Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/pbfBEW_OsogwE_0YGdCeMO4TTh0.roa
File: pbfBEW_OsogwE_0YGdCeMO4TTh0.roa (raw, json)
Hash identifier: q9TwuOjN8mO+cMopVaVjK5l861Wdgc4osXaaLclEWro=
Subject key identifier: A5:B7:C1:11:6F:CE:B2:88:30:13:FD:18:19:D0:9E:30:EE:13:4E:1D
Certificate issuer: /CN=866d6a188305a4dc18401aa20d4ce266fd30475e
Certificate serial: 01532FA5
Authority key identifier: 86:6D:6A:18:83:05:A4:DC:18:40:1A:A2:0D:4C:E2:66:FD:30:47:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hm1qGIMFpNwYQBqiDUziZv0wR14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/pbfBEW_OsogwE_0YGdCeMO4TTh0.roa
Signing time: Sat 01 Jan 2022 06:53:36 +0000
ROA not before: Sat 01 Jan 2022 06:53:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201702
IP address blocks: 77.72.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22228901 (0x1532fa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866d6a188305a4dc18401aa20d4ce266fd30475e
Validity
Not Before: Jan 1 06:53:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5b7c1116fceb2883013fd1819d09e30ee134e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:e6:2a:ca:de:7d:50:be:d3:b1:b7:44:f7:
bf:d4:bb:e2:d9:e8:73:6b:cb:ec:1c:50:3a:86:da:
c8:11:8a:c5:75:e6:ff:b8:2e:07:e1:88:66:83:43:
06:46:c2:bc:20:bb:b6:57:e2:db:4f:83:79:88:5d:
d7:c5:8c:bb:81:12:ed:d5:28:3f:94:6e:c5:74:ac:
88:a4:ff:b1:0a:2c:39:d9:1b:5a:51:44:55:1d:62:
23:88:48:21:77:6b:0c:1c:2e:04:ea:d5:44:b2:b1:
ce:4a:41:3c:7a:3a:e6:c3:1b:b5:85:dd:c8:99:1c:
26:21:26:69:03:5d:e5:34:db:82:1a:f4:1c:82:a0:
a0:7f:fa:a7:3f:6b:37:e7:f3:2b:b0:62:e6:89:4d:
9b:d0:dd:5e:38:47:0c:c7:ad:f2:47:e7:0f:19:13:
4d:a4:57:94:78:88:c6:bd:64:65:90:54:e3:97:c0:
ff:fd:87:34:c8:9e:0a:38:9b:b2:15:4f:75:0b:a6:
e7:31:c6:4b:16:fd:83:d3:c1:bd:25:e1:c5:0e:66:
ff:3e:cd:2d:cd:ce:d2:ad:6b:34:6d:b6:83:9a:de:
87:75:de:3b:20:62:20:4a:80:cb:1b:e8:e5:33:f7:
5c:10:b4:8e:de:54:a0:a9:05:2a:24:8d:84:35:de:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B7:C1:11:6F:CE:B2:88:30:13:FD:18:19:D0:9E:30:EE:13:4E:1D
X509v3 Authority Key Identifier:
keyid:86:6D:6A:18:83:05:A4:DC:18:40:1A:A2:0D:4C:E2:66:FD:30:47:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hm1qGIMFpNwYQBqiDUziZv0wR14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/pbfBEW_OsogwE_0YGdCeMO4TTh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/hm1qGIMFpNwYQBqiDUziZv0wR14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.80.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f8:bb:e8:81:be:f7:98:ba:a8:85:72:c3:b6:8e:d1:49:34:
d0:30:4c:b4:69:3a:6f:1a:5d:5f:b2:74:bf:41:12:89:40:32:
62:69:b8:09:8d:99:30:3c:7d:74:36:b8:ee:f9:f6:cc:63:70:
69:a2:2f:e8:9c:ac:73:25:1f:c8:f0:14:d1:93:4b:18:e0:0f:
e1:3f:f7:e6:6b:39:a3:95:98:e4:d6:6a:ae:fd:ee:20:e4:d0:
b3:7f:23:ff:9b:3d:be:f9:9e:03:05:ed:3c:71:b0:e4:ae:df:
7b:76:bb:c6:d8:43:4e:21:3e:1c:81:5e:79:6d:43:85:fb:8b:
06:ad:41:59:be:20:27:60:bf:f3:13:fd:15:e5:59:3d:06:f6:
92:e2:e8:b8:02:ee:26:86:9a:0a:92:9c:be:46:12:24:05:02:
94:7b:40:6c:16:5f:49:01:49:22:f8:44:4e:31:e8:f0:ee:9e:
94:dc:cc:13:2b:80:24:da:07:1d:13:db:01:68:f1:31:94:bb:
80:aa:75:0c:41:95:a8:ee:e2:b6:a7:bf:96:84:89:ba:94:07:
bf:1f:3b:cb:ba:98:bd:4b:49:16:4b:b1:dd:64:92:51:98:40:
97:24:19:9f:54:7b:38:97:92:eb:e7:9b:c0:d2:6f:e5:00:bb:
76:13:cc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:59 2025 by rpki-client