Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/6epEy0HB85djXPoLZEGSqaySSAg.roa
File: 6epEy0HB85djXPoLZEGSqaySSAg.roa (raw, json)
Hash identifier: 9QBBjQLetGTiPsykavuQ/roScg6k4MGfDDEDMtaQJ6g=
Subject key identifier: E9:EA:44:CB:41:C1:F3:97:63:5C:FA:0B:64:41:92:A9:AC:92:48:08
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 01821FF542259007D00DF4C911072DB16B04
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/6epEy0HB85djXPoLZEGSqaySSAg.roa
Signing time: Thu 21 Jul 2022 08:52:23 +0000
ROA not before: Thu 21 Jul 2022 08:52:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 77.73.132.0/24 maxlen: 24
77.73.134.0/24 maxlen: 24
77.73.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1f:f5:42:25:90:07:d0:0d:f4:c9:11:07:2d:b1:6b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jul 21 08:52:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9ea44cb41c1f397635cfa0b644192a9ac924808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:61:70:e4:23:4a:9f:75:8c:07:9d:e7:21:aa:
bf:04:2a:79:ca:fe:7b:a6:cb:68:c8:83:98:61:06:
00:38:8d:e7:63:2d:77:1d:b6:b8:12:fc:0b:a8:b7:
50:15:91:2a:15:f9:0f:86:da:aa:f3:a1:fc:73:2e:
ed:9e:50:14:92:9c:c8:59:ed:00:89:a5:aa:fc:60:
37:31:8e:97:7b:43:f9:a4:1a:d2:87:e9:27:db:67:
52:40:b1:e1:78:8e:b8:7d:cf:4f:4e:a4:66:1d:37:
a0:6c:b1:22:90:da:3d:f5:bc:20:62:c6:3c:b7:db:
0d:a7:d8:17:43:16:2d:bd:32:dc:fe:94:43:4a:02:
43:28:92:3f:9f:7f:d2:a5:bb:aa:c3:bc:7b:c6:90:
96:1d:e3:d3:51:d0:28:92:1a:3e:72:20:ef:e1:ad:
a5:4c:2c:20:07:d5:28:84:3b:68:a0:80:e1:5a:b7:
94:fd:c9:6b:a8:1b:3b:aa:c6:a7:01:64:1a:4d:a1:
29:5e:66:06:21:db:eb:29:f5:0d:bb:74:7d:df:de:
97:4e:a6:de:3a:aa:21:c0:47:d9:59:04:37:fb:39:
30:f8:c7:be:36:4b:5b:aa:dd:13:4e:07:de:19:9e:
87:3f:69:7a:b6:af:cf:60:cd:5d:5b:d9:9e:68:e8:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EA:44:CB:41:C1:F3:97:63:5C:FA:0B:64:41:92:A9:AC:92:48:08
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/6epEy0HB85djXPoLZEGSqaySSAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.132.0-77.73.134.255
Signature Algorithm: sha256WithRSAEncryption
99:a2:fe:59:c7:aa:d1:85:eb:d4:93:3e:6c:1d:38:b1:12:ba:
ea:7a:16:6d:04:94:88:b9:a2:0b:ad:3c:9d:d4:9f:ac:8d:6c:
68:e7:98:8e:e2:85:07:dc:48:0d:38:df:6c:ac:12:f8:bc:9b:
05:8e:b5:46:04:21:60:0e:25:7e:21:44:7d:db:ef:d7:23:ca:
4a:f4:40:32:0c:35:f8:ad:f8:08:ae:75:04:c5:c2:4a:5e:0b:
91:a6:ab:28:a7:e5:72:d3:c7:e4:26:ca:b3:11:53:17:2f:82:
da:b3:83:30:50:8c:96:82:29:c7:5f:8f:d1:fc:e2:43:e9:99:
ed:5b:0d:2a:d3:71:57:4a:ca:a0:c2:a0:69:54:8c:63:35:49:
65:a2:26:96:a1:d5:f8:78:52:0f:8e:8c:23:52:09:e0:b1:7b:
68:b9:03:53:55:d7:14:e6:90:06:22:cf:08:f0:5f:81:9c:7b:
4a:ee:0a:33:9d:0a:da:73:1e:59:60:d0:62:ba:d4:6f:c0:a3:
d9:3d:06:f2:c6:bd:64:5f:f0:d6:9d:7a:93:f8:75:cb:32:b0:
42:89:56:30:f6:67:db:2d:d9:18:75:fd:57:b3:27:2f:42:42:
8d:f4:88:c1:c4:54:d9:15:0a:1e:99:85:37:d3:ec:78:3a:55:
cd:89:dd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:14 2025 by rpki-client