Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/UucX2BCjJyxB8lAV0sPZ55LZi7M.roa
File: UucX2BCjJyxB8lAV0sPZ55LZi7M.roa (raw, json)
Hash identifier: svpG1zNY0Zp8MamrbLzqgKE6AjdU/tGyoOrFnS2pkHM=
Subject key identifier: 52:E7:17:D8:10:A3:27:2C:41:F2:50:15:D2:C3:D9:E7:92:D9:8B:B3
Certificate issuer: /CN=866d6a188305a4dc18401aa20d4ce266fd30475e
Certificate serial: 0152DB53
Authority key identifier: 86:6D:6A:18:83:05:A4:DC:18:40:1A:A2:0D:4C:E2:66:FD:30:47:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hm1qGIMFpNwYQBqiDUziZv0wR14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/UucX2BCjJyxB8lAV0sPZ55LZi7M.roa
Signing time: Sat 01 Jan 2022 06:53:36 +0000
ROA not before: Sat 01 Jan 2022 06:53:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 77.72.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22207315 (0x152db53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866d6a188305a4dc18401aa20d4ce266fd30475e
Validity
Not Before: Jan 1 06:53:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52e717d810a3272c41f25015d2c3d9e792d98bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:9b:fb:ff:2a:b1:d8:a8:05:23:73:7e:d4:
db:81:5a:12:78:cf:77:bf:87:b6:bf:52:f4:04:fe:
8a:6a:92:ec:59:b9:93:aa:5c:3e:78:1a:02:1c:d1:
3a:cc:1b:23:e4:c1:af:ec:82:15:3c:de:97:5a:10:
9d:0f:85:31:a3:4f:d3:c5:dd:82:ac:d6:0b:bc:29:
ae:25:bc:c6:d6:14:39:29:1f:84:70:df:38:a9:84:
d4:2e:31:03:36:a4:16:a4:38:09:9c:0f:7e:7c:4a:
b6:55:99:a1:78:f6:57:c3:e9:b3:da:ad:86:52:21:
32:74:ea:16:41:c7:5c:28:bb:b5:39:ae:c3:d3:2e:
5e:03:53:68:71:1a:d4:83:38:75:c7:12:29:de:9d:
e2:5b:90:ab:e6:4b:e3:44:72:8e:0e:30:06:e1:75:
1c:52:0c:8f:f1:7e:f0:8e:68:fc:22:52:37:4e:41:
4a:ab:0d:bf:18:61:f7:48:31:b9:f3:b4:e5:34:59:
d4:8f:1c:b9:a1:53:5d:2c:5c:aa:5a:cb:70:09:fc:
d6:1c:5d:fd:47:c3:1f:42:ec:bc:35:38:73:63:5d:
96:74:31:44:65:55:6f:fb:3f:2c:7a:86:a3:dc:41:
07:51:2b:25:35:bb:76:ba:53:33:30:68:1d:eb:9c:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E7:17:D8:10:A3:27:2C:41:F2:50:15:D2:C3:D9:E7:92:D9:8B:B3
X509v3 Authority Key Identifier:
keyid:86:6D:6A:18:83:05:A4:DC:18:40:1A:A2:0D:4C:E2:66:FD:30:47:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hm1qGIMFpNwYQBqiDUziZv0wR14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/UucX2BCjJyxB8lAV0sPZ55LZi7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/hm1qGIMFpNwYQBqiDUziZv0wR14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.80.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:13:5e:5b:a2:ad:69:28:c4:9e:74:09:df:8a:1a:94:80:1c:
f7:4d:be:81:11:fd:5c:66:51:3e:df:36:3b:be:8c:63:b5:49:
dc:f9:7d:cd:8e:cf:c9:a7:ec:06:a9:bc:72:3c:3e:b6:4c:99:
37:80:6e:d9:3c:87:a6:e5:11:b7:89:79:a0:1d:f5:65:73:a2:
42:26:a2:00:e4:bf:36:6e:95:a6:91:e6:ac:df:a3:3d:2c:7b:
7f:56:e7:8b:19:db:f8:d3:83:1f:61:ff:85:09:a7:88:80:ad:
c2:68:6e:8f:90:31:7b:8d:ef:e8:70:94:28:72:8e:c4:86:0e:
57:4f:bc:fe:8d:0c:3f:bd:18:13:b0:08:a0:f8:b8:da:53:e7:
0a:d9:70:de:67:b9:7f:9f:c9:74:02:85:2d:9e:91:b2:d9:94:
56:e6:19:dc:58:1d:8f:2b:81:f0:78:d1:b2:25:10:9f:25:37:
25:ac:96:9b:f1:82:07:25:4b:7b:c8:d1:80:87:83:77:57:14:
e1:37:9a:d7:d3:40:6e:6f:c8:8e:b2:0d:04:66:69:00:8f:31:
40:cf:4b:f3:7a:29:9a:85:e8:ff:5b:98:8e:4e:0a:cf:ec:2a:
ea:e0:34:6f:25:4f:6e:1d:e9:9a:09:3b:af:6b:f4:60:ca:a5:
ca:21:02:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:47 2023 by rpki-client on console.sobornost.net