Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/754749-393a-4560-9e51-dff2c371ab35/1/pH3FR6zD4T1uEhgNbq6pLPYvdjw.roa
File: pH3FR6zD4T1uEhgNbq6pLPYvdjw.roa (raw, json)
Hash identifier: GeNhRv0cGs2td1mNBx5MCzEff6l7S3PKIvE7kdPy8MY=
Subject key identifier: A4:7D:C5:47:AC:C3:E1:3D:6E:12:18:0D:6E:AE:A9:2C:F6:2F:76:3C
Certificate issuer: /CN=c4934a004228d4958065609f31824f0732188f81
Certificate serial: 0182175997F0CD6C0F82970DB3B096D54C9A
Authority key identifier: C4:93:4A:00:42:28:D4:95:80:65:60:9F:31:82:4F:07:32:18:8F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJNKAEIo1JWAZWCfMYJPBzIYj4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/754749-393a-4560-9e51-dff2c371ab35/1/pH3FR6zD4T1uEhgNbq6pLPYvdjw.roa
Signing time: Tue 19 Jul 2022 16:45:23 +0000
ROA not before: Tue 19 Jul 2022 16:45:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 77.241.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:17:59:97:f0:cd:6c:0f:82:97:0d:b3:b0:96:d5:4c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4934a004228d4958065609f31824f0732188f81
Validity
Not Before: Jul 19 16:45:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a47dc547acc3e13d6e12180d6eaea92cf62f763c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:28:67:6e:99:c9:a9:66:7e:de:c7:f4:28:
9b:00:04:0b:ca:30:cd:da:d3:70:ba:eb:69:77:05:
05:53:e9:06:5b:a6:a1:e4:b6:97:1f:a3:a8:0c:61:
d2:3c:cb:5b:32:47:ea:80:35:57:4e:13:91:14:6d:
c0:a7:93:fe:9a:65:36:5a:91:27:f8:35:28:eb:59:
9d:5e:0f:cc:e7:29:8a:0e:41:75:32:54:09:db:93:
a7:5f:9a:19:ee:f9:58:a5:82:29:39:c1:a9:a8:88:
df:1f:1d:ab:78:b9:36:05:e3:5d:61:ee:5d:1e:77:
8a:34:85:c1:12:2d:28:91:9d:d0:31:26:d1:ca:97:
3d:e1:ed:c1:04:d3:61:d0:be:42:7b:3b:76:46:f5:
de:01:e2:73:f8:53:64:4a:4c:a9:04:3f:34:91:c9:
68:1f:8a:37:92:a4:47:84:ef:5e:14:2f:a1:a7:00:
65:13:3d:e2:2d:d2:94:d8:55:18:fe:b6:fe:46:2a:
15:a4:3d:ba:ac:6c:7c:ba:c6:e8:66:ae:fc:6c:df:
48:a4:f0:7d:60:36:34:48:13:04:7f:14:70:6c:42:
2f:57:eb:03:65:69:72:6d:84:6b:19:a5:50:a7:87:
ae:d5:f4:47:2b:a3:f4:7a:e9:24:c2:7c:51:de:9a:
ef:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7D:C5:47:AC:C3:E1:3D:6E:12:18:0D:6E:AE:A9:2C:F6:2F:76:3C
X509v3 Authority Key Identifier:
keyid:C4:93:4A:00:42:28:D4:95:80:65:60:9F:31:82:4F:07:32:18:8F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJNKAEIo1JWAZWCfMYJPBzIYj4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/754749-393a-4560-9e51-dff2c371ab35/1/pH3FR6zD4T1uEhgNbq6pLPYvdjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/754749-393a-4560-9e51-dff2c371ab35/1/xJNKAEIo1JWAZWCfMYJPBzIYj4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.72.0/22
Signature Algorithm: sha256WithRSAEncryption
89:16:e8:4d:8a:7e:02:b5:ab:cb:07:9d:4b:7f:07:0f:0a:c6:
8b:6f:82:41:00:c6:fc:7c:53:3f:10:a2:98:7c:93:03:11:61:
f1:b8:99:4c:59:d5:16:be:20:8a:4b:7e:26:d2:f5:77:ca:8c:
41:a2:d8:43:75:67:47:ea:ab:68:20:d2:ad:61:e4:78:58:ae:
52:9a:85:46:e5:a3:c8:bc:2a:77:a1:11:4c:6b:f6:7e:a0:ae:
92:58:d5:b9:c1:95:e4:cd:30:95:af:37:40:27:e1:0d:1e:55:
dc:5f:48:84:25:83:36:eb:63:12:1c:42:38:9e:28:45:fa:90:
c7:3d:ca:17:43:c8:f6:01:37:fc:57:97:af:7a:9e:60:e2:33:
38:f4:0e:2d:07:6d:67:f2:38:d7:82:e1:8d:2f:d3:20:c9:13:
97:98:93:84:48:e5:19:43:ee:ef:3f:a8:2d:b1:24:23:93:7a:
2e:61:b3:ff:71:3e:d6:0c:0d:e9:ef:72:9f:16:e3:39:85:fc:
b9:0b:1e:88:bf:ce:44:f1:97:35:a1:35:27:e6:f4:aa:92:62:
40:e1:15:01:6a:11:2e:9b:ac:da:02:82:a2:08:a4:b6:d4:7c:
51:d1:e3:86:db:2b:4b:84:19:1d:9d:69:2a:ab:cd:53:68:b2:
4c:a0:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:41 2025 by rpki-client