Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa
File: 7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa (raw, json)
Hash identifier: A/dQyVGugZPPzzKbUernmnmEYkigB1EDFhlRwxZgoK0=
Subject key identifier: EC:16:7A:9F:E9:AA:41:E4:BB:5A:FC:5B:CD:07:03:4F:23:0F:3C:60
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 01942143F0D31774AA21793386D93E526493
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa
Signing time: Wed 01 Jan 2025 09:48:08 +0000
ROA not before: Wed 01 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50656
IP address blocks: 77.73.168.0/24 maxlen: 24
77.73.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f0:d3:17:74:aa:21:79:33:86:d9:3e:52:64:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec167a9fe9aa41e4bb5afc5bcd07034f230f3c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:f5:ad:d0:8c:db:fa:d7:31:d6:1b:f7:fb:
be:a1:be:a5:1b:11:cd:74:1c:28:da:40:76:2b:58:
d2:b0:b3:ab:d5:e7:9f:2c:ad:65:53:13:c8:4f:a1:
13:45:f4:d5:ab:ab:a4:fa:bf:81:67:dc:a4:c7:b6:
50:3a:fd:7b:48:b4:56:c0:34:a6:1e:84:d9:7d:d6:
16:76:53:cd:50:cf:89:11:b1:5f:1b:59:85:25:bd:
99:c5:0d:37:f4:de:ba:5d:cb:6e:df:f3:52:46:a2:
38:83:01:e3:72:e7:f5:57:f2:e1:66:a8:2e:cc:60:
02:a7:70:32:fa:0a:02:ec:1e:0b:71:d4:bd:17:e2:
d0:30:89:37:cf:f1:f5:86:09:4e:f8:1b:5d:f1:5c:
0e:c5:33:af:26:e6:d8:a0:ed:aa:04:e4:f3:48:e2:
18:de:03:76:95:70:3e:7f:32:54:ab:47:86:73:70:
72:8f:ae:b3:67:82:7d:bb:b8:30:53:cb:16:c6:39:
12:db:10:9c:82:a4:ae:e8:a8:14:f2:68:6e:fc:f8:
75:d1:b1:f4:bb:66:2d:37:d2:c2:fa:10:29:fc:0a:
53:21:47:89:c9:62:9a:34:1a:5c:df:0e:e5:78:b5:
d3:62:ab:2a:98:9b:ce:49:2f:bf:31:0f:70:c3:1f:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:16:7A:9F:E9:AA:41:E4:BB:5A:FC:5B:CD:07:03:4F:23:0F:3C:60
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.168.0/23
Signature Algorithm: sha256WithRSAEncryption
64:11:c5:2f:4d:36:85:fd:3f:b3:f6:44:a4:34:83:c6:8d:94:
97:f0:1b:1b:0a:33:a4:43:c9:ac:10:52:cd:cf:b0:c8:62:2c:
0e:40:38:76:0a:91:96:76:a2:f5:80:72:20:60:b2:78:35:0f:
24:e1:62:37:f5:98:b7:8a:98:b3:9b:3b:60:05:11:1b:74:23:
50:29:a4:fe:87:85:7e:7a:5c:51:ef:ad:a4:5f:2b:34:ef:60:
c1:56:f8:13:e4:00:31:9b:c1:d2:ff:cb:8d:81:b0:0b:83:de:
a3:0f:8e:cd:00:26:df:4c:5d:8d:3e:56:4c:a1:3b:ca:ff:fc:
26:55:9b:5a:ac:0f:c6:18:cb:a7:e4:eb:ca:0f:e6:9a:2b:2a:
37:08:d6:91:68:b4:d0:23:84:84:94:8f:6c:6d:c4:bc:66:cf:
0d:d6:01:21:8e:6e:77:f1:85:6c:5f:06:3b:f5:35:a3:04:ac:
2f:6a:d3:f0:e9:cc:c0:76:3a:cf:3e:f6:84:32:93:de:5b:73:
21:88:f0:40:26:7a:d9:eb:22:0d:2d:a1:78:fd:86:28:59:a5:
9b:7c:81:5f:97:95:0d:57:c3:fb:e0:ce:b6:d2:27:04:e0:eb:
71:d8:70:56:8d:8a:dd:05:ee:ee:8a:41:21:c4:74:3f:14:c1:
8d:c7:31:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:47 2025 by rpki-client