Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/rP1N06y6_5xVXwJOlZcMJSPUKlo.roa
File: rP1N06y6_5xVXwJOlZcMJSPUKlo.roa (raw, json)
Hash identifier: K1n/BhWW6nYzFB1kJEBnmlpn0qeoVehXvBWMA+2aoP8=
Subject key identifier: AC:FD:4D:D3:AC:BA:FF:9C:55:5F:02:4E:95:97:0C:25:23:D4:2A:5A
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942748048EB9ADB1918F7D338084448138
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/rP1N06y6_5xVXwJOlZcMJSPUKlo.roa
Signing time: Thu 02 Jan 2025 13:50:18 +0000
ROA not before: Thu 02 Jan 2025 13:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208579
IP address blocks: 77.85.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:04:8e:b9:ad:b1:91:8f:7d:33:80:84:44:81:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acfd4dd3acbaff9c555f024e95970c2523d42a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:d0:0b:01:ed:92:8b:71:93:13:9d:14:6d:
76:cd:06:49:b3:8c:9d:a9:91:bf:5c:20:13:d3:67:
56:b6:d9:a2:dd:86:a3:8d:3f:0f:8a:af:b7:ff:d0:
ee:63:a7:58:7f:45:1e:e7:79:ce:0f:d3:87:e8:c7:
49:1f:ea:ab:f7:85:31:f4:c9:14:b4:7f:ca:fb:4d:
55:ff:07:c2:e6:83:36:93:8c:67:a1:ea:5c:29:b1:
c0:54:63:a0:3f:0a:13:a0:a4:e1:33:5e:d5:79:aa:
ac:84:46:ab:93:1f:ef:86:d8:38:7e:4d:3d:f0:78:
8d:47:34:50:76:6b:56:a3:50:e9:12:76:de:b2:67:
23:11:ab:61:49:82:2f:d0:38:0d:d4:63:73:74:06:
92:e5:b7:af:43:3a:09:54:df:b9:a5:5d:05:67:9c:
37:d7:23:a4:24:fb:bd:f4:10:7a:75:9f:21:a3:23:
63:d3:06:9d:b9:c6:30:f4:d4:c1:fb:0c:bf:98:de:
85:f2:db:8d:f7:6f:a3:9c:c1:00:e2:97:20:db:65:
67:a0:ea:e9:47:f8:d9:4d:a6:56:59:ae:1e:03:23:
27:a6:bc:3f:8c:8c:8c:15:d8:c5:dd:bd:b5:e3:87:
b2:1c:2b:0e:01:fd:0c:d4:6e:f2:5f:7d:ed:4c:ee:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FD:4D:D3:AC:BA:FF:9C:55:5F:02:4E:95:97:0C:25:23:D4:2A:5A
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/rP1N06y6_5xVXwJOlZcMJSPUKlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.85.206.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:0c:86:08:54:4d:84:9e:49:ca:f6:7d:db:ce:eb:73:46:e8:
66:76:f0:b3:3b:79:ea:3f:09:83:08:2b:09:18:80:4b:87:41:
cb:df:78:eb:6b:bc:04:b5:40:0c:46:1f:aa:0a:53:62:15:a5:
b4:1d:7d:9c:06:cc:5d:38:de:e7:2b:fd:ce:ff:e9:59:ba:5a:
ff:ee:ac:48:9d:0e:0b:54:c8:94:07:c1:ce:8b:66:6c:c0:75:
e2:89:58:90:bc:9d:8c:5d:53:40:a4:89:0b:91:f9:a8:47:6f:
5d:84:84:b0:02:62:ee:8f:60:2f:b0:e7:68:ba:00:17:8a:14:
b2:e7:50:74:d4:02:1d:c1:62:a4:5e:fd:d3:06:64:bc:c7:88:
0e:94:fe:ab:1e:19:16:00:a7:fd:8c:6c:7e:dd:31:b6:85:05:
c3:8c:62:c9:2b:28:e0:44:73:44:b0:24:21:5e:31:2a:7e:f1:
43:11:bf:a6:06:d0:f5:6e:29:c5:48:fc:a7:37:a5:58:0e:bb:
b4:f1:1f:b9:17:d3:48:aa:7b:6c:47:69:53:5f:e6:74:91:df:
25:d7:93:70:30:7f:d2:64:5c:13:c4:2a:87:06:05:85:01:d8:
c2:e0:85:59:24:17:5c:e8:4b:df:74:45:87:ce:12:45:c2:f7:
c0:38:ff:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:09:36 2025 by rpki-client