Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/_-cPiGjagGdeMGXwVSMnOTEXoUQ.roa
File: _-cPiGjagGdeMGXwVSMnOTEXoUQ.roa (raw, json)
Hash identifier: VjkJK/rE7uCrzlUX/Qk2sPBANnj2p2YpIoIlFWfs0GE=
Subject key identifier: FF:E7:0F:88:68:DA:80:67:5E:30:65:F0:55:23:27:39:31:17:A1:44
Certificate issuer: /CN=866d6a188305a4dc18401aa20d4ce266fd30475e
Certificate serial: 0152035D
Authority key identifier: 86:6D:6A:18:83:05:A4:DC:18:40:1A:A2:0D:4C:E2:66:FD:30:47:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hm1qGIMFpNwYQBqiDUziZv0wR14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/_-cPiGjagGdeMGXwVSMnOTEXoUQ.roa
Signing time: Sat 01 Jan 2022 06:53:35 +0000
ROA not before: Sat 01 Jan 2022 06:53:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 77.72.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22152029 (0x152035d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866d6a188305a4dc18401aa20d4ce266fd30475e
Validity
Not Before: Jan 1 06:53:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffe70f8868da80675e3065f0552327393117a144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:81:db:88:3c:11:b9:d6:a1:c2:be:82:1d:
3a:16:ff:6f:2d:1b:e3:df:b0:64:02:72:12:85:50:
ca:fe:78:b4:6c:cb:c6:12:98:6d:13:ac:ba:38:af:
cf:09:f9:56:51:4d:fc:72:b8:de:b4:9f:86:8f:50:
75:63:7e:29:56:f9:b3:6a:1c:b2:e3:44:80:f9:88:
b0:ad:5a:dd:e5:60:8e:ab:1f:c4:a2:b9:eb:1c:33:
a6:25:b9:1c:c2:1f:a4:71:82:cd:ad:e6:10:b5:80:
c8:05:77:59:c4:c0:2f:68:f3:8b:c1:28:a2:89:5d:
05:0a:95:f2:4c:c7:bd:1e:89:75:40:36:62:49:5a:
6d:bb:8c:7b:34:bf:a4:88:8b:8d:e0:73:ed:7b:dc:
4a:eb:39:8d:f4:53:3e:e3:ad:0f:45:2d:5f:a6:1c:
74:13:29:26:da:4d:aa:9d:b4:63:a5:e1:9b:6b:a3:
c5:ac:d5:74:63:a0:f3:02:bf:5e:79:80:fa:57:05:
97:62:98:ce:eb:cd:ba:8c:16:19:7c:3b:ad:d3:3d:
b6:73:23:2f:11:91:2f:a6:ad:bf:eb:90:7b:2f:30:
54:51:ea:97:c7:02:76:eb:2d:5a:6b:8a:db:96:50:
52:5a:a4:3e:1f:01:d9:6a:e6:52:aa:a0:31:e2:46:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E7:0F:88:68:DA:80:67:5E:30:65:F0:55:23:27:39:31:17:A1:44
X509v3 Authority Key Identifier:
keyid:86:6D:6A:18:83:05:A4:DC:18:40:1A:A2:0D:4C:E2:66:FD:30:47:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hm1qGIMFpNwYQBqiDUziZv0wR14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/_-cPiGjagGdeMGXwVSMnOTEXoUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/hm1qGIMFpNwYQBqiDUziZv0wR14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.80.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4b:97:91:09:7a:8c:29:a9:6b:c5:3f:5a:3c:63:be:95:cc:
c9:d8:31:5d:c0:cb:c7:13:46:2f:09:e3:96:1d:75:84:ed:39:
e2:40:0d:79:cd:d1:01:27:96:3e:c0:8a:26:db:70:e5:dc:50:
c5:1a:eb:e8:c5:b2:d0:ed:08:02:36:cc:39:67:28:93:42:7a:
13:c4:69:df:83:2f:d4:58:68:22:cb:08:0f:ca:7f:60:b3:2d:
b3:d7:da:b8:2e:6c:a2:17:4d:00:65:96:07:87:d2:da:be:f7:
e2:b1:d5:8f:ab:b5:c7:ac:5c:00:ce:3f:5b:f6:e1:b2:e9:15:
74:b7:b1:ec:c0:2f:36:41:2b:2f:d7:03:60:4e:62:01:04:03:
c4:b3:d5:59:0b:e7:02:1f:55:85:a1:0f:6f:b9:b9:96:98:55:
16:09:53:49:09:2f:16:0e:8a:08:c1:f1:23:fb:11:94:81:8f:
d2:58:4a:9b:7c:b3:a9:ec:8f:a8:b6:6e:7b:b9:1f:5e:98:b8:
a0:70:7a:39:dc:1d:b3:20:4e:1b:8f:ea:21:82:9f:53:07:b8:
ea:fa:46:54:68:25:a5:ee:8f:e2:00:98:2d:ea:6f:51:c0:57:
01:a6:4e:71:7b:c5:db:0d:37:62:cf:f9:47:6d:09:ef:14:99:
44:cc:3c:86
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAVIDXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NjZkNmExODgzMDVhNGRjMTg0MDFhYTIwZDRjZTI2NmZkMzA0NzVlMB4XDTIyMDEw
MTA2NTMzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmZlNzBmODg2OGRh
ODA2NzVlMzA2NWYwNTUyMzI3MzkzMTE3YTE0NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMELgduIPBG51qHCvoIdOhb/by0b49+wZAJyEoVQyv54tGzL
xhKYbROsujivzwn5VlFN/HK43rSfho9QdWN+KVb5s2ocsuNEgPmIsK1a3eVgjqsf
xKK56xwzpiW5HMIfpHGCza3mELWAyAV3WcTAL2jzi8EoooldBQqV8kzHvR6JdUA2
YklabbuMezS/pIiLjeBz7XvcSus5jfRTPuOtD0UtX6YcdBMpJtpNqp20Y6Xhm2uj
xazVdGOg8wK/XnmA+lcFl2KYzuvNuowWGXw7rdM9tnMjLxGRL6atv+uQey8wVFHq
l8cCdustWmuK25ZQUlqkPh8B2WrmUqqgMeJGRfkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT/5w+IaNqAZ14wZfBVIyc5MRehRDAfBgNVHSMEGDAWgBSGbWoYgwWk3BhA
GqINTOJm/TBHXjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2htMXFHSU1GcE53WVFCcWlEVXppWnYwd1IxNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmQvNTZhNjUwLWRhMzAtNGZlNi1hYzcxLTVlMDExOTQ1OTdkYi8x
L18tY1BpR2phZ0dkZU1HWHdWU01uT1RFWG9VUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQv
NTZhNjUwLWRhMzAtNGZlNi1hYzcxLTVlMDExOTQ1OTdkYi8xL2htMXFHSU1GcE53
WVFCcWlEVXppWnYwd1IxNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1IUDANBgkqhkiG9w0BAQsFAAOC
AQEASEuXkQl6jCmpa8U/WjxjvpXMydgxXcDLxxNGLwnjlh11hO054kANec3RASeW
PsCKJttw5dxQxRrr6MWy0O0IAjbMOWcok0J6E8Rp34Mv1FhoIssID8p/YLMts9fa
uC5sohdNAGWWB4fS2r734rHVj6u1x6xcAM4/W/bhsukVdLex7MAvNkErL9cDYE5i
AQQDxLPVWQvnAh9VhaEPb7m5lphVFglTSQkvFg6KCMHxI/sRlIGP0lhKm3yzqeyP
qLZue7kfXpi4oHB6OdwdsyBOG4/qIYKfUwe46vpGVGglpe6P4gCYLepvUcBXAaZO
cXvF2w03Ys/5R20J7xSZRMw8hg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:30 2025 by rpki-client