Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/88jR03WFR6s74xUFqRK9_sF0Gws.roa
File: 88jR03WFR6s74xUFqRK9_sF0Gws.roa (raw, json)
Hash identifier: WjRZHkWue3gD9jGA6ikeme61fgKJgb6TS3e2yuYR2NA=
Subject key identifier: F3:C8:D1:D3:75:85:47:AB:3B:E3:15:05:A9:12:BD:FE:C1:74:1B:0B
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018B8507B3696858F2C2CE269535C17B7A2B
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/88jR03WFR6s74xUFqRK9_sF0Gws.roa
Signing time: Tue 31 Oct 2023 09:19:16 +0000
ROA not before: Tue 31 Oct 2023 09:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.75.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:07:b3:69:68:58:f2:c2:ce:26:95:35:c1:7b:7a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Oct 31 09:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3c8d1d3758547ab3be31505a912bdfec1741b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c5:52:be:4e:45:88:28:ab:d8:f1:78:0c:ad:
44:ad:e3:14:ec:2c:1e:a1:bf:5c:ad:b3:47:ab:c7:
a2:58:4f:3d:69:c4:d5:78:0c:d0:b7:c9:3c:b1:33:
af:14:1f:a1:5c:d0:11:a9:be:e0:c8:93:90:8e:b2:
c6:09:2b:9e:31:77:3a:1e:b4:9c:7f:bc:98:4b:3d:
4e:d1:66:5a:bc:48:ab:40:4e:c6:3b:1a:4b:96:5e:
6d:55:81:19:b7:bb:86:b2:dc:52:0f:e4:6c:51:5b:
0c:7d:92:ac:5d:87:51:e3:a7:48:cb:c1:b4:3d:00:
0f:ca:8b:5f:4e:f7:c5:de:69:41:44:09:71:eb:43:
56:cc:59:34:26:a4:03:61:aa:32:e7:f5:68:a4:03:
6e:d2:90:de:24:ff:4f:18:e5:9a:82:9a:69:1e:88:
ed:8d:17:5a:4c:e0:27:f8:9b:57:be:06:a1:42:bb:
5c:f2:ff:a2:ea:ae:9c:2f:06:de:25:5e:b9:5e:7c:
cf:c1:67:00:14:3f:24:28:ae:85:b6:25:fd:e7:26:
af:c2:4b:76:1e:a8:2d:5a:d2:f1:51:7f:b9:d4:47:
07:bf:59:eb:68:92:e4:47:95:6f:f9:9d:c4:8d:2f:
10:1e:5d:8d:35:8c:3d:cf:38:d9:e3:3c:16:8e:c3:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C8:D1:D3:75:85:47:AB:3B:E3:15:05:A9:12:BD:FE:C1:74:1B:0B
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/88jR03WFR6s74xUFqRK9_sF0Gws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.192.0/22
Signature Algorithm: sha256WithRSAEncryption
19:0a:aa:34:11:37:14:1a:a0:1c:fc:41:9a:6e:8d:cb:01:8e:
55:72:9b:77:a4:85:48:4e:18:82:e7:ec:50:b4:6e:b1:d1:5f:
76:24:a9:69:14:b3:48:bc:55:d0:92:dc:ab:62:c8:e6:05:1b:
74:4b:56:a0:27:7d:9e:39:3f:d9:70:35:ce:ac:0a:a8:a9:64:
1a:42:21:16:64:f7:a1:f8:a4:6e:2a:93:f0:54:64:81:7b:cf:
f3:74:2b:1a:74:f3:48:b8:3e:ae:f2:fd:35:4b:76:6e:23:7d:
a4:ac:ca:2e:5b:cb:72:3d:e0:37:fe:9f:88:d8:f4:75:40:d1:
1b:36:9a:1d:69:74:9d:0e:67:7c:bd:78:ac:16:c4:df:88:45:
2f:84:67:54:d1:de:7c:14:ff:76:6c:5b:27:e6:b3:64:9b:c4:
c0:dd:99:12:34:a8:4c:59:5c:31:dc:9b:a0:d9:b7:f5:f8:ed:
4c:8b:9e:71:69:f9:20:ff:8d:41:2e:b8:7e:09:12:0e:80:3a:
b9:bc:6c:4b:7a:88:59:5a:18:2a:ff:d0:7e:ea:79:8b:f6:69:
6b:18:ce:5c:ae:11:88:37:c0:33:8e:3b:03:9c:f4:de:77:3b:
75:87:20:2c:30:6b:aa:5b:38:30:51:1c:49:d8:09:ba:fc:14:
ba:28:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org