Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/7auPkGYdWYxiufj_QWdGbb9UKjo.roa
File: 7auPkGYdWYxiufj_QWdGbb9UKjo.roa (raw, json)
Hash identifier: srdR9J3z05xaxwOndLkx0dIbidUlO8foyj1iZI94OK8=
Subject key identifier: ED:AB:8F:90:66:1D:59:8C:62:B9:F8:FF:41:67:46:6D:BF:54:2A:3A
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 30E9CD03
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/7auPkGYdWYxiufj_QWdGbb9UKjo.roa
Signing time: Sat 01 Jan 2022 10:55:39 +0000
ROA not before: Sat 01 Jan 2022 10:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209203
IP address blocks: 77.78.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820628739 (0x30e9cd03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Jan 1 10:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edab8f90661d598c62b9f8ff4167466dbf542a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:32:4d:fb:78:0f:73:53:3f:5d:67:89:a7:5c:
57:dd:5d:6f:18:4b:ba:34:c5:a7:74:cd:13:16:24:
30:1a:35:da:e6:54:ef:4b:76:e8:0a:b4:7c:e5:05:
ee:ee:29:32:a7:cb:e5:e0:24:a0:c7:31:7f:6d:64:
a5:c9:2c:62:4b:47:dc:80:ad:fd:54:80:e7:7b:85:
a1:f3:49:11:c0:bd:f5:f4:8c:d2:a2:79:2e:29:64:
d7:67:5c:bf:c2:1e:ab:0d:ef:c7:fd:21:f2:68:4d:
94:5c:b0:1a:36:32:0f:f1:0d:7d:bd:ac:ac:9b:a5:
e7:3c:a0:1b:65:6c:17:bf:df:b4:60:3e:00:72:d7:
d0:05:7b:29:9c:73:e2:6f:eb:df:ca:1b:69:a7:10:
fc:bf:26:86:e1:f5:e0:a3:13:01:3b:ae:35:d1:da:
11:9b:f3:f3:10:a3:43:14:6f:4a:98:cb:5b:24:b4:
a4:f9:b9:cd:08:46:c3:2a:d1:4b:29:ef:d9:f5:e2:
59:05:0d:5e:e0:96:24:34:14:2b:3c:79:df:ab:34:
0a:4d:84:7c:22:2b:c8:91:98:f3:b7:b3:40:7f:6e:
80:fb:84:5b:8e:91:89:b9:2c:5c:9f:ae:bb:55:ee:
07:76:0b:4b:6c:80:6d:32:93:f1:ba:8b:35:e3:86:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AB:8F:90:66:1D:59:8C:62:B9:F8:FF:41:67:46:6D:BF:54:2A:3A
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/7auPkGYdWYxiufj_QWdGbb9UKjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.144.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:d2:71:8f:9d:0f:f7:99:66:45:c8:63:68:57:82:b4:f9:8c:
90:87:76:3b:49:bf:bb:a2:38:e0:4b:5a:6f:6e:82:38:a0:bd:
b1:f3:4c:17:ed:96:9c:9f:23:e0:e7:ba:82:e8:49:ff:50:22:
03:9a:3f:4d:ed:60:69:37:4f:94:11:cb:ee:a2:8c:95:b8:0b:
52:55:35:80:6c:7e:5c:72:00:d7:ca:30:fc:29:90:df:34:2d:
8a:a3:52:3d:6c:b1:b0:26:1d:27:50:23:44:72:bb:a5:f0:07:
b1:4c:04:e7:13:a8:1e:8c:4e:fc:3c:ed:07:b4:80:0f:0e:64:
11:6d:3c:65:54:72:0e:4b:7c:40:7f:08:5f:44:dd:0e:c5:ef:
60:6f:c2:59:4f:b7:08:9a:9d:dc:bf:e6:09:30:82:67:82:8a:
78:2b:e9:86:7d:b4:b0:65:5a:f9:2c:5a:5a:6d:28:70:83:0a:
24:48:66:0b:d0:ef:32:83:f5:a2:cf:b2:18:ed:27:bb:96:50:
26:f9:8f:8c:f1:e5:11:21:ba:9e:77:2b:b7:12:7c:40:72:d9:
ff:c1:d0:40:69:b1:27:d7:5d:56:81:74:99:33:cf:80:cd:b8:
20:95:80:86:a3:28:05:78:66:b9:2b:29:74:2e:b4:ac:f8:0b:
29:75:1d:a9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMOnNAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZGQyZTliM2E0ZDdiMjRiM2E2YWExNGYzZWRhM2YxNGZhMjljNzZiMB4XDTIyMDEw
MTEwNTUzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWRhYjhmOTA2NjFk
NTk4YzYyYjlmOGZmNDE2NzQ2NmRiZjU0MmEzYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAP0yTft4D3NTP11niadcV91dbxhLujTFp3TNExYkMBo12uZU
70t26Aq0fOUF7u4pMqfL5eAkoMcxf21kpcksYktH3ICt/VSA53uFofNJEcC99fSM
0qJ5Lilk12dcv8Ieqw3vx/0h8mhNlFywGjYyD/ENfb2srJul5zygG2VsF7/ftGA+
AHLX0AV7KZxz4m/r38obaacQ/L8mhuH14KMTATuuNdHaEZvz8xCjQxRvSpjLWyS0
pPm5zQhGwyrRSynv2fXiWQUNXuCWJDQUKzx536s0Ck2EfCIryJGY87ezQH9ugPuE
W46RibksXJ+uu1XuB3YLS2yAbTKT8bqLNeOGYjMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTtq4+QZh1ZjGK5+P9BZ0Ztv1QqOjAfBgNVHSMEGDAWgBRt0umzpNeySzpq
oU8+2j8U+inHazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JkTHBzNlRYc2tzNmFxRlBQdG9fRlBvcHgycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvY2Q5YmM4LTExYzUtNGY1YS1iYjI1LTQ1YWU3YjNkYWU2OC8x
LzdhdVBrR1lkV1l4aXVmal9RV2RHYmI5VUtqby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
Y2Q5YmM4LTExYzUtNGY1YS1iYjI1LTQ1YWU3YjNkYWU2OC8xL2JkTHBzNlRYc2tz
NmFxRlBQdG9fRlBvcHgycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1OkDANBgkqhkiG9w0BAQsFAAOC
AQEAnNJxj50P95lmRchjaFeCtPmMkId2O0m/u6I44Etab26COKC9sfNMF+2WnJ8j
4Oe6guhJ/1AiA5o/Te1gaTdPlBHL7qKMlbgLUlU1gGx+XHIA18ow/CmQ3zQtiqNS
PWyxsCYdJ1AjRHK7pfAHsUwE5xOoHoxO/DztB7SADw5kEW08ZVRyDkt8QH8IX0Td
DsXvYG/CWU+3CJqd3L/mCTCCZ4KKeCvphn20sGVa+SxaWm0ocIMKJEhmC9DvMoP1
os+yGO0nu5ZQJvmPjPHlESG6nncrtxJ8QHLZ/8HQQGmxJ9ddVoF0mTPPgM24IJWA
hqMoBXhmuSspdC60rPgLKXUdqQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:22:14 2025 by rpki-client