Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/016795-1a0d-4246-906e-b9c811dd7b90/1/sPpjUlhHhonc53zcGqZMXxPXEMw.roa
File: sPpjUlhHhonc53zcGqZMXxPXEMw.roa (raw, json)
Hash identifier: uS7qm9tzEt+Aqy8hK/sR8da7SuqltQcbCtsUPpE3sHk=
Subject key identifier: B0:FA:63:52:58:47:86:89:DC:E7:7C:DC:1A:A6:4C:5F:13:D7:10:CC
Certificate issuer: /CN=e934ed3029212c8563251c213b7433ac8aefc41d
Certificate serial: 01896478E8A1E9178CB90E5FF31D289B892C
Authority key identifier: E9:34:ED:30:29:21:2C:85:63:25:1C:21:3B:74:33:AC:8A:EF:C4:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TTtMCkhLIVjJRwhO3QzrIrvxB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/016795-1a0d-4246-906e-b9c811dd7b90/1/sPpjUlhHhonc53zcGqZMXxPXEMw.roa
Signing time: Mon 17 Jul 2023 15:29:52 +0000
ROA not before: Mon 17 Jul 2023 15:29:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 77.72.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:e8:a1:e9:17:8c:b9:0e:5f:f3:1d:28:9b:89:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e934ed3029212c8563251c213b7433ac8aefc41d
Validity
Not Before: Jul 17 15:29:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0fa635258478689dce77cdc1aa64c5f13d710cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:38:ed:5b:b8:50:7f:8a:31:cc:9c:85:ec:
f6:46:11:d4:04:a5:b5:4a:20:b0:8e:35:f5:73:36:
fa:a6:97:bb:11:20:18:08:b4:38:a2:91:79:2a:6f:
95:86:18:f1:2b:13:95:77:cd:52:fe:ae:99:91:01:
df:91:7b:58:eb:c7:a6:74:ae:38:db:00:72:cf:70:
1d:22:c1:91:3f:f8:f9:8d:c1:b7:bd:49:f8:7c:b4:
8d:bc:76:4a:11:46:3d:2d:f4:47:14:c3:2b:8d:d9:
ae:16:4b:fd:c0:96:2f:29:fe:b6:70:e6:68:8b:32:
48:bd:d3:73:55:a0:3f:5f:7f:25:fe:58:61:74:82:
a1:33:f9:de:5f:fb:a0:77:3d:4d:58:99:7c:07:69:
bd:03:7a:45:bd:12:55:ac:c1:ca:bf:2e:dd:49:5d:
45:da:10:a3:ba:e1:d7:0c:5d:db:70:10:d2:5d:87:
20:80:d7:ff:26:19:4a:5a:35:a6:9b:ed:3e:b6:b3:
e4:0f:d1:6d:f2:95:67:47:71:b0:08:da:67:d7:d2:
1f:80:52:72:ae:06:d9:54:24:4b:ee:fd:0c:3a:e6:
f4:84:eb:de:5b:ad:53:2a:88:99:e8:d7:52:17:6e:
1c:b8:55:d1:fd:19:9d:3c:9a:a1:38:bd:be:1b:d1:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FA:63:52:58:47:86:89:DC:E7:7C:DC:1A:A6:4C:5F:13:D7:10:CC
X509v3 Authority Key Identifier:
keyid:E9:34:ED:30:29:21:2C:85:63:25:1C:21:3B:74:33:AC:8A:EF:C4:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TTtMCkhLIVjJRwhO3QzrIrvxB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/016795-1a0d-4246-906e-b9c811dd7b90/1/sPpjUlhHhonc53zcGqZMXxPXEMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/016795-1a0d-4246-906e-b9c811dd7b90/1/6TTtMCkhLIVjJRwhO3QzrIrvxB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.84.0/24
Signature Algorithm: sha256WithRSAEncryption
39:71:1b:09:58:25:c6:c2:cf:2a:dd:62:79:bf:c3:3e:08:17:
52:19:78:1c:af:5b:72:e2:58:7b:80:67:13:1e:78:a3:38:07:
20:d0:cb:ca:58:4e:bc:c6:e0:85:f6:0c:fd:c9:03:42:e3:43:
a0:1b:3b:aa:d3:39:9d:5d:1c:89:13:4e:90:5a:74:0e:4f:46:
72:13:4d:b5:2c:59:43:5c:b7:21:f1:ac:71:d8:72:ef:31:e0:
33:8c:91:0d:f7:e8:b7:2e:cd:d4:a4:a5:53:7e:5c:5b:56:ed:
ce:f4:e4:de:57:1a:34:6a:5d:f1:58:93:39:b3:72:d5:5c:9d:
48:ca:8e:31:e8:5f:5e:e0:db:d8:43:ef:e1:43:ca:81:5c:f3:
6f:36:ef:e2:1f:51:0f:d8:82:15:34:0e:d7:a2:91:47:03:47:
65:bc:11:1f:c5:94:34:97:b4:32:32:16:6d:c1:29:76:23:fc:
f8:b7:ed:a1:45:39:cc:56:88:bd:95:ba:58:c6:5f:e7:9f:72:
0a:a8:b3:14:b8:80:2a:e3:81:4c:8b:10:ad:15:f2:4c:b9:d1:
c3:3c:aa:d2:83:28:7c:a3:f4:57:0e:d6:d5:3f:8f:29:9e:6c:
0c:01:b2:e2:a3:ea:80:c6:d0:a9:c3:8b:36:5f:c2:60:92:1e:
12:fa:29:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkeOih6ReMuQ5f8x0om4ksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzRlZDMwMjkyMTJjODU2MzI1MWMyMTNiNzQzM2FjOGFl
ZmM0MWQwHhcNMjMwNzE3MTUyOTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGZhNjM1MjU4NDc4Njg5ZGNlNzdjZGMxYWE2NGM1ZjEzZDcxMGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPA47Vu4UH+KMcychez2RhHUBKW1
SiCwjjX1czb6ppe7ESAYCLQ4opF5Km+VhhjxKxOVd81S/q6ZkQHfkXtY68emdK44
2wByz3AdIsGRP/j5jcG3vUn4fLSNvHZKEUY9LfRHFMMrjdmuFkv9wJYvKf62cOZo
izJIvdNzVaA/X38l/lhhdIKhM/neX/ugdz1NWJl8B2m9A3pFvRJVrMHKvy7dSV1F
2hCjuuHXDF3bcBDSXYcggNf/JhlKWjWmm+0+trPkD9Ft8pVnR3GwCNpn19IfgFJy
rgbZVCRL7v0MOub0hOveW61TKoiZ6NdSF24cuFXR/RmdPJqhOL2+G9EYpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLD6Y1JYR4aJ3Od83BqmTF8T1xDMMB8GA1UdIwQY
MBaAFOk07TApISyFYyUcITt0M6yK78QdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRUdE1Da2hMSVZqSlJ3aE8zUXpySXJ2eEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMTY3OTUtMWEwZC00MjQ2LTkwNmUt
YjljODExZGQ3YjkwLzEvc1BwalVsaEhob25jNTN6Y0dxWk1YeFBYRU13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8wMTY3OTUtMWEwZC00MjQ2LTkwNmUtYjljODExZGQ3Yjkw
LzEvNlRUdE1Da2hMSVZqSlJ3aE8zUXpySXJ2eEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUhUMA0G
CSqGSIb3DQEBCwUAA4IBAQA5cRsJWCXGws8q3WJ5v8M+CBdSGXgcr1ty4lh7gGcT
HnijOAcg0MvKWE68xuCF9gz9yQNC40OgGzuq0zmdXRyJE06QWnQOT0ZyE021LFlD
XLch8axx2HLvMeAzjJEN9+i3Ls3UpKVTflxbVu3O9OTeVxo0al3xWJM5s3LVXJ1I
yo4x6F9e4NvYQ+/hQ8qBXPNvNu/iH1EP2IIVNA7XopFHA0dlvBEfxZQ0l7QyMhZt
wSl2I/z4t+2hRTnMVoi9lbpYxl/nn3IKqLMUuIAq44FMixCtFfJMudHDPKrSgyh8
o/RXDtbVP48pnmwMAbLio+qAxtCpw4s2X8Jgkh4S+in5
-----END CERTIFICATE-----
Generated at Wed Mar 12 13:06:06 2025 by rpki-client