Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/haSDZcVTGVgJ505WYLHBDHp5Y50.roa
File: haSDZcVTGVgJ505WYLHBDHp5Y50.roa (raw, json)
Hash identifier: 7CYaR8pNmxezuRRj7Ha1T2UXlndTt1N1CjL09WwF/cw=
Subject key identifier: 85:A4:83:65:C5:53:19:58:09:E7:4E:56:60:B1:C1:0C:7A:79:63:9D
Certificate issuer: /CN=875a4d852d6f2e59e937adbf1128fc24b0d40900
Certificate serial: 0189A067D52D6AA746AF376C3FC33AC1C82E
Authority key identifier: 87:5A:4D:85:2D:6F:2E:59:E9:37:AD:BF:11:28:FC:24:B0:D4:09:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1pNhS1vLlnpN62_ESj8JLDUCQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/haSDZcVTGVgJ505WYLHBDHp5Y50.roa
Signing time: Sat 29 Jul 2023 06:48:26 +0000
ROA not before: Sat 29 Jul 2023 06:48:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.72.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a0:67:d5:2d:6a:a7:46:af:37:6c:3f:c3:3a:c1:c8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875a4d852d6f2e59e937adbf1128fc24b0d40900
Validity
Not Before: Jul 29 06:48:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85a48365c553195809e74e5660b1c10c7a79639d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:66:ab:63:39:15:e7:f3:70:d7:52:5d:ba:
3c:27:b9:eb:92:62:ff:c2:b6:83:72:dc:f1:d4:20:
94:8d:e9:07:89:29:07:de:18:7f:47:42:a5:fe:a3:
59:3c:a7:ec:f7:f4:1a:17:f1:50:7d:f1:1f:ae:46:
18:f6:e4:83:94:d4:b2:1b:7d:fe:de:a4:9e:b1:f3:
39:94:87:ec:05:ef:00:13:15:e3:63:9c:00:6c:b2:
53:ca:74:e5:c4:97:51:52:a5:f9:b8:2f:2e:83:9e:
ed:f1:93:23:9b:b4:72:3b:48:97:90:0e:58:71:ac:
8c:3d:05:b4:aa:6e:10:55:53:d9:b1:84:e8:b3:a9:
78:6c:ec:e0:9d:10:90:ba:93:3c:8e:ad:ca:7a:9d:
84:ec:9c:ee:bf:d6:f9:3b:50:70:fa:46:36:7d:07:
6f:63:21:ab:13:d7:2c:c8:8b:45:89:69:f0:9e:31:
f1:00:18:cc:b3:85:2b:08:12:59:63:f9:3b:47:fd:
03:1d:6c:79:44:b1:43:7b:22:ee:54:d5:ad:4a:db:
cf:74:c4:26:03:0b:c7:e5:61:23:54:7e:c9:2d:d1:
78:ac:84:83:5e:75:49:d1:e8:42:c6:1c:92:5d:03:
35:dd:e9:3e:35:5c:9b:47:aa:7a:df:9e:b5:f9:b2:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A4:83:65:C5:53:19:58:09:E7:4E:56:60:B1:C1:0C:7A:79:63:9D
X509v3 Authority Key Identifier:
keyid:87:5A:4D:85:2D:6F:2E:59:E9:37:AD:BF:11:28:FC:24:B0:D4:09:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1pNhS1vLlnpN62_ESj8JLDUCQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/haSDZcVTGVgJ505WYLHBDHp5Y50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/h1pNhS1vLlnpN62_ESj8JLDUCQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.81.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:cb:71:f6:52:e4:f2:e6:78:d9:46:b1:84:5a:6d:99:a5:bd:
cb:d2:c9:fb:a1:57:4c:2c:e7:fb:7e:59:bc:04:af:76:aa:0d:
92:df:f8:bf:0e:94:62:6f:79:fa:6b:d4:b2:0e:83:81:ca:ed:
80:a8:6e:03:fa:fa:86:45:d0:61:3d:6d:03:2b:cc:30:d1:b7:
bf:68:77:74:20:1a:ad:0d:cc:79:6e:25:80:3f:59:66:80:6a:
36:6b:d2:f4:5b:0b:16:11:d3:86:d1:54:e5:85:1f:1a:86:9b:
bf:15:58:53:f8:ba:03:99:49:1b:72:df:17:65:55:91:74:ea:
ab:5e:d1:69:80:6a:58:75:d1:5b:9e:f8:60:63:c0:6a:63:1f:
bf:b4:f0:ff:98:98:38:bf:ea:c2:0b:a4:62:4a:78:e3:da:7e:
14:d7:bf:31:5a:ec:51:8a:ef:78:c7:59:3e:b0:78:d9:0d:f2:
b1:69:ae:ac:c3:a4:33:62:4b:e2:a3:59:24:db:2e:bb:22:ae:
98:a1:f6:91:77:c0:8b:5a:00:ff:81:49:d3:ad:2f:44:70:62:
bc:a2:34:9c:6b:a0:ce:ea:e2:c6:1d:85:e3:74:eb:a5:ea:ad:
93:c4:8a:44:be:47:e4:07:b2:36:ef:5d:ea:5d:f5:3b:9e:eb:
e3:8d:f8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:54:31 2025 by rpki-client