Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/10UKCfRqLIOYnQgM8aujJJo11pE.roa
File: 10UKCfRqLIOYnQgM8aujJJo11pE.roa (raw, json)
Hash identifier: 9kJWKdY2ELNX2HjlIPhRzKp4HLSeF3kytzZmRVBWqVk=
Subject key identifier: D7:45:0A:09:F4:6A:2C:83:98:9D:08:0C:F1:AB:A3:24:9A:35:D6:91
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 01892A66D961EBE75FABDCD28B289D46A751
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/10UKCfRqLIOYnQgM8aujJJo11pE.roa
Signing time: Thu 06 Jul 2023 08:52:10 +0000
ROA not before: Thu 06 Jul 2023 08:52:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 77.75.197.0/24 maxlen: 24
77.75.198.0/24 maxlen: 24
37.1.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:66:d9:61:eb:e7:5f:ab:dc:d2:8b:28:9d:46:a7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jul 6 08:52:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7450a09f46a2c83989d080cf1aba3249a35d691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:de:78:ba:7b:fd:1a:67:ac:97:82:65:98:
09:c4:fa:db:b0:3c:8d:24:f1:45:fa:dd:22:30:9e:
52:b4:2b:d8:e9:b9:5b:1d:31:53:9b:9a:a0:8a:4b:
45:d3:b5:d0:c2:6c:ea:32:15:8e:1b:d5:ce:38:98:
c0:c6:74:ff:5f:f2:e8:95:51:6b:6b:2f:ed:4f:42:
7a:63:70:ce:41:12:e9:ae:f8:98:fb:a8:77:78:4c:
a9:7c:66:e1:59:a9:57:89:3e:98:6f:43:82:37:f4:
e5:f8:ea:82:b9:6f:13:3d:99:be:5e:89:ed:4e:53:
52:49:4c:72:91:58:47:73:3f:d0:88:14:29:ed:e0:
8d:9f:f1:d7:10:75:4c:79:57:91:b1:ea:4a:e3:05:
cc:5e:72:7f:69:4b:f2:01:cb:f4:59:d8:7f:fc:2a:
12:c1:85:0e:ab:a8:17:0c:63:4d:79:a5:6a:cf:5e:
4f:97:99:c4:79:15:5f:25:98:73:70:80:67:a3:2a:
06:f1:fc:19:53:07:86:8c:f3:c7:15:6c:31:49:e6:
8b:a6:6b:ed:83:bd:75:bc:87:74:1f:7a:9f:41:08:
96:f5:92:bd:32:cd:ad:69:f6:05:40:ef:cb:24:32:
25:2e:e4:62:f4:73:bb:fb:a4:38:0d:26:d6:28:45:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:45:0A:09:F4:6A:2C:83:98:9D:08:0C:F1:AB:A3:24:9A:35:D6:91
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/10UKCfRqLIOYnQgM8aujJJo11pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.224.0/24
77.75.197.0-77.75.198.255
Signature Algorithm: sha256WithRSAEncryption
57:79:13:c4:ce:f1:ea:9c:a2:a8:d5:57:3e:ce:51:f3:25:32:
20:aa:a4:42:26:10:ca:67:1d:02:08:64:c2:47:4c:4e:ef:e5:
e5:a0:a7:2e:3a:d9:8e:11:52:c9:1f:31:57:42:81:20:18:58:
06:a7:85:0c:96:d8:37:24:d3:c7:3f:55:02:c2:7c:11:95:04:
7f:f7:9f:c0:c6:36:f7:07:13:d2:3b:e9:ab:a8:ca:87:6d:a1:
24:e9:e0:e8:0d:8d:62:05:f1:9d:38:b7:62:fb:53:b8:55:42:
b1:5d:b6:93:3b:98:ca:09:4e:28:90:05:44:1c:15:9e:f8:78:
dc:2a:f5:52:11:ef:44:8f:41:5f:31:8d:b4:ad:7b:a3:fc:69:
1d:da:dd:ba:11:92:3d:7c:85:7e:48:8b:db:34:7c:e1:80:93:
23:e9:9d:01:c8:41:48:10:66:9e:f0:62:ff:59:e7:34:5c:28:
68:7b:4e:fd:d7:dc:53:b0:51:d2:ec:ff:d4:be:6d:5c:03:2f:
13:d3:28:a6:69:14:e2:27:4a:5c:c4:21:36:62:54:f3:d3:01:
2d:15:f4:77:2c:49:69:3d:9e:55:83:9a:2d:24:83:75:14:a6:
4d:18:14:2b:7b:51:fa:f8:04:4b:36:3a:ae:d6:82:02:18:5b:
ab:de:65:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org