Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/AOHo_zNkn17jUlogxpO30pi4vZk.roa
File: AOHo_zNkn17jUlogxpO30pi4vZk.roa (raw, json)
Hash identifier: +QPjJA3N7ss0yCIwrgcDQ/5UO7ASRz1q9sJuFdAbQnM=
Subject key identifier: 00:E1:E8:FF:33:64:9F:5E:E3:52:5A:20:C6:93:B7:D2:98:B8:BD:99
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 01942823928B390250F3A69679EBBDF3CABC
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/AOHo_zNkn17jUlogxpO30pi4vZk.roa
Signing time: Thu 02 Jan 2025 17:50:07 +0000
ROA not before: Thu 02 Jan 2025 17:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57626
IP address blocks: 77.87.56.0/21 maxlen: 24
91.123.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:92:8b:39:02:50:f3:a6:96:79:eb:bd:f3:ca:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 17:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00e1e8ff33649f5ee3525a20c693b7d298b8bd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:c3:71:49:c4:8b:1a:9a:fd:89:cf:72:85:
9b:cc:57:2d:0a:e1:ee:dd:54:53:c5:11:38:12:d7:
ac:1e:91:80:5e:95:09:d1:40:44:26:74:69:dd:aa:
d8:16:fc:aa:45:14:99:24:1b:8a:92:0c:45:da:06:
4e:77:ee:1e:1c:14:45:7b:1b:70:f9:81:d1:69:87:
8e:29:c9:b4:41:c5:f6:89:12:3f:95:a5:03:5d:1b:
8d:a6:54:37:2e:c1:02:36:60:bb:cf:f5:1f:6d:22:
c5:4b:38:02:0e:d1:59:f4:aa:a9:b2:ca:28:2c:e9:
3b:0b:d0:92:0f:a0:5f:b7:16:8a:7b:65:07:67:f1:
f3:8c:88:86:ac:47:42:76:8d:e5:44:0a:bc:02:b7:
e1:c7:e7:a9:b7:d0:a3:f9:3d:45:a7:d5:b8:81:4d:
1c:08:2c:11:ac:05:7b:ee:f0:d3:22:cd:fa:d5:76:
b8:74:fb:df:27:25:75:44:82:5b:95:3b:47:a1:cc:
be:a3:4b:36:4a:64:d9:3b:e2:b1:31:40:5c:ef:f8:
7e:fc:b2:e2:74:92:71:18:aa:bf:5a:b2:eb:ff:c7:
7b:e4:9e:f4:dc:2f:7a:7f:8b:5f:b7:95:be:3c:9c:
ce:9d:55:3c:49:db:11:1e:b9:d5:c7:9a:a9:75:d9:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E1:E8:FF:33:64:9F:5E:E3:52:5A:20:C6:93:B7:D2:98:B8:BD:99
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/AOHo_zNkn17jUlogxpO30pi4vZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.56.0/21
91.123.240.0/20
Signature Algorithm: sha256WithRSAEncryption
93:2a:2a:16:39:ac:ec:39:25:05:36:91:db:f6:90:b8:58:17:
00:42:0f:17:1d:c7:ff:b9:ae:81:ee:21:5c:41:f9:4d:d9:c6:
38:2c:43:ea:7b:8a:5e:5a:8e:58:a2:9e:32:6f:94:d0:e1:f3:
72:32:f8:66:e2:e5:38:f3:e3:8a:ed:14:bc:2f:6f:2b:48:9c:
39:9a:63:e5:9a:eb:98:c7:60:bc:b2:03:f1:19:47:3e:1b:7c:
76:e4:ad:06:e5:d5:7f:2a:1f:81:87:af:96:81:8d:8d:32:2c:
73:3b:a1:a9:aa:02:51:67:ed:23:60:62:99:2e:f5:b9:82:74:
bc:00:1e:43:dc:ac:8f:c4:1e:d0:d2:cf:80:38:57:ea:0f:ef:
64:f2:36:d2:e1:47:4f:b2:2c:07:01:45:cd:ef:d3:65:ab:d5:
f9:87:a6:2e:c8:eb:7a:99:f8:e8:48:3e:78:60:73:14:eb:26:
45:77:86:0d:97:46:b8:f7:84:c8:af:89:fe:45:1c:61:8a:10:
8c:ab:aa:bc:73:ef:bb:ba:16:8d:02:59:1c:ae:15:f2:ef:ce:
f5:1b:5f:3e:90:04:3c:1d:30:60:0d:ae:f6:14:ad:09:a6:73:
92:c8:53:1e:6c:5f:dd:51:32:15:d2:03:05:26:5e:2d:60:70:
b7:39:53:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:09:08 2025 by rpki-client