Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/mHxy9rJdZpH5hrd46ZQbudzuLF8.roa
File: mHxy9rJdZpH5hrd46ZQbudzuLF8.roa (raw, json)
Hash identifier: xwokQPLLEdy+DbSgYqJ8Dht6nsu849d5eiNxGGm9TUs=
Subject key identifier: 98:7C:72:F6:B2:5D:66:91:F9:86:B7:78:E9:94:1B:B9:DC:EE:2C:5F
Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial: 0194266BFCF2C92095F6879E4E81B7924FDB
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/mHxy9rJdZpH5hrd46ZQbudzuLF8.roa
Signing time: Thu 02 Jan 2025 09:49:58 +0000
ROA not before: Thu 02 Jan 2025 09:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51400
IP address blocks: 77.87.240.0/21 maxlen: 24
2001:67c:2190::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:fc:f2:c9:20:95:f6:87:9e:4e:81:b7:92:4f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
Validity
Not Before: Jan 2 09:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=987c72f6b25d6691f986b778e9941bb9dcee2c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:4c:0b:9c:13:31:f3:85:d5:44:81:06:de:
3f:cd:62:df:2b:1b:c3:a7:db:81:43:ec:53:7e:99:
dd:71:f8:e5:6e:03:3f:60:dc:bf:c8:95:75:ae:32:
d1:89:91:1c:f5:3b:19:42:e5:ae:e5:c5:26:cb:92:
4a:95:d0:6c:da:06:95:16:d4:ba:5d:95:ab:2d:1c:
d8:58:d4:dd:a7:17:17:5d:8d:79:15:80:26:3e:aa:
7b:64:b9:a5:f9:7b:26:e3:e4:7f:9c:bb:84:95:89:
9f:5e:c7:e9:00:de:c1:2f:ee:25:95:4c:cb:70:de:
3d:57:98:f8:ad:be:04:7a:e9:87:df:52:f1:fe:bf:
76:f9:e4:84:c1:1e:a3:51:40:55:77:1d:b1:24:88:
1a:39:7a:f6:d7:27:d0:41:e9:bd:5d:23:13:b3:1d:
b7:77:c2:f2:5c:a9:65:b1:18:4a:e4:a9:ff:be:42:
eb:52:52:ea:0e:c2:35:a1:cf:d1:8f:88:23:5b:80:
20:b3:8e:e2:a9:a2:d0:18:a1:9b:80:3a:8f:7d:bf:
9e:26:3a:e6:9d:33:a0:5b:01:e3:71:bd:b3:1d:7b:
9d:1c:ba:38:3b:91:03:a9:26:cc:e6:1a:1e:45:a3:
c4:c9:fb:44:ca:72:cf:7f:c5:50:ac:bd:37:5d:39:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7C:72:F6:B2:5D:66:91:F9:86:B7:78:E9:94:1B:B9:DC:EE:2C:5F
X509v3 Authority Key Identifier:
keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/mHxy9rJdZpH5hrd46ZQbudzuLF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.240.0/21
IPv6:
2001:67c:2190::/48
Signature Algorithm: sha256WithRSAEncryption
78:8c:de:7b:ed:34:5e:f7:e1:87:f8:8d:bf:50:de:bd:3d:c2:
c1:5f:22:b8:ca:c5:36:89:4d:d3:d0:f9:69:f9:c3:0f:d9:08:
87:c3:06:1d:18:7b:17:71:d9:eb:44:d5:f0:53:a7:d1:87:65:
bc:ff:c7:ef:03:f9:a0:f8:c8:21:3b:d6:9d:99:a6:c0:ab:18:
54:71:27:40:9f:70:69:8f:2e:37:41:15:6c:7d:06:52:17:60:
6a:a5:2a:a0:7b:ae:8c:21:e0:88:d4:4a:be:f6:dc:83:a0:25:
9a:3b:ec:90:00:c6:a2:51:e6:7c:58:d2:7d:63:e5:f5:08:f3:
5e:17:84:03:9e:a3:63:eb:1d:54:59:f0:7d:47:57:19:e2:dd:
05:09:6d:ed:64:e7:98:13:63:23:17:f7:50:43:d6:0d:ab:21:
6d:7a:b6:0c:d7:77:15:75:8c:03:11:1d:15:06:c2:7b:4a:8a:
9c:3f:e3:ca:12:a4:7f:4b:e0:6e:0c:41:16:71:6e:5d:8a:d9:
c0:c3:33:af:ad:d6:41:4c:97:a5:a9:b6:a9:f7:16:97:42:a5:
63:76:af:17:a5:6c:54:80:86:d3:e7:e3:18:8b:45:75:31:55:
c4:24:71:e0:8c:f3:f9:4f:b3:bb:f2:4c:dd:86:52:e3:0c:6d:
a1:78:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:09:03 2025 by rpki-client