Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/It8AuG8_e0Uwuhk8q8fBt_Zn4GM.roa
File: It8AuG8_e0Uwuhk8q8fBt_Zn4GM.roa (raw, json)
Hash identifier: +8wfk6KEFiXcpYm24f8lv+U8HH464lLUAwIHU67XdiM=
Subject key identifier: 22:DF:00:B8:6F:3F:7B:45:30:BA:19:3C:AB:C7:C1:B7:F6:67:E0:63
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB93D1FAC402440332AD4BD7703D71
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/It8AuG8_e0Uwuhk8q8fBt_Zn4GM.roa
Signing time: Wed 01 Jan 2025 17:48:20 +0000
ROA not before: Wed 01 Jan 2025 17:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 77.242.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:93:d1:fa:c4:02:44:03:32:ad:4b:d7:70:3d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22df00b86f3f7b4530ba193cabc7c1b7f667e063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:0e:7f:46:a4:51:91:2e:f4:d2:a1:4d:93:
0c:6e:06:73:1a:e8:51:c7:0c:16:93:33:2e:22:7a:
25:dd:a3:44:d3:71:4f:b7:ab:c2:06:5d:14:48:0a:
3b:b8:90:73:67:dc:a2:26:56:df:b8:00:17:3f:1f:
c0:d9:15:12:19:c4:58:06:52:ed:c6:58:9c:fa:81:
1e:44:d2:fe:0b:4d:b2:ff:27:ef:9c:b8:ce:be:6e:
77:9c:02:30:01:41:74:57:4f:e6:82:ea:fe:d5:49:
42:83:0c:7e:b2:fa:6e:fa:22:8d:98:2c:fd:38:11:
76:3c:97:82:90:04:d9:6a:be:a8:f7:54:13:c4:c7:
c1:e1:83:27:bf:4a:5e:e4:0d:49:24:e1:7d:59:b6:
7b:b9:ab:02:3f:61:e3:04:6c:d6:c9:5f:fe:8a:ef:
ce:21:5e:69:6b:2d:8d:f8:2a:36:87:ce:34:aa:e7:
f7:86:5c:60:9d:f6:2a:93:d6:b2:66:a6:5f:ea:a5:
c0:b1:03:7e:41:fc:b7:6f:8f:f8:e1:f5:60:47:92:
71:99:8a:cf:ee:a8:93:6b:b6:2b:5d:dc:5f:47:ed:
be:f9:b3:8d:3c:0b:77:21:8e:f0:f1:e4:64:ca:5f:
1b:fd:cf:ce:eb:9a:e5:8c:79:68:f0:af:da:5c:03:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:00:B8:6F:3F:7B:45:30:BA:19:3C:AB:C7:C1:B7:F6:67:E0:63
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/It8AuG8_e0Uwuhk8q8fBt_Zn4GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.146.0/23
Signature Algorithm: sha256WithRSAEncryption
68:b2:90:9f:53:4e:29:2c:32:19:e8:4d:b6:7d:74:a8:0f:60:
b6:01:3d:d4:12:f8:68:35:b8:89:dc:c2:d5:91:62:8d:c5:fe:
19:40:ac:56:db:fd:d9:f5:3a:2c:16:b5:ba:b3:d7:2c:d0:ce:
63:68:1d:d1:fe:74:41:29:b6:c1:98:ea:63:9a:6f:6c:22:c2:
fe:ba:a7:8e:68:30:6b:32:89:50:ae:3a:a1:f1:b2:dd:f0:94:
2e:6f:cc:01:e3:b3:f7:c5:d2:a9:0c:cc:cd:cc:83:0a:71:e5:
10:a0:cc:bf:80:3b:04:18:16:fa:00:c1:a8:6c:10:62:9e:aa:
67:4e:f8:b6:08:c3:d3:ec:51:09:3b:72:7a:e0:06:e9:2e:d5:
b8:e2:53:a4:0e:a6:67:28:39:6a:fc:14:47:2b:ef:f8:04:9b:
60:0f:f0:cf:45:52:9b:ec:a8:27:a7:fa:d4:47:ba:3c:7b:6e:
90:b6:1c:2e:19:54:e4:08:e0:9a:cf:d5:b6:97:cf:8a:3c:0f:
5b:7e:36:0d:80:e2:d3:80:bb:07:da:af:05:d8:31:7e:6f:6d:
b0:66:13:ef:1e:3f:03:18:d9:07:55:fe:de:44:16:69:e2:c4:
7a:ce:0d:03:28:09:b0:56:dc:63:89:7a:0d:c3:70:92:62:10:
81:ba:50:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:23 2025 by rpki-client