Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/RHkq_2B9aSMLyQYFQ9FNfjZTBIs.roa
File: RHkq_2B9aSMLyQYFQ9FNfjZTBIs.roa (raw, json)
Hash identifier: H0KL1J+ki0U19ojTdr1t7y2YJD+4cxGfJhTHY1ROEwg=
Subject key identifier: 44:79:2A:FF:60:7D:69:23:0B:C9:06:05:43:D1:4D:7E:36:53:04:8B
Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial: 01942445A5B277B647CC5BBF0717BBC514F7
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/RHkq_2B9aSMLyQYFQ9FNfjZTBIs.roa
Signing time: Wed 01 Jan 2025 23:48:51 +0000
ROA not before: Wed 01 Jan 2025 23:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200801
IP address blocks: 77.72.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a5:b2:77:b6:47:cc:5b:bf:07:17:bb:c5:14:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
Validity
Not Before: Jan 1 23:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44792aff607d69230bc9060543d14d7e3653048b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:f5:2b:ad:e1:d7:f6:31:2f:b4:82:e0:68:
d2:c0:c9:fa:72:00:a8:18:78:9f:e0:fd:e4:39:96:
67:28:77:43:99:b3:73:9b:50:3c:a3:8f:fe:2a:42:
26:9a:f1:f4:40:b6:14:93:47:73:8b:a6:55:7a:52:
da:5a:dc:bc:91:4e:bb:d3:6b:6b:e6:7f:01:d6:b6:
f6:2d:dc:a3:dc:33:16:c9:19:f9:32:24:23:a0:de:
49:12:38:be:ec:34:d9:8e:5a:7b:5b:f2:6d:80:a9:
ca:5a:2d:0c:fe:91:bc:15:e7:62:d7:8d:a3:d7:9a:
0b:05:9f:b5:d5:37:96:ef:b7:ba:4b:09:67:49:4f:
e2:33:93:ee:ac:e0:b9:d7:ec:df:e0:e3:1e:cf:a2:
d4:8c:ef:cc:2f:b9:c5:c2:6f:f1:37:48:44:cd:78:
bc:b4:ae:ae:1b:16:d7:2a:5e:22:82:76:2b:2d:0a:
a6:8b:35:84:03:8e:99:8e:87:3d:ea:c2:02:8f:1d:
01:cb:91:07:7f:d0:62:b9:98:54:d0:e1:ea:39:4c:
27:b2:1e:93:8c:40:54:09:81:20:9f:19:e3:d5:2a:
68:cb:b4:db:87:39:41:90:b6:8a:1c:57:a1:40:05:
f5:83:c3:cf:23:a2:09:40:e4:66:c6:72:ae:c7:00:
5a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:79:2A:FF:60:7D:69:23:0B:C9:06:05:43:D1:4D:7E:36:53:04:8B
X509v3 Authority Key Identifier:
keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/RHkq_2B9aSMLyQYFQ9FNfjZTBIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.223.0/24
Signature Algorithm: sha256WithRSAEncryption
81:79:45:9e:85:e0:55:43:58:5d:7e:9f:d0:11:2b:4b:48:e3:
0e:6c:60:d3:ee:e9:11:69:9d:1b:64:7b:ac:7d:72:8e:c9:f4:
f9:41:26:6b:c8:61:bf:6a:e2:17:b6:c2:4b:37:d3:1f:8e:74:
24:de:cc:51:bb:e7:84:60:58:67:78:e6:e4:2b:0e:01:d5:25:
32:3c:23:0a:94:c4:bb:64:39:bb:f7:70:2b:78:97:da:ff:51:
3c:88:48:b3:58:d4:f5:4c:56:46:0f:2b:f2:9c:de:dd:19:cd:
60:b8:b6:83:25:d3:f1:d7:94:e4:5b:f7:16:5b:cf:96:2c:81:
e2:eb:a8:98:42:9f:0d:71:1c:13:39:5a:65:51:7c:78:25:b8:
c3:ec:e6:ed:2b:17:02:e2:79:04:65:75:e3:fa:d3:83:66:50:
86:bd:4d:38:c5:e2:78:df:14:88:c1:74:4e:4d:be:f7:23:9d:
29:12:b1:c5:7e:25:58:85:20:59:8a:40:ba:85:70:6b:3e:4f:
f5:32:2d:d0:93:2c:7f:96:02:b3:d9:0c:72:a2:82:b4:ef:bd:
53:4f:9d:53:2c:a7:3d:b8:5e:39:21:65:ee:f1:73:f4:78:3b:
0d:c3:0a:be:02:01:3f:dc:ec:28:14:58:cb:fc:35:62:7d:89:
5a:1f:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:23 2025 by rpki-client