Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/c6rU0OAglfoIJ3LrezeXnYQQzLY.roa
File: c6rU0OAglfoIJ3LrezeXnYQQzLY.roa (raw, json)
Hash identifier: iezJcOqCMvfKxyYCUE7qjt4EThO86SFJt6QK9lkyA04=
Subject key identifier: 73:AA:D4:D0:E0:20:95:FA:08:27:72:EB:7B:37:97:9D:84:10:CC:B6
Certificate issuer: /CN=866d6a188305a4dc18401aa20d4ce266fd30475e
Certificate serial: 018B60FC18F4CB25C400959B4724935E94D0
Authority key identifier: 86:6D:6A:18:83:05:A4:DC:18:40:1A:A2:0D:4C:E2:66:FD:30:47:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hm1qGIMFpNwYQBqiDUziZv0wR14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/c6rU0OAglfoIJ3LrezeXnYQQzLY.roa
Signing time: Tue 24 Oct 2023 09:20:16 +0000
ROA not before: Tue 24 Oct 2023 09:20:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34412
IP address blocks: 77.72.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:fc:18:f4:cb:25:c4:00:95:9b:47:24:93:5e:94:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866d6a188305a4dc18401aa20d4ce266fd30475e
Validity
Not Before: Oct 24 09:20:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73aad4d0e02095fa082772eb7b37979d8410ccb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:e3:8b:dd:a0:f7:4a:72:d5:14:be:80:87:
26:1b:bf:f9:0f:d2:90:52:7c:44:c9:95:b6:77:c1:
3d:77:cf:0f:d4:01:26:fc:c7:bf:e3:27:4b:a9:8e:
8e:0f:05:1b:5e:84:ea:2b:5a:cc:0e:d3:c5:50:f2:
37:9f:f1:d4:f3:8c:f3:3d:54:1b:56:a4:c0:2e:da:
73:83:d7:79:9b:22:39:55:11:36:b8:d7:63:b7:7a:
75:e9:dc:cc:68:aa:dc:18:89:82:94:25:93:88:22:
50:d2:ff:5a:10:a4:d2:e6:53:3d:4f:de:1c:43:e6:
4f:11:25:90:cc:5d:26:93:57:78:97:1d:46:0b:44:
b3:3c:dc:b3:7c:be:b4:dd:f2:df:c6:2a:6e:b1:90:
6a:1b:fa:b2:07:5a:34:f4:75:12:0d:1b:ce:74:7b:
d1:b6:57:30:ba:ea:46:03:41:8b:68:8c:0f:5d:86:
70:43:5c:92:d7:a6:a8:d3:1a:65:bf:d5:6d:6b:8a:
c2:a2:83:0b:2e:4d:e8:f9:08:d3:d8:48:20:c7:10:
c5:bb:dd:c5:26:3a:5d:ba:f8:32:47:e9:d3:df:ee:
f6:f3:ab:36:a0:10:81:11:af:61:42:1d:90:e6:9c:
2b:e5:f1:e1:af:4b:b4:dd:ff:f5:79:60:d0:c1:2b:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AA:D4:D0:E0:20:95:FA:08:27:72:EB:7B:37:97:9D:84:10:CC:B6
X509v3 Authority Key Identifier:
keyid:86:6D:6A:18:83:05:A4:DC:18:40:1A:A2:0D:4C:E2:66:FD:30:47:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hm1qGIMFpNwYQBqiDUziZv0wR14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/c6rU0OAglfoIJ3LrezeXnYQQzLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/hm1qGIMFpNwYQBqiDUziZv0wR14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.80.0/24
Signature Algorithm: sha256WithRSAEncryption
07:2f:00:6d:69:64:28:77:68:25:b2:e8:f8:f5:1d:5c:54:c1:
10:ac:26:fd:dd:b8:26:99:db:2d:e5:7c:66:3f:5a:47:2d:df:
cb:97:10:ee:79:e2:40:10:d3:55:3b:a8:5f:91:5a:9b:93:1c:
e8:d5:3a:9b:fe:d5:22:50:3d:15:cc:9f:a1:52:1f:f2:01:c2:
82:76:75:e4:67:36:62:d7:b7:5a:c9:53:1a:4b:49:62:cb:d9:
dd:42:25:12:a9:82:0c:b4:95:66:80:63:71:e0:a1:d1:92:2d:
73:13:9a:76:a4:11:1b:ab:0f:f3:da:77:a2:c0:69:aa:e2:82:
71:44:7c:44:25:f6:86:80:ea:80:42:f3:67:50:d8:3e:a4:67:
8c:16:a1:d5:52:03:1b:80:68:19:5f:6c:e0:8c:9d:d9:86:c9:
5f:1a:03:cb:39:00:34:d9:37:89:bc:aa:e0:76:32:9d:d4:0e:
c0:28:cc:83:33:6f:04:2f:98:a1:24:0b:c9:a8:9d:de:8c:d7:
e2:44:01:6c:31:17:ad:64:31:a0:16:5a:71:ed:72:6d:1b:08:
2a:58:64:b2:65:5c:8f:61:6a:71:8f:1e:da:f4:c6:5e:df:c2:
78:44:6e:91:61:ad:ee:a2:7b:ca:ab:75:f6:79:66:e0:34:6e:
4e:68:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:22 2025 by rpki-client