Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/Q-MnCXVYWYk2wfq2FQgkkNLczsg.roa
File: Q-MnCXVYWYk2wfq2FQgkkNLczsg.roa (raw, json)
Hash identifier: fQQSS5syt61Gpqy9o3VClonUrrnZaIMxhaAL87iavv8=
Subject key identifier: 43:E3:27:09:75:58:59:89:36:C1:FA:B6:15:08:24:90:D2:DC:CE:C8
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018B7052CBA2BDB8C12CDB78AF7A56F81E0B
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/Q-MnCXVYWYk2wfq2FQgkkNLczsg.roa
Signing time: Fri 27 Oct 2023 08:49:16 +0000
ROA not before: Fri 27 Oct 2023 08:49:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.75.192.0/22 maxlen: 24
77.75.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:52:cb:a2:bd:b8:c1:2c:db:78:af:7a:56:f8:1e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Oct 27 08:49:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43e327097558598936c1fab615082490d2dccec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:e3:cb:29:89:a7:81:35:1f:7f:9f:50:22:
14:d8:c8:a2:33:b2:91:ba:1c:8f:41:9b:ef:7d:71:
87:a6:0b:7f:e5:90:8a:80:d2:81:9f:66:bd:e0:60:
9e:66:15:0b:0c:4f:bd:a6:21:c3:1b:77:05:5c:ff:
98:c4:19:e2:63:3f:48:d4:34:fb:61:a5:97:36:c5:
0a:db:be:ed:6f:e9:cb:fa:8d:df:f4:9b:43:4d:4a:
1d:8c:a8:b7:eb:2d:af:71:97:65:59:6d:2c:63:c4:
41:20:de:15:cc:bd:5f:10:bd:a9:f6:72:34:12:a2:
d5:d5:d8:84:74:e0:c1:ed:36:3b:0e:b3:9b:a0:2c:
8b:0d:9a:40:a1:35:65:87:65:d9:4b:74:ad:71:88:
72:aa:2a:2d:b9:af:6a:1d:bc:be:af:91:9c:ad:d6:
b4:95:98:80:88:dd:99:0c:f2:49:12:dc:c8:99:0c:
e7:b6:fd:53:9f:60:18:21:2f:84:53:d4:50:38:67:
88:4b:90:3a:e9:45:0c:21:13:8a:64:e2:b4:ea:c0:
e1:ec:2b:b6:8a:38:aa:64:2d:a2:4a:08:5d:82:44:
16:78:ef:79:60:e8:4f:4f:dd:8c:34:18:d2:5f:63:
a9:cf:97:45:96:5c:96:30:f2:59:bf:db:a3:db:22:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E3:27:09:75:58:59:89:36:C1:FA:B6:15:08:24:90:D2:DC:CE:C8
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/Q-MnCXVYWYk2wfq2FQgkkNLczsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.192.0/22
77.75.197.0/24
Signature Algorithm: sha256WithRSAEncryption
99:36:fe:6a:1d:8e:b5:2c:79:7f:31:c0:e9:e7:49:5b:a3:e1:
ea:7f:9a:55:a9:a7:d3:65:68:70:98:dd:2f:e8:e7:dd:3d:f5:
93:c1:45:4e:4f:ef:d1:4c:98:10:53:30:3a:65:ec:86:a1:a7:
e3:9d:d6:e2:2a:c4:23:17:08:13:00:56:38:12:f8:02:88:e5:
08:87:e3:b0:34:6c:e8:2f:54:97:17:c2:f8:a3:28:37:f2:31:
4e:99:ef:84:84:49:bc:f8:ab:34:ae:09:30:37:74:b0:0d:5c:
69:f6:2c:28:6d:5a:7e:89:00:5e:02:e9:e6:b7:11:29:db:ac:
ab:5e:5b:c2:ee:f6:a9:cf:3e:fb:23:cc:47:37:f8:a2:29:05:
22:fa:bd:d9:b6:5d:90:9f:a6:cb:aa:91:cd:c3:2d:ab:2d:00:
02:67:f1:98:f0:bf:c8:52:cb:03:59:6d:cf:28:c7:e8:aa:44:
50:99:dd:80:9a:82:cc:c4:32:de:c9:2c:1f:41:c7:fe:fd:cf:
80:a8:9b:d3:9a:2b:df:cc:2e:84:7d:1d:c7:0c:41:41:f8:fd:
34:be:5e:23:8d:fc:1f:0f:18:b7:86:be:48:12:85:8f:4f:a1:
dc:36:df:96:18:c7:59:e6:b1:a0:fa:61:25:06:e4:6c:82:58:
7b:b4:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org