Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/nVcWErxvSorM4gKEaXeN2CgwyrM.roa
File: nVcWErxvSorM4gKEaXeN2CgwyrM.roa (raw, json)
Hash identifier: H5JnjcPs4dB8k0C/vbdsXHoJ124MX3fhINe3AROvgSE=
Subject key identifier: 9D:57:16:12:BC:6F:4A:8A:CC:E2:02:84:69:77:8D:D8:28:30:CA:B3
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942748069A7D737E214B7612903D2DA7E0
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/nVcWErxvSorM4gKEaXeN2CgwyrM.roa
Signing time: Thu 02 Jan 2025 13:50:19 +0000
ROA not before: Thu 02 Jan 2025 13:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212561
IP address blocks: 77.85.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:06:9a:7d:73:7e:21:4b:76:12:90:3d:2d:a7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d571612bc6f4a8acce2028469778dd82830cab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:ca:c9:e8:0e:a6:b4:9b:ac:aa:ff:92:a8:
74:cf:20:d4:e6:e1:24:7a:4f:24:a7:c0:4d:60:b0:
03:81:75:f5:b9:9f:3d:fa:39:95:0f:f0:3b:1d:c8:
1e:55:e5:bd:e1:91:6e:e4:86:56:d7:a2:18:83:3b:
9e:07:1c:ed:80:8c:cc:c5:88:21:0f:93:fc:f6:9d:
a8:92:78:b1:ea:8f:86:6c:a2:3e:c8:59:a2:63:7f:
91:fc:7b:dd:58:00:06:b2:32:83:90:c3:a1:86:fb:
91:4a:e2:6d:38:20:30:55:eb:a0:33:3d:ca:10:66:
68:ee:66:0e:39:cd:4f:7f:2e:98:dc:3f:df:3f:95:
37:dd:45:fa:bc:98:42:49:71:5f:22:fe:16:98:95:
0e:eb:c3:f6:d5:84:63:e3:20:d7:80:dc:59:f3:8e:
de:3e:78:65:a3:3a:35:44:10:c4:cc:df:72:4e:56:
ea:6d:a8:68:29:34:77:b4:04:4a:59:88:45:15:e6:
0a:ae:00:d4:02:ef:d0:23:2a:0a:4f:d2:95:22:a0:
8e:ea:97:aa:a3:a9:ee:e7:99:99:f8:71:16:b3:fe:
00:3d:e0:da:54:be:c0:d7:cc:4f:e1:04:fb:94:5a:
11:8c:18:74:2e:c5:5b:1a:2b:09:21:b4:2c:bd:ef:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:57:16:12:BC:6F:4A:8A:CC:E2:02:84:69:77:8D:D8:28:30:CA:B3
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/nVcWErxvSorM4gKEaXeN2CgwyrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.85.220.0/24
Signature Algorithm: sha256WithRSAEncryption
43:41:e5:ea:50:5d:b6:af:71:14:15:20:77:72:fb:24:07:1a:
91:ec:79:ea:b9:09:3e:f8:f3:39:b8:16:d1:f8:c8:4c:3d:23:
04:9b:6b:b1:17:66:a0:14:0f:b4:0a:ae:dc:58:99:18:69:12:
72:29:94:fa:da:86:bf:7b:22:d2:4e:db:aa:59:fa:04:96:68:
27:65:62:04:66:be:0b:a6:9b:15:05:bd:2f:e3:ef:68:df:df:
b9:1e:87:3d:f4:3b:44:d3:60:3f:29:2a:50:f4:ea:4a:a6:0f:
94:4f:85:a5:7d:9e:0e:a0:29:2e:1d:65:4c:48:64:d9:06:8e:
d7:ba:58:59:2a:f1:10:88:2f:e4:9d:d8:c9:8c:b3:37:f3:18:
f4:68:5c:4d:cf:89:81:3e:f9:54:3b:1d:9e:64:02:d2:a1:32:
f9:91:ed:ea:7b:8b:22:0b:04:ef:ee:fb:ce:09:e5:70:58:d9:
fd:db:dd:c1:5b:e3:ad:d6:79:45:d8:a0:d8:01:60:9f:32:96:
8f:be:69:63:2b:79:a4:17:2f:78:18:5d:e1:e9:9c:3a:8b:dd:
5e:8c:a9:14:c4:9b:fb:00:30:1a:be:bb:cb:c4:82:e0:26:a5:
4c:32:35:09:31:7d:09:e6:1a:45:e8:89:0f:61:30:cd:f9:47:
27:8b:51:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:07:04 2025 by rpki-client