Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/77nHJ74F1fFAwUbmMeRLrxeDdWA.roa
File: 77nHJ74F1fFAwUbmMeRLrxeDdWA.roa (raw, json)
Hash identifier: 2Mtt2AaUFR4ZOfRNdKyuPT3cj2EQ+qy46BQe2ut00YY=
Subject key identifier: EF:B9:C7:27:BE:05:D5:F1:40:C1:46:E6:31:E4:4B:AF:17:83:75:60
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 01941FFAB959CA185BD36230D989B31AD2E5
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/77nHJ74F1fFAwUbmMeRLrxeDdWA.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26506
IP address blocks: 83.2.226.0/23 maxlen: 23
2a01:1100:b001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b9:59:ca:18:5b:d3:62:30:d9:89:b3:1a:d2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efb9c727be05d5f140c146e631e44baf17837560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:3f:5a:ed:4c:7d:ef:87:f6:3b:bf:ad:8b:
22:af:8d:4d:55:4d:e9:6c:29:84:e8:35:14:28:54:
4a:3b:fc:0f:24:1d:42:41:fc:6a:60:c2:6b:55:37:
c2:e9:21:f5:23:1e:79:6a:85:81:75:58:6b:92:43:
82:ca:c7:93:dc:5f:c9:37:2b:9a:e6:c2:e3:62:ac:
47:f0:17:b2:b4:da:fa:0a:35:62:5d:6b:2a:f4:94:
0d:a7:68:ca:cf:e3:90:1f:fe:97:e5:00:9e:ba:e9:
a7:f2:fe:28:f2:ef:7e:9b:0b:bd:58:fd:52:40:f4:
ad:1b:74:3f:94:71:32:91:34:0f:4a:81:67:d8:79:
c9:c0:85:cd:45:d9:48:29:b4:46:c1:e3:a3:98:c9:
52:2e:bc:85:04:01:0c:fc:1c:3c:d6:8f:c2:fe:34:
81:5e:ee:c6:fd:28:63:aa:50:e2:fc:21:7a:05:52:
f7:d5:cb:08:51:8d:62:01:39:f7:3c:87:3b:7a:9d:
ea:e1:8b:b2:4f:21:4e:dc:6c:06:fb:a2:f3:fa:77:
01:40:f0:b9:23:f9:3a:45:9d:fe:5c:98:61:5a:e7:
3a:97:7f:24:fc:ff:5a:b4:3d:17:6e:f1:18:3a:4e:
08:c7:4e:5f:3d:84:be:bb:a7:a5:84:18:37:ff:78:
da:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B9:C7:27:BE:05:D5:F1:40:C1:46:E6:31:E4:4B:AF:17:83:75:60
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/77nHJ74F1fFAwUbmMeRLrxeDdWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.2.226.0/23
IPv6:
2a01:1100:b001::/48
Signature Algorithm: sha256WithRSAEncryption
87:ff:96:d1:6e:96:ee:c3:99:53:a2:fa:29:fa:42:43:fe:b2:
1e:69:f1:10:f9:b1:e3:c9:ce:ba:91:8a:de:cc:5f:44:1b:26:
9b:d9:99:a4:ad:17:57:72:6f:6e:ee:46:ea:da:62:13:04:c8:
ff:89:0a:51:07:99:f4:b2:bd:e3:a2:9a:6c:ef:21:4c:ad:b8:
a5:5c:d5:f6:b9:2e:ef:26:49:d6:c5:46:65:af:e7:10:d9:c2:
c4:c5:f4:cc:22:29:3a:4a:cc:a6:34:70:31:d9:07:71:a3:81:
bd:cc:b0:bd:98:7b:14:b3:14:4a:e1:e8:4d:95:3b:cd:49:22:
05:70:73:34:eb:a9:37:59:2d:75:6d:f4:79:eb:1d:0f:b4:3c:
eb:85:3b:fd:df:14:9b:f1:59:14:1f:57:ca:67:1a:b9:04:fd:
34:5e:6c:07:5a:1e:5a:72:fb:ab:26:60:2f:b3:50:9d:ea:07:
19:30:37:c6:ce:96:d3:74:ed:f6:82:90:4c:77:65:5d:25:24:
51:44:95:39:f8:36:50:14:ff:a0:68:39:b9:eb:7c:c8:1a:29:
08:75:0b:6f:9b:59:77:ee:9e:ba:a7:38:be:2a:12:89:1c:6e:
49:4e:ff:2e:f2:12:40:d4:e1:a2:28:85:a6:f1:6c:81:f8:71:
08:1a:74:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:27 2025 by rpki-client