Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/i0qmLKBxvbcEySZAS4L8YkBRAhw.roa
File: i0qmLKBxvbcEySZAS4L8YkBRAhw.roa (raw, json)
Hash identifier: t1BHCQ8ZVe+qTYXsRqSbF8ENPxfR13WztzeIie7c3WY=
Subject key identifier: 8B:4A:A6:2C:A0:71:BD:B7:04:C9:26:40:4B:82:FC:62:40:51:02:1C
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 018953996D7CBC82D607303C9E1137EC97D0
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/i0qmLKBxvbcEySZAS4L8YkBRAhw.roa
Signing time: Fri 14 Jul 2023 08:51:51 +0000
ROA not before: Fri 14 Jul 2023 08:51:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.75.192.0/24 maxlen: 24
77.75.194.0/24 maxlen: 24
77.75.195.0/24 maxlen: 24
77.75.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:53:99:6d:7c:bc:82:d6:07:30:3c:9e:11:37:ec:97:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jul 14 08:51:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b4aa62ca071bdb704c926404b82fc624051021c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:ef:e5:69:a9:f7:74:87:d8:fb:5d:3d:cb:
fc:d4:0e:41:fb:bc:ab:0c:d1:e5:14:14:7e:c2:c0:
8d:91:a3:3f:1b:43:b3:e8:23:af:c9:d9:4e:fd:db:
23:6c:70:73:7c:bf:2b:06:a5:d7:e1:c8:87:ec:f6:
ea:de:0b:75:ae:a1:ac:b2:91:1d:1a:19:a5:6f:78:
f9:0c:0f:44:63:bd:39:c4:f6:bc:19:01:cc:68:97:
90:7f:a3:93:0c:53:18:a5:f9:f6:20:b3:70:b9:08:
49:5e:91:df:6f:57:35:29:1b:52:31:bf:24:9d:f8:
4a:ff:5c:a1:63:f6:a4:27:82:40:a9:f4:3b:3b:f6:
ac:55:cd:cf:d6:ee:53:c4:a6:a6:7e:e7:93:ea:4c:
6e:6b:e5:a9:49:48:a2:fb:ed:0c:5c:d2:10:d7:00:
ad:47:21:ee:63:76:a0:c6:9c:39:3b:d5:be:f4:e9:
bf:1b:5f:b4:5a:82:dc:7c:9f:80:34:84:b9:15:48:
9a:ff:26:60:48:c2:ad:96:1b:45:36:cb:41:d3:a7:
46:60:59:9e:99:0f:7c:07:2c:16:5d:c1:58:df:18:
a1:67:e9:c5:86:f7:f1:76:b6:32:01:85:9a:9c:5c:
8e:30:12:46:39:47:94:ac:5f:be:34:b7:82:bb:8b:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4A:A6:2C:A0:71:BD:B7:04:C9:26:40:4B:82:FC:62:40:51:02:1C
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/i0qmLKBxvbcEySZAS4L8YkBRAhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.192.0/22
Signature Algorithm: sha256WithRSAEncryption
81:90:e3:59:f6:72:33:af:8a:a9:d3:fb:6b:d7:b8:db:4b:b5:
e2:0a:34:af:e9:7e:52:98:47:3d:3c:2d:af:12:a8:1b:98:d1:
68:d9:91:8e:86:7c:2f:15:39:b5:52:c6:bc:f2:1a:9a:4f:41:
a5:fa:48:62:ac:3d:d9:ce:94:20:1f:53:00:f4:e9:86:98:2b:
16:7e:bf:57:09:b4:b3:00:30:19:bf:44:90:96:37:e3:80:ad:
6c:ac:f7:73:2a:1b:33:d3:91:86:0f:7f:1c:23:28:3e:2d:0e:
56:28:7a:4e:b6:cd:e8:0c:b0:57:38:4b:0c:98:39:f1:49:23:
42:3a:19:e8:31:6a:7f:a1:f6:fc:3f:5a:fe:7c:ef:cc:4c:16:
a5:b0:96:9f:75:c0:98:63:52:cc:5d:84:27:94:84:1f:e9:5c:
60:e3:1d:73:54:50:6c:ff:db:7f:35:e6:66:9d:46:b2:0b:d1:
77:bb:42:3e:97:47:b0:06:31:39:73:73:45:e5:21:1f:6c:99:
89:4a:34:0b:39:41:77:2f:1d:fd:bd:62:9c:6e:ba:ca:91:01:
51:c7:49:4c:d3:eb:d2:5b:8a:97:4b:8e:83:e8:66:bd:e4:71:
06:fa:b5:4f:cf:1a:21:58:79:ca:41:c3:bd:c2:b2:75:9e:47:
2b:81:ca:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org