Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/N6J3pPen0mrwm1sgIR2dx4U1ILE.roa
File: N6J3pPen0mrwm1sgIR2dx4U1ILE.roa (raw, json)
Hash identifier: smIwKtUnsgUKZNHIM5jgFMnh/3Nk5w4GPHiVmdYgD00=
Subject key identifier: 37:A2:77:A4:F7:A7:D2:6A:F0:9B:5B:20:21:1D:9D:C7:85:35:20:B1
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 0188B906B0F6E1994872722F8FCD10CF1073
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/N6J3pPen0mrwm1sgIR2dx4U1ILE.roa
Signing time: Wed 14 Jun 2023 08:30:03 +0000
ROA not before: Wed 14 Jun 2023 08:30:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 77.75.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:06:b0:f6:e1:99:48:72:72:2f:8f:cd:10:cf:10:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jun 14 08:30:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37a277a4f7a7d26af09b5b20211d9dc7853520b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:40:36:25:91:67:73:3c:77:76:21:20:f7:
36:1b:67:77:5e:b4:92:4e:ea:d1:bb:0c:b9:3d:6c:
92:4c:e2:95:b8:40:97:70:34:a0:a9:61:b0:a9:ef:
08:98:40:fe:43:d6:83:10:b8:7d:7f:57:5a:e1:c8:
80:ef:b2:ae:41:3d:c9:d4:2b:98:71:31:f2:5a:55:
eb:3f:8e:07:ae:75:de:be:db:90:4e:0a:ab:90:33:
ee:e7:57:d4:f0:46:2c:95:f4:e8:11:1a:b7:5c:0d:
78:e2:de:24:9b:40:bb:de:7c:5b:18:bd:d6:1b:45:
2b:fe:42:46:7e:f7:3d:26:25:b0:9f:78:79:66:89:
08:45:a3:47:26:17:8d:8e:1b:15:fe:1d:0f:5b:e2:
d5:6b:64:53:6b:db:7f:5d:90:1b:7b:ea:88:1f:88:
0a:4a:74:39:46:6e:cf:55:d7:a6:69:bc:24:98:87:
90:22:d0:cd:e0:77:e1:e4:2a:e7:5e:08:cf:fe:1d:
54:7d:0b:21:c3:90:fc:36:07:e8:09:da:c4:88:49:
1a:58:e6:77:62:23:0c:4b:5a:12:40:8d:f2:53:88:
40:01:b2:54:38:27:d6:94:92:c6:f5:9a:9f:4a:fb:
8e:29:23:6b:ea:bd:56:49:31:a0:aa:c0:ae:a3:07:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A2:77:A4:F7:A7:D2:6A:F0:9B:5B:20:21:1D:9D:C7:85:35:20:B1
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/N6J3pPen0mrwm1sgIR2dx4U1ILE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.194.0/24
Signature Algorithm: sha256WithRSAEncryption
19:66:4a:57:d1:04:a9:f9:b5:40:2f:d1:31:2e:1d:f8:7d:6f:
dd:c0:25:86:c0:b8:8f:8b:ae:de:29:ff:4a:16:51:b1:90:ae:
10:01:f3:4b:07:bb:a5:36:a0:dd:7b:9c:c6:dc:db:13:75:24:
3b:53:4f:1d:c2:ca:11:e2:94:92:5e:87:7e:2b:ac:4b:e1:80:
e3:03:82:d8:77:3f:b8:6b:59:2f:2a:0d:48:c8:87:10:1b:bf:
f2:40:14:6d:f9:6c:cc:af:0e:c8:dc:0d:ee:13:35:e0:b9:c0:
9e:3f:c0:b3:b2:44:75:05:27:a0:57:84:56:d0:a1:92:13:a9:
ab:aa:86:25:a0:3f:a7:b2:c3:d3:15:73:4a:fe:4c:4f:98:5f:
58:54:2e:78:35:0f:5b:85:59:41:1b:a4:76:79:c3:98:b7:40:
47:97:c1:00:54:02:14:a7:4b:0d:7e:cc:1d:fe:99:3a:a2:23:
62:12:7f:9f:3a:1d:08:db:1c:ce:ea:d1:e3:39:de:14:ab:cc:
e8:38:5a:8e:ee:f1:76:44:8d:38:44:fe:3c:8e:53:82:e3:e4:
f2:fa:07:72:aa:47:27:a9:e7:e8:a6:c9:f0:d0:f5:9c:66:53:
f6:44:c1:ca:b9:eb:9d:a9:c8:ee:90:36:5d:20:70:97:d2:ba:
5e:df:f8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:30 2025 by rpki-client