Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/HGYgHQyOZLHZhBw-wr8EwsgaKJM.roa
File: HGYgHQyOZLHZhBw-wr8EwsgaKJM.roa (raw, json)
Hash identifier: +O6sLW15Zh6XDWb5thglCZLOcDC3s8yIv8vGUWAtz4I=
Subject key identifier: 1C:66:20:1D:0C:8E:64:B1:D9:84:1C:3E:C2:BF:04:C2:C8:1A:28:93
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018AD1E086F6998BD1AD971A3830EBD098C9
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/HGYgHQyOZLHZhBw-wr8EwsgaKJM.roa
Signing time: Tue 26 Sep 2023 14:24:27 +0000
ROA not before: Tue 26 Sep 2023 14:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32181
IP address blocks: 77.75.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:e0:86:f6:99:8b:d1:ad:97:1a:38:30:eb:d0:98:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Sep 26 14:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c66201d0c8e64b1d9841c3ec2bf04c2c81a2893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a9:bf:a5:2a:33:05:98:7e:12:67:9c:95:00:
7f:49:29:22:2e:16:19:03:46:cf:a4:ea:1c:ba:42:
73:e2:c9:b0:30:8e:cb:f9:e9:1e:4e:52:3d:ad:84:
27:33:80:e3:17:7b:75:95:94:60:14:84:7d:8d:b3:
18:98:aa:55:08:a6:cd:dc:31:85:ca:90:52:c0:d8:
79:f0:c2:50:31:d8:bb:0d:bb:b5:87:3a:b4:36:6c:
50:86:bd:c6:b5:1c:b6:32:e0:f2:cb:22:da:93:b8:
7c:de:fe:6e:d7:7f:9c:2b:3f:e2:e6:1a:b6:14:37:
22:7e:3f:a9:b3:c7:65:c7:d3:8d:85:26:5c:79:66:
b4:0c:71:ff:20:5a:f4:e5:5e:10:65:dc:0d:b7:ff:
35:bd:19:db:fd:29:62:0c:1f:ce:1a:62:e3:0a:64:
f9:f8:33:7c:36:d9:df:78:ed:05:fc:66:92:f1:9f:
54:0d:db:a8:b2:ac:a1:62:96:7c:52:b8:c4:a4:bb:
ee:a5:c6:48:bd:54:c6:ce:27:dd:be:63:5c:5e:4b:
d8:10:f5:91:1c:f6:c4:55:27:87:f8:45:f2:d2:a1:
d4:4d:41:70:44:a7:36:e8:c8:64:02:cf:5b:a5:2e:
35:ea:ce:ec:83:db:a6:e9:bf:31:36:7b:d5:50:6d:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:66:20:1D:0C:8E:64:B1:D9:84:1C:3E:C2:BF:04:C2:C8:1A:28:93
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/HGYgHQyOZLHZhBw-wr8EwsgaKJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.197.0/24
Signature Algorithm: sha256WithRSAEncryption
27:aa:f2:de:6d:b3:1a:1d:6a:a0:c6:8d:a1:d1:4d:c6:ed:cb:
32:28:10:db:76:8f:e0:cb:e9:b0:0b:d1:b1:fc:6e:87:97:c0:
de:8b:d6:5e:84:f5:be:bd:ad:0b:2b:98:ec:5d:96:28:ce:50:
6d:05:c0:1a:0a:d3:29:70:ee:f7:09:2c:c8:d8:b1:80:b9:4a:
2a:49:95:85:9c:bb:36:ef:95:e5:e1:c8:ec:60:2e:e0:dc:47:
cb:93:bb:48:e5:78:9e:30:41:1d:c5:9f:d1:04:52:90:c5:0a:
11:2e:b6:ba:96:4d:e7:95:6b:18:89:14:fa:73:0c:55:84:7b:
a3:ce:ae:d2:d3:a4:6b:fc:10:c3:dc:44:00:40:f9:20:39:21:
dc:3b:2f:66:de:8b:af:b4:85:4c:2b:c6:4b:87:c6:9f:6d:dc:
7f:b4:40:df:2c:ce:e8:40:7e:b1:6f:65:8d:a7:6d:86:e7:9d:
8c:c8:bf:09:8c:8c:03:4f:48:ab:0b:9b:0a:ac:74:c4:5d:83:
6a:c8:7e:77:34:c8:89:bc:b4:9f:fc:72:fc:e2:e7:2d:30:25:
ab:89:9b:fb:0c:9a:5e:87:c9:43:23:1c:11:3d:65:f9:5e:1c:
61:ca:90:1f:32:29:14:08:ae:09:6b:09:bd:08:bb:97:c1:fe:
3d:1b:36:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org