Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/5IRlA9t3dMRpZsCoU1X-On9PELY.roa
File: 5IRlA9t3dMRpZsCoU1X-On9PELY.roa (raw, json)
Hash identifier: JUbpW+8xyaCsW7dCdl1OCFxJ14wQKQFl7jw0Gl0T0y0=
Subject key identifier: E4:84:65:03:DB:77:74:C4:69:66:C0:A8:53:55:FE:3A:7F:4F:10:B6
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 0188BA6BBF09DCBD0D4DFB452DC372A51CF4
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/5IRlA9t3dMRpZsCoU1X-On9PELY.roa
Signing time: Wed 14 Jun 2023 15:00:03 +0000
ROA not before: Wed 14 Jun 2023 15:00:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 77.75.197.0/24 maxlen: 24
77.75.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:6b:bf:09:dc:bd:0d:4d:fb:45:2d:c3:72:a5:1c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jun 14 15:00:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4846503db7774c46966c0a85355fe3a7f4f10b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5f:8a:a9:07:e9:07:ce:66:c7:38:06:ad:6f:
e2:7e:14:0d:16:31:3a:dd:25:f7:9d:fb:e5:44:4c:
98:d6:04:5c:6d:57:5d:30:a6:c9:a4:c3:9b:b8:41:
56:e9:e3:40:93:d2:01:f3:0f:26:c4:99:e7:9d:b7:
7f:f9:c0:91:67:ed:ef:bd:2c:f5:6e:15:21:eb:19:
05:a4:10:da:2d:15:50:35:ae:8c:68:05:c5:55:72:
a8:5d:d8:d2:82:f7:20:0c:40:fa:a3:3e:4f:dc:d3:
b4:63:92:69:4b:d9:22:bc:ef:03:02:04:0d:5e:21:
e1:c1:f8:67:ea:3d:aa:de:92:42:6d:53:6a:7f:9f:
c2:c3:79:9a:71:39:40:4f:ad:b7:04:d9:c6:cf:d6:
8c:83:28:f1:1e:57:2f:ed:75:27:61:54:d8:9b:b8:
08:5c:5d:f8:3d:f3:aa:d8:29:77:21:8c:21:49:c2:
27:f5:f6:f0:21:58:17:29:fd:8c:9a:c4:bf:cf:dc:
24:e8:28:c2:49:80:11:7b:08:0c:f9:87:d1:c2:de:
63:57:54:76:6e:04:28:0d:0d:0d:b4:b5:9a:be:d3:
00:6f:7e:a5:6f:16:dd:27:a8:3a:5e:33:6f:ea:2d:
c6:b4:90:ea:70:f4:4e:54:6b:33:22:9b:7f:b8:ee:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:84:65:03:DB:77:74:C4:69:66:C0:A8:53:55:FE:3A:7F:4F:10:B6
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/5IRlA9t3dMRpZsCoU1X-On9PELY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.197.0-77.75.198.255
Signature Algorithm: sha256WithRSAEncryption
70:98:6c:0b:2d:cb:36:7c:9c:50:76:1c:c1:ba:0f:7e:52:e9:
73:fb:89:62:c5:75:fc:7f:fb:e3:e0:fd:3b:17:fa:38:6b:b4:
a1:54:cf:45:20:8a:62:4e:ea:7b:3e:3d:44:19:e1:a5:14:c6:
e8:f5:2a:da:52:9f:57:18:72:ce:38:ae:ea:59:f2:05:c5:7a:
bf:d4:bc:3b:39:81:1a:af:ad:0a:d9:f3:73:15:d1:36:ce:73:
ea:3e:0a:2d:5f:73:b9:16:c8:2d:c0:8e:3d:5a:d4:41:86:bf:
3e:3c:79:46:f6:27:9d:4f:5a:d2:68:d5:e4:ee:dd:0b:0d:7f:
e7:ea:9d:2e:c2:06:31:1a:75:86:f6:d8:15:2c:ab:b1:bf:99:
22:28:cf:e1:3d:16:08:41:62:a3:25:e4:1f:76:37:cf:83:48:
37:76:78:f1:80:70:15:b9:ff:ea:39:47:89:fe:e5:4c:91:42:
62:23:01:34:b6:b5:71:cd:9b:75:39:ff:a4:e0:97:ac:e7:fb:
22:e6:b8:a6:32:de:3a:b0:42:8c:2e:92:42:d8:0e:57:5f:9a:
c5:7b:51:5f:55:65:0a:8d:7b:35:dc:f7:85:26:f3:36:48:55:
1b:66:0d:4c:d3:0a:37:01:ed:6d:54:94:29:ed:e9:02:e0:76:
02:e7:07:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org