Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/Atsf8ZcIeBNtj5w-Op3Us5Vpigo.roa
File: Atsf8ZcIeBNtj5w-Op3Us5Vpigo.roa (raw, json)
Hash identifier: DsIlG0fbsKrCEFX7UEQL/2lGl17oZ4hC3lmjtB+PhKg=
Subject key identifier: 02:DB:1F:F1:97:08:78:13:6D:8F:9C:3E:3A:9D:D4:B3:95:69:8A:0A
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018943DF357E3C66C8781DB36C73B4270D04
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/Atsf8ZcIeBNtj5w-Op3Us5Vpigo.roa
Signing time: Tue 11 Jul 2023 07:34:08 +0000
ROA not before: Tue 11 Jul 2023 07:34:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 77.75.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:df:35:7e:3c:66:c8:78:1d:b3:6c:73:b4:27:0d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jul 11 07:34:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02db1ff1970878136d8f9c3e3a9dd4b395698a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:2d:5d:89:a3:73:c7:27:5b:b9:60:3d:f6:
0e:e9:96:01:cc:80:4b:43:9f:f2:bf:1d:d2:64:c2:
c1:07:37:75:94:1f:09:cf:bf:83:29:39:f2:40:3e:
c6:22:d5:64:21:db:3a:cd:72:57:ae:17:c0:df:fc:
51:10:7d:d8:6c:5e:6b:8a:87:54:04:4e:88:16:dc:
81:04:68:e7:8a:3f:04:05:e5:9f:2c:c7:f0:52:54:
da:50:11:e6:5d:d6:5d:36:10:05:82:36:3f:1c:bc:
1b:1a:c0:15:d6:84:5a:46:a6:f6:f6:77:19:d6:64:
b7:1a:39:25:b5:2d:71:1e:8c:20:23:1a:0d:da:0e:
1c:bd:0b:1f:42:49:eb:21:61:11:a2:6b:e2:4f:ce:
65:52:50:55:8b:53:1a:a7:b1:81:f2:ef:f3:df:4a:
f8:9f:bc:d1:26:71:06:a2:1a:1d:0b:17:3f:e3:0c:
c7:68:e8:9b:92:cb:95:08:34:bd:0a:f3:e2:db:d7:
5b:20:5a:a5:d8:3a:8e:47:b6:f0:ed:17:91:83:75:
f9:55:f7:29:30:ea:b2:1d:0e:d8:b3:9b:20:1f:1f:
31:36:21:2f:79:39:c5:17:68:b6:7a:ff:d3:8e:9e:
3e:64:b4:eb:5b:b5:54:cb:96:3d:42:d4:09:8a:85:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DB:1F:F1:97:08:78:13:6D:8F:9C:3E:3A:9D:D4:B3:95:69:8A:0A
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/Atsf8ZcIeBNtj5w-Op3Us5Vpigo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.199.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:fa:b1:60:65:5c:7e:d6:1c:6e:5c:33:7b:23:93:b1:4a:df:
fa:6c:ed:49:3e:17:ac:ef:d3:e9:3f:04:21:e1:81:b5:39:d7:
d0:39:65:4b:ff:d5:25:b9:b2:16:c6:85:69:d4:b7:44:74:bf:
eb:ed:b1:a5:14:81:b5:d4:f4:d7:2f:72:da:65:f8:a0:1f:4c:
31:35:b2:ee:02:59:d7:25:c6:c0:2d:c6:10:d7:bf:da:8a:ed:
a1:2e:ff:5a:86:2e:bc:13:f6:6b:53:63:b5:35:ba:0d:53:ea:
91:d7:b8:16:6f:60:7a:4e:ea:85:cd:35:39:d6:94:6e:9b:dd:
9c:e4:da:65:5f:c6:87:23:2b:4a:fc:49:8a:89:93:a5:6b:44:
34:98:fa:c9:f0:c1:e5:95:a5:49:64:19:2c:8a:a2:3d:52:d5:
88:5c:4c:a7:53:8e:9c:36:62:6d:a0:0d:3d:49:84:6e:28:4d:
d7:11:ab:6d:25:f1:7a:b6:74:ce:ef:c9:96:37:af:59:44:58:
d5:9c:d8:dd:11:be:4a:3c:d7:2b:0c:03:db:31:54:84:de:9b:
bb:9c:12:66:7a:35:14:c2:d7:c6:11:1f:da:c4:ed:94:4c:49:
d8:29:75:3d:6c:cf:a9:98:37:7c:76:2b:d2:c9:68:0c:43:9b:
a6:0b:32:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org