:d4:dd:4d:70:
79:18:4a:9b:e9:6b:a7:04:b8:8f:22:6c:ab:fe:f4:fd:4a:d5:
20:26:13:92:0c:d5:53:26:90:98:93:c9:0a:77:26:ed:8c:60:
6f:81:fd:78:d2:72:0a:52:e7:08:10:8d:b3:56:52:2a:49:cb:
87:e2:00:e9:49:0c:17:18:43:15:0f:7d:aa:64:67:4f:56:53:
2e:7d:08:04:5c:c1:7a:ff:e7:19:06:49:39:ad:6e:08:91:1f:
99:7c:fb:fa:94:49:46:71:b2:72:b9:06:d2:08:dd:2e:d4:e0:
9a:62:95:27:1a:ef:2d:fc:72:b7:1b:0f:51:6d:0b:8d:23:b4:
25:7c:e5:ac:ca:ba:85:67:31:0f:43:ae:fc:82:e7:b5:16:30:
b2:ec:6b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:44 2025 by rpki-client