Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/_1S8ifFC66PXKfy6coz8hf3gqnE.roa
File: _1S8ifFC66PXKfy6coz8hf3gqnE.roa (raw, json)
Hash identifier: OwgGsWr1GQctqMIeUtgkReMkIUwARG+Gbc9mT88WrC0=
Subject key identifier: FF:54:BC:89:F1:42:EB:A3:D7:29:FC:BA:72:8C:FC:85:FD:E0:AA:71
Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial: 019422FC087ED3F7C9B65F2D30FA2946E6B9
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/_1S8ifFC66PXKfy6coz8hf3gqnE.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24951
IP address blocks: 77.244.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:08:7e:d3:f7:c9:b6:5f:2d:30:fa:29:46:e6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff54bc89f142eba3d729fcba728cfc85fde0aa71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:36:07:75:a4:5f:e2:05:36:44:c1:bc:7a:
7f:db:c6:c7:83:ba:c0:db:2a:23:83:0c:22:51:cb:
94:f8:49:08:04:0e:95:38:99:88:3c:57:92:86:00:
ed:2b:da:39:f1:ea:55:09:15:be:66:12:58:67:86:
b3:5f:9b:70:f4:ac:dd:b1:02:17:34:83:55:3e:34:
e6:30:53:dc:f6:8a:c2:dd:b0:59:b5:db:10:9e:6c:
42:ae:1e:61:dd:11:08:02:3d:20:ca:71:ee:78:39:
bc:99:26:74:3b:23:af:28:75:b6:ee:28:61:1f:7f:
05:3a:e4:bb:b5:3a:21:5b:13:6c:7e:38:e8:9c:6c:
93:64:4f:86:c2:fd:c3:c2:f7:c0:b0:4a:de:23:54:
d3:3d:52:06:74:5f:39:8d:4d:10:13:f9:71:5b:a6:
06:da:18:3c:16:6e:6c:55:fa:9c:3d:71:a8:9d:f6:
96:76:7b:ce:c6:ec:81:00:d7:f5:42:33:f2:66:07:
b1:60:0b:8d:c8:83:85:d1:d0:63:75:8b:ea:a9:cb:
8f:fc:4f:c3:ab:1f:13:b0:84:5f:ae:c9:3f:50:80:
db:8f:8d:f4:61:92:8a:92:a0:e5:49:29:67:b5:1b:
75:8e:d2:1c:0f:ce:58:1b:a5:58:cb:34:6d:3d:3e:
fe:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:54:BC:89:F1:42:EB:A3:D7:29:FC:BA:72:8C:FC:85:FD:E0:AA:71
X509v3 Authority Key Identifier:
keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/_1S8ifFC66PXKfy6coz8hf3gqnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.244.48.0/20
Signature Algorithm: sha256WithRSAEncryption
44:ac:b6:05:1e:56:5f:56:e1:51:d4:ff:a2:87:dd:d9:5e:a4:
a3:dc:f6:9d:79:83:02:82:7d:71:7c:2d:33:aa:d1:be:d7:d3:
0d:11:43:50:f5:c8:f7:48:fa:dd:26:42:d5:34:bc:09:8f:1b:
ba:9d:32:01:35:7c:61:55:c9:20:bf:3c:23:e2:09:75:b2:de:
47:a4:4b:ea:2d:b1:76:48:91:4d:32:42:0c:0d:a8:91:b4:29:
8c:60:4f:80:01:2e:b4:66:6a:57:a2:25:e1:31:b6:38:9c:96:
c0:0d:67:f7:e2:54:77:dc:99:67:2e:65:82:af:14:0f:14:4f:
ab:20:e8:6c:35:50:f9:57:41:69:0d:89:85:14:bf:5d:97:75:
c2:aa:fe:28:8d:36:0f:0a:b0:30:78:1d:72:0f:23:99:76:1b:
43:35:46:dc:a7:f4:fb:d6:ad:18:e2:d6:b6:82:52:19:69:94:
66:e0:fa:88:9b:3d:be:96:77:04:a4:bb:9b:f1:f6:15:9d:7f:
8b:fd:1c:0d:e2:78:cb:d8:67:4c:eb:98:90:5b:62:1d:f1:1a:
22:75:94:8a:6f:22:b7:45:ff:14:3b:e0:e0:db:5f:3f:72:4e:
44:8b:ca:cf:ac:73:1e:b3:a4:30:c4:76:e8:e0:c8:66:0a:ec:
6b:32:ba:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:40 2025 by rpki-client