Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/bPgbVLnmH00m3A9e8vpi4_tckHw.roa
File: bPgbVLnmH00m3A9e8vpi4_tckHw.roa (raw, json)
Hash identifier: igglTUhwC3UK4lKDSxHILnL/SySyfEY4gOBJlinZwPM=
Subject key identifier: 6C:F8:1B:54:B9:E6:1F:4D:26:DC:0F:5E:F2:FA:62:E3:FB:5C:90:7C
Certificate issuer: /CN=a0e03c7792a884734ecd34eb42c7c5049f0c769e
Certificate serial: 0309AA81
Authority key identifier: A0:E0:3C:77:92:A8:84:73:4E:CD:34:EB:42:C7:C5:04:9F:0C:76:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/bPgbVLnmH00m3A9e8vpi4_tckHw.roa
Signing time: Sat 01 Jan 2022 14:02:30 +0000
ROA not before: Sat 01 Jan 2022 14:02:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57237
IP address blocks: 77.71.116.0/22 maxlen: 22
77.71.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50965121 (0x309aa81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e03c7792a884734ecd34eb42c7c5049f0c769e
Validity
Not Before: Jan 1 14:02:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cf81b54b9e61f4d26dc0f5ef2fa62e3fb5c907c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:0f:8f:49:7a:ef:e0:ad:45:5a:7c:61:95:
1a:df:43:27:b9:bb:91:7b:7e:00:fb:45:6b:ba:4a:
85:b3:19:e8:66:05:d8:1f:12:0a:18:87:a1:5e:06:
04:08:c7:4e:7d:34:6d:0b:83:49:15:f8:a4:8d:55:
20:32:22:b0:71:09:22:23:9d:ac:e6:08:0f:70:31:
61:20:70:e3:26:25:48:30:00:30:8f:b9:de:6e:a6:
70:90:79:79:b2:45:c8:93:0c:fc:63:6f:6f:2e:c1:
62:61:0c:20:68:75:9c:6e:d6:67:0f:2f:7f:1d:63:
63:3c:bf:0d:6c:0a:fa:52:eb:04:a9:7b:ce:e7:cd:
a5:59:80:2c:f2:0d:d6:c9:99:3d:bb:5c:07:1a:b9:
2d:af:78:bc:d1:40:de:e6:af:8c:e6:64:f9:2e:0a:
7d:5f:0f:83:98:d2:a1:5f:c3:4d:7f:55:2e:81:3a:
98:d0:32:8b:07:f4:e0:46:c2:71:31:21:28:09:60:
1a:0d:5d:b7:b2:21:4c:67:f3:bc:46:12:8b:64:4d:
b8:19:47:3f:60:1b:98:9c:1d:82:57:3e:5a:ab:c4:
b0:e5:9f:a6:4d:87:60:14:38:45:cd:03:4d:32:30:
36:10:52:b9:be:eb:4c:98:ee:f7:ea:a7:d4:fb:99:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F8:1B:54:B9:E6:1F:4D:26:DC:0F:5E:F2:FA:62:E3:FB:5C:90:7C
X509v3 Authority Key Identifier:
keyid:A0:E0:3C:77:92:A8:84:73:4E:CD:34:EB:42:C7:C5:04:9F:0C:76:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/bPgbVLnmH00m3A9e8vpi4_tckHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.71.116.0-77.71.127.255
Signature Algorithm: sha256WithRSAEncryption
35:c3:46:75:6c:9b:3e:b2:02:10:2b:41:bc:18:de:f6:c1:f4:
05:57:31:55:64:4c:38:14:5c:0b:e6:02:8f:e9:b8:4b:c5:d0:
0e:a4:fa:ee:ac:ae:e2:c3:01:02:7b:a7:45:da:2e:70:b8:58:
57:fa:90:ed:01:a6:86:72:d8:db:3b:87:13:3d:7f:1a:0e:b3:
e3:cf:69:8e:1e:c5:75:15:d8:a3:f5:b9:b3:17:76:a7:8f:bb:
a4:4f:4a:38:fb:a3:8e:13:ad:34:1c:2d:87:07:1c:a7:64:4d:
15:fb:b7:bd:2b:78:54:67:ce:87:01:0c:2c:bc:57:41:e5:22:
f4:fd:ba:b2:cc:0d:1b:13:ce:61:07:91:e8:5d:87:8d:1d:4e:
a5:9a:f2:28:6b:d4:e5:f8:35:b1:72:ef:24:a7:b6:bf:d0:14:
c6:11:b6:f8:4f:bd:57:50:15:95:bc:af:10:88:84:2a:fc:ef:
85:0c:12:ba:c2:25:79:1f:d6:15:e5:05:c4:6e:4b:70:1e:ff:
e9:fa:fa:5a:cc:5e:fd:67:f9:e0:de:fc:d2:fe:0e:4d:da:15:
9a:64:6a:96:3c:4a:96:e9:45:2b:ae:1d:a4:01:ca:89:46:99:
a5:b4:07:83:6c:f5:db:31:20:bf:71:05:a0:12:25:e0:4d:16:
c1:75:bf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:17 2025 by rpki-client