Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/4Qe9-T0nXWoVHW9lPtNAFV1MJeQ.roa
File: 4Qe9-T0nXWoVHW9lPtNAFV1MJeQ.roa (raw, json)
Hash identifier: MEUx9Qe02B/09ozBtbyk47nH68xJFm0Hu6pf18Q/8p0=
Subject key identifier: E1:07:BD:F9:3D:27:5D:6A:15:1D:6F:65:3E:D3:40:15:5D:4C:25:E4
Certificate issuer: /CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Certificate serial: 0194228E302C0CF6DD219E5C3ECAFF64547B
Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/4Qe9-T0nXWoVHW9lPtNAFV1MJeQ.roa
Signing time: Wed 01 Jan 2025 15:48:51 +0000
ROA not before: Wed 01 Jan 2025 15:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205718
IP address blocks: 77.83.144.0/22 maxlen: 22
2a09:fcc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:30:2c:0c:f6:dd:21:9e:5c:3e:ca:ff:64:54:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Validity
Not Before: Jan 1 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e107bdf93d275d6a151d6f653ed340155d4c25e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:c8:75:92:82:3f:6b:65:75:a3:d4:6e:f5:
5a:fd:42:4e:49:84:04:80:8b:b5:46:71:12:af:ba:
1c:72:8c:21:de:22:75:9f:af:f9:ff:48:7a:8e:30:
f7:6c:b4:d3:90:4e:48:3c:c3:a7:fb:dc:36:c0:27:
10:ea:ac:31:10:5d:48:51:fb:73:44:78:a1:91:18:
56:44:fe:c5:d3:15:a0:89:31:af:c8:9c:ec:2a:0b:
39:33:8a:32:33:67:bc:a2:c1:fa:f6:46:d7:dc:4b:
44:f8:66:5b:0c:14:93:a0:71:63:a3:b0:28:ec:fc:
50:47:0c:66:25:f2:f2:97:b2:be:03:15:56:6f:6c:
17:9b:d8:3e:19:0c:28:8e:e7:99:96:9e:bf:a6:09:
14:0b:f7:bc:1c:a9:4e:1b:18:21:7b:4e:a6:a9:5d:
6a:7e:0c:83:88:e9:71:4c:05:36:70:cd:5b:0a:61:
7b:ad:07:7b:30:36:d5:67:91:fc:8f:d7:6b:ea:62:
33:0d:7c:45:5f:8f:4d:5d:95:da:87:ff:26:dd:62:
60:ab:ce:9f:b0:2e:ca:fd:e9:54:22:7f:a2:7b:6f:
b6:0b:03:b4:2d:c7:f5:61:b8:63:03:dd:16:f7:86:
3d:25:bd:22:89:fa:3b:6f:d2:4c:9f:46:77:62:2c:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:07:BD:F9:3D:27:5D:6A:15:1D:6F:65:3E:D3:40:15:5D:4C:25:E4
X509v3 Authority Key Identifier:
keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/4Qe9-T0nXWoVHW9lPtNAFV1MJeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.144.0/22
IPv6:
2a09:fcc0::/32
Signature Algorithm: sha256WithRSAEncryption
b6:e0:3a:5f:6c:d3:5b:d2:70:85:01:80:c8:a3:c6:de:d1:7a:
6c:ff:06:46:c5:ad:9f:4c:c8:9c:44:83:ff:0e:37:53:7e:93:
2e:03:92:47:bb:5b:2d:b9:9a:06:61:2d:30:14:57:60:ac:8f:
1c:25:64:f4:a8:e8:f4:c1:3e:07:5f:11:f3:4a:df:2b:84:6f:
34:fb:ff:66:fc:a4:92:75:02:0c:bd:e5:78:37:f6:42:18:d8:
a6:21:56:d5:8f:7b:78:57:ce:4e:cf:19:d5:d5:14:51:9c:4c:
59:52:f9:97:90:99:9f:b0:22:72:47:2f:7e:4b:c1:2a:e3:15:
48:cf:d6:b3:bf:4c:ed:40:80:8a:a4:73:e1:08:48:af:13:1f:
5c:c1:69:38:d2:94:8a:98:78:5d:8a:98:84:e8:b6:25:85:59:
3a:ec:70:39:28:fd:1d:55:17:fc:20:dc:ec:3e:2e:9e:e3:46:
82:a2:68:dd:c2:85:09:31:d0:19:7a:70:dd:cc:0b:4f:78:a4:
b7:dd:1f:2e:1e:02:2c:c9:c6:c7:d7:5b:d1:82:ed:5e:93:16:
fb:e0:8e:41:d5:d5:b2:76:cd:a7:96:e4:60:5c:99:d2:d3:11:
ec:ed:62:33:19:9a:8a:22:7e:9e:39:62:cf:34:5d:59:77:52:
4f:dd:83:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:59 2025 by rpki-client