Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/1-xBZqdIzWskloRJt_D3kV0A4y2Y.roa
File: 1-xBZqdIzWskloRJt_D3kV0A4y2Y.roa (raw, json)
Hash identifier: Dqw5TeiMRGJVV5y+oR67XEKl09Spm1TaNLeu0SnWqck=
Subject key identifier: FB:10:59:A9:D2:33:5A:C9:25:A1:12:6D:FC:3D:E4:57:40:38:CB:66
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018AF6095E520EB5934F08A2B724B0801B55
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/1-xBZqdIzWskloRJt_D3kV0A4y2Y.roa
Signing time: Tue 03 Oct 2023 14:55:23 +0000
ROA not before: Tue 03 Oct 2023 14:55:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.75.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:09:5e:52:0e:b5:93:4f:08:a2:b7:24:b0:80:1b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Oct 3 14:55:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb1059a9d2335ac925a1126dfc3de4574038cb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0a:9e:45:b9:a9:31:33:48:50:f6:90:e8:5a:
ac:c3:ee:de:ef:2b:a3:f8:bd:c4:1d:b2:f6:09:e3:
97:77:a8:c7:dc:02:e2:64:9b:2d:c7:76:47:89:cc:
f7:d7:0d:ea:98:16:14:ea:de:e4:57:f9:37:80:9b:
24:91:c6:22:85:a1:50:8d:aa:20:db:dc:ec:5b:a1:
e5:be:55:a4:8f:8a:84:f8:f6:01:56:9c:0d:1a:eb:
6b:b2:1a:19:50:2f:f1:a5:fd:eb:c8:60:c6:20:1e:
0e:3b:6a:3f:c6:d5:d8:91:35:6c:e1:42:18:19:f1:
6f:9d:e8:c7:5a:3f:5a:9d:81:87:a4:44:37:34:f1:
23:5d:21:78:d8:16:6e:15:0d:07:93:47:19:0f:49:
45:d8:11:6e:f5:d5:b6:35:0c:6c:69:32:54:85:4d:
05:95:58:1c:4c:08:f4:92:3a:96:a3:cc:2d:8e:a8:
89:42:5f:20:63:de:47:43:c8:18:f5:59:e6:c9:85:
2a:50:0e:db:cf:91:92:cd:0b:1b:d1:8a:58:49:38:
4c:87:e9:ec:9c:4e:01:3e:1c:7c:c8:76:94:09:6c:
34:c5:77:c3:f5:96:7e:16:95:11:62:d5:33:51:95:
a9:26:03:a6:80:2b:05:18:a1:8d:c4:0d:70:a2:ed:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:10:59:A9:D2:33:5A:C9:25:A1:12:6D:FC:3D:E4:57:40:38:CB:66
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/1-xBZqdIzWskloRJt_D3kV0A4y2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.192.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:70:4c:18:fc:a0:cc:a4:20:8f:c2:4f:24:17:b9:f2:72:69:
7c:38:e4:21:e1:84:85:a7:ff:11:d6:e1:ad:17:47:85:ad:ff:
8b:4f:37:97:be:0c:9c:3e:1b:21:91:69:ef:97:8d:6e:bc:68:
05:34:52:d0:1f:c6:4d:f1:bb:2b:67:19:42:44:05:d5:07:7a:
34:8e:07:b4:77:54:e7:4d:f4:30:03:6c:f9:e6:2d:c3:cb:8a:
46:de:c0:c4:4b:25:a4:20:54:26:88:62:2c:09:a0:f2:38:18:
1d:43:45:57:e2:09:58:dc:de:93:70:db:5f:19:34:15:73:07:
87:30:b5:06:f5:bc:c2:68:9d:b1:5e:27:f1:9a:52:57:38:ee:
7d:10:17:54:c4:05:0d:77:79:33:da:2e:cd:df:d8:98:1d:f2:
e0:fd:46:86:36:eb:72:a0:4d:36:c5:0c:d9:d1:53:f0:e0:39:
db:1e:8e:a5:99:b7:4b:d0:65:0d:fb:9c:4b:3f:81:4f:5c:ec:
36:1e:bd:8f:68:f6:c4:f6:e5:67:54:12:73:51:64:d1:a3:cb:
c8:60:f6:94:ba:3a:99:59:9a:0b:99:96:24:56:c3:fb:06:dc:
9b:a4:90:8f:24:41:c2:6b:df:a4:db:a9:5a:67:ec:a4:65:2b:
0e:87:5f:8c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYr2CV5SDrWTTwiitySwgBtVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NGUzZTFiZWNmMzBiNDRhNDY5ODE1ZmQwZjhjMDY5YzU2
MmY5OTYwHhcNMjMxMDAzMTQ1NTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjEwNTlhOWQyMzM1YWM5MjVhMTEyNmRmYzNkZTQ1NzQwMzhjYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAqeRbmpMTNIUPaQ6Fqsw+7e7yuj
+L3EHbL2CeOXd6jH3ALiZJstx3ZHicz31w3qmBYU6t7kV/k3gJskkcYihaFQjaog
29zsW6HlvlWkj4qE+PYBVpwNGutrshoZUC/xpf3ryGDGIB4OO2o/xtXYkTVs4UIY
GfFvnejHWj9anYGHpEQ3NPEjXSF42BZuFQ0Hk0cZD0lF2BFu9dW2NQxsaTJUhU0F
lVgcTAj0kjqWo8wtjqiJQl8gY95HQ8gY9VnmyYUqUA7bz5GSzQsb0YpYSThMh+ns
nE4BPhx8yHaUCWw0xXfD9ZZ+FpURYtUzUZWpJgOmgCsFGKGNxA1wou2KIwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPsQWanSM1rJJaESbfw95FdAOMtmMB8GA1UdIwQY
MBaAFKhOPhvs8wtEpGmBX9D4wGnFYvmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUU0LUctenpDMFNrYVlGZjBQakFhY1ZpLVpZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85ZGRlYmUtMzcyZi00MjU4LWJhMGYt
Y2M0ZmU2MzIzZmVjLzEvMS14QlpxZEl6V3NrbG9SSnRfRDNrVjBBNHkyWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDEvOWRkZWJlLTM3MmYtNDI1OC1iYTBmLWNjNGZlNjMyM2Zl
Yy8xL3FFNC1HLXp6QzBTa2FZRmYwUGpBYWNWaS1aWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAk1LwDAN
BgkqhkiG9w0BAQsFAAOCAQEAPnBMGPygzKQgj8JPJBe58nJpfDjkIeGEhaf/Edbh
rRdHha3/i083l74MnD4bIZFp75eNbrxoBTRS0B/GTfG7K2cZQkQF1Qd6NI4HtHdU
5030MANs+eYtw8uKRt7AxEslpCBUJohiLAmg8jgYHUNFV+IJWNzek3DbXxk0FXMH
hzC1BvW8wmidsV4n8ZpSVzjufRAXVMQFDXd5M9ouzd/YmB3y4P1GhjbrcqBNNsUM
2dFT8OA52x6OpZm3S9BlDfucSz+BT1zsNh69j2j2xPblZ1QSc1Fk0aPLyGD2lLo6
mVmaC5mWJFbD+wbcm6SQjyRBwmvfpNupWmfspGUrDodfjA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org