Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/4LzZ1nNsu4LuST2Ho5WFYyP8mls.roa
File: 4LzZ1nNsu4LuST2Ho5WFYyP8mls.roa (raw, json)
Hash identifier: +FGh2eXKB6FY3JQcVGAT5Jqjwk7vu4FgQl0F2eJNu1c=
Subject key identifier: E0:BC:D9:D6:73:6C:BB:82:EE:49:3D:87:A3:95:85:63:23:FC:9A:5B
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747FF9CE118AE774095F49032BFEBF7
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/4LzZ1nNsu4LuST2Ho5WFYyP8mls.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203390
IP address blocks: 77.85.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ff:9c:e1:18:ae:77:40:95:f4:90:32:bf:eb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0bcd9d6736cbb82ee493d87a395856323fc9a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:94:d1:b1:81:c4:28:86:a9:df:47:4e:f7:
ee:99:08:ab:99:39:ff:f4:c6:8d:13:70:71:f0:9f:
a3:c3:22:bf:7d:a3:77:93:0f:a6:19:79:58:64:fa:
5d:d3:84:2b:a6:d5:68:24:60:a4:10:41:15:a7:95:
05:86:4c:c9:e2:9b:c1:cf:90:5c:40:5b:6c:9e:d1:
61:7a:8a:22:6b:39:8b:ca:35:08:23:81:35:2c:bd:
e8:58:a0:e7:ed:5d:b7:4c:4d:ab:d7:d8:8e:82:e5:
5f:d3:84:25:cb:ee:56:4d:ea:83:09:9e:a9:ee:0b:
25:d6:61:b8:34:65:cf:e0:a1:26:21:a3:70:7a:d2:
1a:bf:42:02:af:4e:3e:e2:54:d6:64:61:c7:8a:a0:
95:f0:d1:c8:98:be:3b:e6:68:1b:d1:d5:c0:83:51:
6d:a1:73:08:35:2f:e9:b5:ab:cd:1c:28:30:f0:7e:
e2:70:97:82:f1:70:c0:2f:9d:2c:52:31:69:1b:48:
4c:03:78:e4:f0:2e:dd:b0:14:c7:4b:d3:da:6d:01:
4c:7d:55:77:ad:10:4e:73:0e:7d:b3:55:67:1d:16:
72:38:7a:7e:74:90:d8:22:7c:df:13:a3:b3:1c:95:
cc:1c:41:60:6b:51:37:7c:0a:22:fe:d2:a8:ef:34:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BC:D9:D6:73:6C:BB:82:EE:49:3D:87:A3:95:85:63:23:FC:9A:5B
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/4LzZ1nNsu4LuST2Ho5WFYyP8mls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.85.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:cf:59:53:5a:90:17:3e:63:c5:e6:5b:ad:5a:1f:bb:8d:f4:
e5:9c:c3:7e:51:9e:20:41:d3:e5:bb:3f:2e:43:08:77:54:e5:
f7:17:87:45:3c:87:c6:1a:83:7c:3e:0a:fc:25:cb:c8:b7:8f:
2b:d4:77:f5:b1:8a:c3:8e:b7:38:15:64:d4:86:e9:1e:78:40:
46:b0:3e:98:7b:a5:01:90:ef:d3:e9:74:d9:96:4f:26:12:bf:
66:07:46:70:6b:cc:58:e3:86:ce:ce:d0:3f:17:14:e6:00:38:
ad:f9:8d:32:85:f3:a1:3e:57:db:6d:10:f6:5c:7d:3b:c4:01:
56:07:76:4f:14:a8:6a:75:6a:cf:cf:17:a1:4c:69:ac:fd:c8:
8a:81:95:07:ab:84:63:19:15:c1:4d:79:eb:77:7b:5c:c4:6b:
33:6f:b0:e5:d0:1d:b3:ef:07:29:26:79:0f:05:31:81:fc:b7:
13:00:29:75:15:f1:82:ca:a4:54:bc:00:4b:80:ef:23:bb:27:
7f:b8:12:e0:7c:e1:6a:97:91:d7:ff:3c:1a:83:ff:c5:96:f1:
1b:07:b0:90:32:d1:d5:8b:03:eb:33:f9:67:f7:04:df:3d:b8:
c0:ea:c4:de:16:1e:f6:60:13:57:0e:4b:16:ff:dc:b1:f8:35:
1d:19:e8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:35 2025 by rpki-client