Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/yS8ebEgIQMLJj6zVlOEGdyvp0zw.roa
File: yS8ebEgIQMLJj6zVlOEGdyvp0zw.roa (raw, json)
Hash identifier: OxMjIeKqCrwAl5jplJjoAUCkjvqaqRR0946Lakf364k=
Subject key identifier: C9:2F:1E:6C:48:08:40:C2:C9:8F:AC:D5:94:E1:06:77:2B:E9:D3:3C
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 019422FC174271CFC97F59E21912253D3832
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/yS8ebEgIQMLJj6zVlOEGdyvp0zw.roa
Signing time: Wed 01 Jan 2025 17:48:53 +0000
ROA not before: Wed 01 Jan 2025 17:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34002
IP address blocks: 209.222.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:17:42:71:cf:c9:7f:59:e2:19:12:25:3d:38:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c92f1e6c480840c2c98facd594e106772be9d33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:38:54:cd:9f:61:43:9f:e6:e2:58:49:6c:
de:3a:3d:f3:77:f3:99:89:02:df:7f:05:c1:4a:c2:
95:d6:a2:4d:e9:31:89:a9:f3:c9:c9:5a:81:b9:a9:
2e:e5:9a:0d:37:f8:4e:c2:08:eb:ff:16:22:1d:76:
1a:83:ed:6a:b5:dd:3b:ed:2c:5b:5d:58:57:25:22:
e4:d1:73:f4:0d:2e:0a:8a:01:e8:eb:2c:ea:2b:fd:
3e:3c:bb:28:c1:88:6f:22:81:1c:61:02:55:92:29:
5c:a7:58:90:c9:af:91:47:de:21:10:56:34:37:d4:
8b:d0:e7:9c:77:f0:39:88:17:d6:94:7a:cc:04:d7:
64:01:7c:bb:a2:23:5c:97:27:c7:ef:98:e4:d5:2f:
fa:cf:5a:ad:15:cc:bb:22:63:95:fd:bf:d2:d2:48:
1f:40:5d:f2:17:10:f3:50:9b:af:44:15:72:7b:05:
1b:38:bc:c7:26:74:fa:5a:57:16:de:2b:62:2f:01:
8a:85:d7:e6:60:4f:d2:ee:ab:e4:5b:f7:1c:c8:e8:
fb:74:38:dc:18:c0:8c:c7:cc:cf:c7:60:94:e6:30:
96:88:7d:35:8d:70:b2:00:74:4e:57:ea:ed:40:64:
87:49:dd:db:5b:d7:59:66:7c:3d:6e:bd:a0:b7:3c:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2F:1E:6C:48:08:40:C2:C9:8F:AC:D5:94:E1:06:77:2B:E9:D3:3C
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/yS8ebEgIQMLJj6zVlOEGdyvp0zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.222.77.0/24
Signature Algorithm: sha256WithRSAEncryption
52:7d:27:59:92:61:c3:75:57:cb:a1:a5:2c:d5:2c:a6:ac:61:
ce:fa:eb:95:9e:87:c1:98:62:e6:8a:d7:d1:a0:8a:56:c2:f6:
ee:d8:9f:0a:ca:13:05:9f:f3:61:9a:0a:2a:88:36:7c:ee:bd:
d4:48:bc:19:2a:01:50:34:94:67:ac:0f:14:f0:a1:00:a0:77:
1b:bf:bf:ca:34:93:25:1d:32:d4:79:10:85:d8:5d:2f:44:ae:
98:c4:f9:e5:c5:3a:d9:35:1c:d8:5b:1a:73:c2:df:d7:44:d6:
81:7e:32:bb:8b:47:75:cb:0b:ed:73:68:2b:b2:28:31:06:21:
e1:00:7d:84:95:b8:5e:00:ad:05:3f:f0:a5:19:15:23:7c:50:
8c:9f:4b:ff:aa:9f:a2:f2:df:22:ee:f7:d2:df:65:43:7e:4b:
ed:88:58:7e:17:68:88:3e:d0:96:88:47:b7:5a:c3:38:f0:5f:
87:d9:82:06:89:c8:75:f5:2a:51:4f:f3:12:14:47:8e:88:d9:
1e:0c:77:e9:e0:8d:54:85:11:6f:54:0f:42:3d:e3:b6:a8:23:
88:b4:c7:d1:d6:aa:ea:6a:e1:53:7c:e1:de:66:15:59:93:14:
68:9d:69:2b:15:0b:35:19:1e:1e:c8:bb:76:1b:84:2b:76:b6:
67:fe:06:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:18 2025 by rpki-client on console.sobornost.net