Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cBzbnTrf5AnpGkrmIUMsPfeDZZ0.roa
File: cBzbnTrf5AnpGkrmIUMsPfeDZZ0.roa (raw, json)
Hash identifier: yy6jz6gSnNRr0dclgG1ICVL0BX+d5V3hWCvwzBn3uSo=
Subject key identifier: 70:1C:DB:9D:3A:DF:E4:09:E9:1A:4A:E6:21:43:2C:3D:F7:83:65:9D
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F8AB588AEE388E5B1EAF0E77BD0F7
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cBzbnTrf5AnpGkrmIUMsPfeDZZ0.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44345
IP address blocks: 77.83.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8a:b5:88:ae:e3:88:e5:b1:ea:f0:e7:7b:d0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=701cdb9d3adfe409e91a4ae621432c3df783659d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:9f:e6:99:e5:9d:b1:92:c3:4c:11:13:85:
0f:40:33:e6:58:ad:9a:c4:c7:18:28:61:65:bd:e2:
df:95:8c:56:c1:01:b1:e0:9c:a2:9f:fa:1a:26:a6:
2e:7c:d2:98:22:0a:07:88:ac:c3:36:d6:3f:e3:c1:
7e:e0:40:5f:ee:b9:d0:b4:57:12:99:c8:34:25:6f:
e9:81:14:5b:f4:32:38:14:09:1a:17:46:9b:6c:ab:
50:3b:61:ad:36:c6:c4:65:ec:f3:1b:a4:16:04:f3:
2f:07:a8:4f:05:c7:d5:19:d1:c7:59:a1:5f:f7:f5:
51:e5:3a:c4:c2:62:58:fd:f0:b7:1e:ae:a3:a5:77:
e8:85:d7:d8:ef:81:9f:ef:be:51:48:3d:15:8c:26:
6c:52:c0:b6:a6:65:a8:01:af:01:4e:58:a2:d5:3a:
1a:85:96:92:7a:17:10:7e:a8:93:ce:9d:d9:26:8b:
a7:8a:a9:e3:47:41:5f:d4:36:92:be:81:c9:6e:f3:
c0:b9:c5:de:7c:37:68:51:38:07:f6:e8:37:d1:80:
b0:20:27:f8:11:c5:d1:c5:99:f0:ea:37:2b:e7:9a:
bc:c4:4c:20:5c:76:c5:91:4a:24:d5:68:15:22:d8:
26:96:ee:6a:b5:b6:da:bb:15:98:26:ba:b6:bb:d9:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1C:DB:9D:3A:DF:E4:09:E9:1A:4A:E6:21:43:2C:3D:F7:83:65:9D
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cBzbnTrf5AnpGkrmIUMsPfeDZZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.74.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b1:02:8a:f2:02:c0:29:4a:d8:ed:7b:1d:c9:b6:42:d4:69:
66:64:0a:55:4c:c9:9b:99:cf:46:7e:76:5e:f0:58:98:7b:5e:
a4:0f:5c:8a:a8:99:bd:99:93:6f:7b:43:7e:88:ed:e3:5e:03:
18:06:6d:5e:34:13:81:16:5a:3b:78:09:2f:26:2d:64:42:de:
22:75:e0:55:c2:2d:50:a0:94:08:b0:4d:6e:95:19:2b:3c:b7:
c1:54:93:c4:5a:5e:90:1c:6a:1f:ec:5a:a9:c9:23:49:dc:c4:
48:9a:c1:04:87:23:c8:65:8f:5a:6a:25:62:0b:d2:41:19:b2:
be:80:8d:48:32:a5:d5:7f:4f:f4:20:0d:e8:68:ce:2e:1f:e7:
35:09:38:e5:eb:c0:1b:af:0e:5b:df:6d:42:02:b6:1d:85:ab:
78:ca:a9:3b:d9:b9:86:e8:08:df:77:fe:76:1e:8c:ac:32:65:
51:81:51:d3:92:b8:1b:09:83:04:2c:70:5b:c8:ed:78:28:ef:
a7:fd:58:f8:2e:4d:0c:73:8e:32:27:02:a3:a2:9b:5b:8f:e2:
c3:f0:63:4e:af:a6:e3:c5:51:ea:dc:35:46:09:24:2e:4a:96:
bd:de:1e:15:f9:25:24:7d:49:1e:40:5e:11:22:ba:7a:ee:ef:
fc:8d:54:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:39 2025 by rpki-client