Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/72BPN8l7tFBtxzBDuv5RQSIARP4.roa
File: 72BPN8l7tFBtxzBDuv5RQSIARP4.roa (raw, json)
Hash identifier: OQUUuSe9nI7N7g8r9xBQPqyeksosxnqhK/PrjE7GWD0=
Subject key identifier: EF:60:4F:37:C9:7B:B4:50:6D:C7:30:43:BA:FE:51:41:22:00:44:FE
Certificate issuer: /CN=212268a7d5106a342219aab86b13d92be96d4cbc
Certificate serial: 17EEADBD
Authority key identifier: 21:22:68:A7:D5:10:6A:34:22:19:AA:B8:6B:13:D9:2B:E9:6D:4C:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISJop9UQajQiGaq4axPZK-ltTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/72BPN8l7tFBtxzBDuv5RQSIARP4.roa
Signing time: Wed 30 Mar 2022 08:01:29 +0000
ROA not before: Wed 30 Mar 2022 08:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49234
IP address blocks: 77.87.224.0/21 maxlen: 21
77.87.224.0/22 maxlen: 22
77.87.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401518013 (0x17eeadbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212268a7d5106a342219aab86b13d92be96d4cbc
Validity
Not Before: Mar 30 08:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef604f37c97bb4506dc73043bafe5141220044fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:63:6b:37:46:ab:9e:82:d7:f2:f3:20:bc:
61:cc:c9:5d:be:8a:62:40:18:18:08:62:8d:53:96:
9e:08:6d:21:26:b5:0e:dc:42:f4:4b:7b:62:b8:64:
42:5f:e2:ce:35:09:a3:82:19:b9:e1:c0:ac:b2:fd:
14:53:0c:82:10:2b:ad:87:46:ce:b8:36:4e:1a:e1:
57:3e:18:31:6b:22:3c:31:4d:f5:8d:04:08:45:c3:
98:70:10:41:22:29:5e:81:10:4d:e1:16:86:6c:33:
c1:98:73:42:82:77:01:25:92:57:21:c6:42:83:e2:
93:07:79:e1:e5:f9:67:fa:c9:cb:da:cb:4c:8a:ad:
c5:d8:0b:05:06:6c:89:5a:1d:04:58:e9:22:78:bf:
f6:4c:c8:7f:fc:53:5b:8a:27:44:58:2b:e8:f0:ea:
12:b2:72:c4:51:45:09:5f:96:25:7b:cb:a8:93:15:
5a:ce:20:9b:04:7c:e9:f0:b5:6a:c0:1b:71:3c:d1:
b0:c2:7d:21:7d:f1:9b:71:4c:92:47:89:86:3d:76:
2c:a7:76:68:ea:a0:81:e7:f8:be:a9:d8:4f:2b:9a:
9f:e4:f3:14:8e:86:c8:dd:f9:aa:db:d6:df:3b:50:
8a:f0:71:49:8a:cc:00:e4:67:03:32:49:30:62:d3:
00:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:60:4F:37:C9:7B:B4:50:6D:C7:30:43:BA:FE:51:41:22:00:44:FE
X509v3 Authority Key Identifier:
keyid:21:22:68:A7:D5:10:6A:34:22:19:AA:B8:6B:13:D9:2B:E9:6D:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISJop9UQajQiGaq4axPZK-ltTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/72BPN8l7tFBtxzBDuv5RQSIARP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/ISJop9UQajQiGaq4axPZK-ltTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.224.0/21
Signature Algorithm: sha256WithRSAEncryption
13:9c:d5:ed:3d:ff:93:23:5b:63:14:96:d1:35:b6:73:b3:66:
ca:bd:ed:a5:9a:9c:ad:f9:06:fb:8e:81:0a:f6:f6:18:2c:16:
ae:4f:4c:eb:1e:f2:e9:01:4b:a7:3c:be:ca:45:f0:64:e9:ce:
e9:ec:d2:d4:44:ea:8c:d6:a4:11:68:40:54:91:fa:89:42:61:
52:0c:61:14:33:bf:d9:9e:4d:56:2c:3a:e9:a1:c0:ce:2a:20:
e4:ed:9a:cd:5a:5d:21:87:5d:35:cc:c4:4e:3f:6d:b8:59:9c:
fa:e2:3b:59:72:3a:c5:ba:42:a8:71:a2:1f:ab:1a:6b:84:f1:
a4:2a:fb:0d:fc:38:31:66:03:a4:b2:63:01:c2:d5:a2:03:c9:
12:cd:e5:ca:68:bf:73:c2:fe:8d:16:23:5c:52:a5:ce:68:ce:
86:04:ab:36:9f:0c:5d:ea:71:4b:53:c7:8f:02:1b:b1:3b:3c:
5d:7d:9e:71:e6:88:54:f1:f7:24:2c:9f:3d:7c:bf:45:dc:53:
fc:67:32:83:69:a7:55:d1:8e:20:1c:fe:c4:ab:99:5b:a1:29:
ee:fe:5d:c7:bd:af:90:5e:3c:c2:4b:01:32:dd:d9:0c:e1:a0:
2b:fc:13:54:c8:c6:33:76:d1:1a:5d:11:e1:59:d2:a0:f6:b3:
15:4a:f2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:45 2024 by rpki-client on console-ams.rpki-client.org