Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/8tsA0xjaN3tSzMNP_mOgpffOWhk.roa
File: 8tsA0xjaN3tSzMNP_mOgpffOWhk.roa (raw, json)
Hash identifier: q/hunYM9yx1XqNUEvpYxr+2DH1p+xF5eF382cJ6Xeno=
Subject key identifier: F2:DB:00:D3:18:DA:37:7B:52:CC:C3:4F:FE:63:A0:A5:F7:CE:5A:19
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018A83B9DB18CB494B7E509C14E315F8B4F4
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/8tsA0xjaN3tSzMNP_mOgpffOWhk.roa
Signing time: Mon 11 Sep 2023 10:11:50 +0000
ROA not before: Mon 11 Sep 2023 10:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.75.196.0/24 maxlen: 24
77.75.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:b9:db:18:cb:49:4b:7e:50:9c:14:e3:15:f8:b4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Sep 11 10:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2db00d318da377b52ccc34ffe63a0a5f7ce5a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:1d:c7:0a:73:c2:ac:91:9b:48:43:34:79:
a0:3c:7c:91:45:07:ef:e1:e9:2d:0d:ae:0c:a7:5f:
f8:c3:75:95:cd:d1:df:23:94:3f:09:a2:ef:78:90:
4b:e4:16:66:d2:e2:30:b6:f0:0e:91:04:77:33:2e:
a7:26:db:3c:3f:c3:3f:6d:96:51:43:d9:0b:f8:61:
e2:0e:6e:b2:d1:66:d8:c2:2b:7c:e7:b9:e6:f6:5f:
15:59:85:ea:0c:5a:04:ce:1f:3b:12:55:b7:27:22:
00:95:58:ad:9e:2f:27:4a:af:a8:d9:1b:1b:6f:2d:
df:68:e3:2b:1c:47:1b:60:15:73:5a:4c:6e:14:71:
7c:1d:61:e0:dd:01:e0:3c:e4:4e:50:c9:1a:40:0c:
ad:ee:11:eb:7d:66:89:56:e2:15:42:a1:81:b5:82:
4d:85:01:b3:f5:49:64:a7:ab:17:11:f4:dc:69:b4:
cd:5b:3f:9e:de:80:06:f7:ca:bf:ef:8b:4f:48:45:
43:47:cc:fa:40:0f:37:27:ef:ef:16:58:1e:f3:66:
44:2c:e2:ad:7e:a1:ef:d4:de:49:40:b5:e7:e5:ca:
2e:7e:39:ac:b0:a2:1b:6a:78:3c:c3:d6:44:39:24:
86:ec:ac:b8:ad:e1:cd:7a:9f:9f:42:cc:dc:73:42:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DB:00:D3:18:DA:37:7B:52:CC:C3:4F:FE:63:A0:A5:F7:CE:5A:19
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/8tsA0xjaN3tSzMNP_mOgpffOWhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.196.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:61:a9:e4:59:ac:97:bd:8c:32:4f:e2:51:6d:4b:78:a1:3e:
4c:87:a3:f7:c4:6f:a5:11:e5:cf:be:ed:92:78:a4:6c:b8:0d:
7e:32:8f:05:70:8d:09:12:a7:da:ce:69:10:99:42:36:77:c8:
a2:cb:f4:be:64:5e:80:52:00:38:1a:6f:fb:a6:31:50:b0:ec:
35:b3:40:48:5a:45:bd:8f:29:1b:73:4d:87:a3:bf:71:23:da:
5d:10:4e:27:1b:4c:4f:1d:3d:ae:c1:0a:98:2e:bd:01:dc:18:
25:10:c6:a1:22:db:3c:5f:56:04:c8:a2:e6:81:6c:13:96:5d:
d9:32:9e:0e:ae:7c:56:2a:47:cf:7b:8e:60:a6:5a:36:58:b0:
8d:4c:1a:12:11:2c:ca:e4:19:6c:96:e5:b2:0b:2c:44:6f:63:
99:ba:b8:c5:37:eb:ab:5d:d0:e4:92:26:90:8b:10:b6:54:db:
99:44:fc:d5:88:bc:bf:64:f8:bf:f2:e3:fa:4e:0a:61:b3:4c:
7b:18:7e:cd:0d:89:3a:70:7f:d7:64:62:fe:5d:c0:35:11:7c:
f9:99:07:ce:7b:7e:99:d6:7e:9e:ef:ea:90:5e:35:e9:dd:a6:
42:bf:68:e6:65:5e:63:6b:2a:df:84:51:d1:b2:39:5d:98:bb:
20:55:ea:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:08 2025 by rpki-client