Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/69ac58-1a85-4ae6-bba9-4cd5f0b1adb4/1/eLXGzf0CaSsExzYyt7zcPKhL78I.roa
File: eLXGzf0CaSsExzYyt7zcPKhL78I.roa (raw, json)
Hash identifier: osmbQ3f2X5eQMwtxU/isAlcqNjdJtkamS85eO+cseeI=
Subject key identifier: 78:B5:C6:CD:FD:02:69:2B:04:C7:36:32:B7:BC:DC:3C:A8:4B:EF:C2
Certificate issuer: /CN=5d43b580da6e1700d99aaab9bc8b9ab7237d4789
Certificate serial: 01856D8186C057D2F5457DCB2C601B956430
Authority key identifier: 5D:43:B5:80:DA:6E:17:00:D9:9A:AA:B9:BC:8B:9A:B7:23:7D:47:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUO1gNpuFwDZmqq5vIuatyN9R4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/69ac58-1a85-4ae6-bba9-4cd5f0b1adb4/1/eLXGzf0CaSsExzYyt7zcPKhL78I.roa
Signing time: Sun 01 Jan 2023 13:24:43 +0000
ROA not before: Sun 01 Jan 2023 13:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48011
IP address blocks: 77.87.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:86:c0:57:d2:f5:45:7d:cb:2c:60:1b:95:64:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d43b580da6e1700d99aaab9bc8b9ab7237d4789
Validity
Not Before: Jan 1 13:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78b5c6cdfd02692b04c73632b7bcdc3ca84befc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:83:5c:74:4b:2b:2e:e5:d2:6f:01:26:6c:d4:
58:9b:d0:e1:02:e0:c0:08:3a:52:41:5a:2c:c1:fd:
e0:ff:fd:fa:a7:1b:35:59:dc:aa:f2:e5:b4:23:14:
5c:ed:1b:b3:07:c8:f4:0c:1c:09:74:1b:bc:38:e7:
e6:b7:df:52:12:ce:e6:77:d4:45:7a:98:94:a2:b9:
d5:30:7a:c6:09:4a:2b:dd:94:05:cd:3c:5b:46:c9:
f8:f3:09:ab:45:7c:e3:8d:de:e7:1b:ec:39:fe:c4:
91:6e:af:e0:4d:8c:a1:c4:ff:44:f1:de:14:25:59:
03:ba:66:c1:0e:6b:da:d9:15:ca:f6:70:01:36:59:
39:1c:a2:7b:08:ab:96:b7:65:96:f7:61:ea:07:11:
30:25:9b:49:4b:9a:22:85:e2:be:4f:80:df:6b:c9:
ae:07:e5:ec:79:bd:7b:c7:4c:75:e7:33:70:d8:33:
0e:e2:16:37:61:a6:bc:a4:db:2e:4c:cb:77:fe:58:
40:21:1a:32:f8:2d:07:03:6c:65:0e:e5:36:2b:27:
33:3c:ad:63:8e:df:dd:e7:7e:19:03:1a:c5:d2:7a:
4a:0a:7d:df:7e:bf:24:32:c2:d3:b2:72:64:b8:9a:
a7:32:db:c0:73:c6:f1:29:75:d1:be:d2:25:ea:39:
e3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B5:C6:CD:FD:02:69:2B:04:C7:36:32:B7:BC:DC:3C:A8:4B:EF:C2
X509v3 Authority Key Identifier:
keyid:5D:43:B5:80:DA:6E:17:00:D9:9A:AA:B9:BC:8B:9A:B7:23:7D:47:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUO1gNpuFwDZmqq5vIuatyN9R4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/69ac58-1a85-4ae6-bba9-4cd5f0b1adb4/1/eLXGzf0CaSsExzYyt7zcPKhL78I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/69ac58-1a85-4ae6-bba9-4cd5f0b1adb4/1/XUO1gNpuFwDZmqq5vIuatyN9R4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:16:33:83:7f:48:f0:73:56:9e:9c:bf:06:77:40:62:af:e5:
cb:fd:c9:31:93:95:8b:d9:a8:d3:0e:9d:72:0a:06:c6:27:57:
d3:5a:08:d6:49:d4:61:f0:b4:15:04:1a:26:f4:38:65:fe:a2:
81:ea:65:39:a6:63:b5:de:61:d6:d3:8b:da:18:b8:fc:39:fa:
0a:be:8b:f4:65:1b:bc:1b:b7:76:3b:81:75:0e:19:37:ab:1c:
6f:38:94:21:f8:14:cc:f3:32:53:3a:f9:48:79:9c:40:fa:e2:
e8:64:10:41:11:4c:ca:01:24:db:9e:32:93:81:23:78:36:24:
35:88:5b:e2:cb:14:02:a5:a1:07:94:09:7f:94:3e:16:ea:1a:
6e:8f:9b:c5:ac:01:20:f3:ac:26:7e:56:38:59:ad:9f:38:0a:
64:0e:d4:4e:47:39:2c:e8:6c:5f:14:75:98:f3:fa:6e:5f:0d:
cb:7e:ad:6e:e1:93:1c:65:af:ff:dc:8e:e8:ad:5c:24:0e:8d:
03:65:81:cc:a2:47:cf:3b:fc:69:b5:6d:4f:0c:fb:cd:ba:b7:
81:06:42:13:6d:2a:af:67:37:3b:bd:40:d2:88:cb:d2:50:0a:
af:f2:dd:08:49:03:19:a0:f9:14:b9:a0:57:2d:46:0c:39:26:
2a:3e:6d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:12:11 2025 by rpki-client