Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/WTuURYld3SHyebJZYxR8lMOfSDI.roa
File: WTuURYld3SHyebJZYxR8lMOfSDI.roa (raw, json)
Hash identifier: pxJUiezjAoVof0DGHWbxFu307U+Y1bSe/APKsYVR7Ro=
Subject key identifier: 59:3B:94:45:89:5D:DD:21:F2:79:B2:59:63:14:7C:94:C3:9F:48:32
Certificate issuer: /CN=5ff283110661a59dbf225d03380acc0838474e56
Certificate serial: 374AC76B
Authority key identifier: 5F:F2:83:11:06:61:A5:9D:BF:22:5D:03:38:0A:CC:08:38:47:4E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_KDEQZhpZ2_Il0DOArMCDhHTlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/WTuURYld3SHyebJZYxR8lMOfSDI.roa
Signing time: Sat 01 Jan 2022 05:52:30 +0000
ROA not before: Sat 01 Jan 2022 05:52:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42252
IP address blocks: 77.72.56.0/21 maxlen: 21
2a00:1778::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927647595 (0x374ac76b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff283110661a59dbf225d03380acc0838474e56
Validity
Not Before: Jan 1 05:52:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=593b9445895ddd21f279b25963147c94c39f4832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:d9:e2:dc:d8:a2:e7:f5:71:19:8f:b0:38:
51:6b:55:ff:d4:17:f1:0b:ad:5d:39:dd:4b:09:bf:
3c:f3:f2:5a:63:b9:f2:31:51:68:6e:3a:0e:cf:e5:
d8:0d:85:47:98:d9:c2:fa:93:45:3a:6d:fa:d2:3f:
a0:54:c0:db:21:e9:51:af:61:f1:00:f0:66:c9:1f:
d3:87:96:ee:34:77:1b:68:43:f1:01:46:51:e8:c5:
f2:92:92:21:ff:13:56:31:4e:51:89:a7:de:03:4e:
a4:8d:48:35:aa:06:43:28:2a:1e:74:35:a8:79:d0:
44:ae:44:1d:51:85:f4:2d:ef:1e:96:07:29:a5:99:
c2:0a:14:ab:2c:bd:97:3f:79:1d:16:a0:63:c0:77:
d0:7f:e3:03:b5:bf:f8:4c:84:f3:a8:39:e4:5c:33:
ef:8f:ea:c5:fa:d9:6b:47:1c:78:d0:31:7e:59:97:
51:c3:0f:39:70:70:c5:49:34:ac:8c:56:84:b4:e6:
d4:76:8b:de:e4:05:15:1d:5d:a5:d8:0e:9f:eb:4c:
25:c6:a8:31:89:35:40:b3:6c:94:fc:d0:52:7a:4a:
22:72:8e:80:6b:50:0c:c7:6d:37:ef:d7:a8:c9:39:
1b:98:f8:a8:bc:5b:78:98:db:ae:c3:14:0d:8a:c2:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3B:94:45:89:5D:DD:21:F2:79:B2:59:63:14:7C:94:C3:9F:48:32
X509v3 Authority Key Identifier:
keyid:5F:F2:83:11:06:61:A5:9D:BF:22:5D:03:38:0A:CC:08:38:47:4E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_KDEQZhpZ2_Il0DOArMCDhHTlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/WTuURYld3SHyebJZYxR8lMOfSDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/X_KDEQZhpZ2_Il0DOArMCDhHTlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.56.0/21
IPv6:
2a00:1778::/32
Signature Algorithm: sha256WithRSAEncryption
48:c9:45:1b:f6:7f:a6:9c:54:db:fc:f6:4c:2e:86:ed:ec:c7:
7f:0a:e1:ba:cf:bf:91:e6:97:39:50:d4:7d:7c:ce:cd:81:ef:
32:4c:d3:ad:f8:b9:95:84:36:61:90:7d:26:7f:27:82:e7:d8:
6e:54:d4:92:88:25:9a:65:61:e8:c0:d8:d5:68:ed:51:f4:a9:
23:6f:1e:8d:1d:a3:8c:3d:37:7e:b3:25:ff:e8:ba:db:37:31:
b3:64:6e:cc:eb:83:73:5b:73:85:39:60:14:8d:c4:1c:71:11:
71:57:ec:fe:63:93:78:cd:f5:56:a2:6e:11:ea:d9:62:87:68:
dd:56:e5:df:4f:f6:e4:62:81:f0:bf:e5:3f:08:f3:35:fc:f0:
30:14:b3:e7:8d:a2:ea:52:98:9c:6a:45:cd:f2:1a:a5:26:9e:
e8:f9:37:3d:49:04:08:8a:b9:1e:32:40:39:79:b3:29:a7:d0:
b8:0a:85:d9:8b:3c:1d:ae:e0:ab:6c:0c:0a:ad:fa:9f:d6:3e:
f7:59:ce:b4:6e:94:26:fd:fa:f4:4b:2e:ab:26:db:20:5d:c5:
9b:62:4f:15:53:e2:67:3b:6d:95:3f:2c:45:42:71:af:c6:63:
d4:1a:1c:32:78:3d:4d:50:7a:51:4e:eb:86:9c:6d:d6:90:31:
c6:3b:f1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:04:09 2025 by rpki-client