Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/pohDuvk4lKpMKYqYZJdb4sGhmzM.roa
File: pohDuvk4lKpMKYqYZJdb4sGhmzM.roa (raw, json)
Hash identifier: IArSM4YD8pFs6cbYgZmF+GuPkUvbTyOarL87OfgBlkU=
Subject key identifier: A6:88:43:BA:F9:38:94:AA:4C:29:8A:98:64:97:5B:E2:C1:A1:9B:33
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 0188B9B1E529BE9E0760F060DE73724A07EA
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/pohDuvk4lKpMKYqYZJdb4sGhmzM.roa
Signing time: Wed 14 Jun 2023 11:37:03 +0000
ROA not before: Wed 14 Jun 2023 11:37:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 77.75.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:b1:e5:29:be:9e:07:60:f0:60:de:73:72:4a:07:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jun 14 11:37:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a68843baf93894aa4c298a9864975be2c1a19b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f8:92:30:f0:1b:a0:e4:78:75:46:2e:a7:ec:
e7:5f:36:7e:e8:65:a6:0f:87:c9:ef:6a:06:36:c8:
b1:77:84:bf:bd:e3:8a:c5:54:73:54:8e:6d:9f:a1:
29:c7:a6:cd:d5:e8:bf:06:5f:6f:fb:77:d3:ea:c9:
b0:4b:01:da:43:ab:e6:1a:5c:36:3d:3a:85:48:e4:
c0:2d:eb:1c:f5:0e:39:6e:cf:59:33:57:bf:64:eb:
1a:c7:b0:2b:c5:b0:f3:a9:40:75:96:e3:26:67:37:
21:8c:44:c3:14:3e:ef:6e:15:29:22:8f:35:71:4b:
57:63:99:11:33:70:32:24:56:fb:26:c8:57:77:dc:
9f:39:30:8c:8d:9b:dd:8e:c0:31:33:f9:14:df:8e:
45:66:c6:91:79:e1:d6:ad:32:d5:2f:9a:29:f3:87:
0a:7e:49:8e:e0:28:ba:16:93:33:49:4e:21:57:95:
ef:82:ca:60:29:fc:1f:c4:95:2d:16:e7:40:b9:6f:
bf:23:d9:f3:f6:8f:d4:1e:2e:73:10:fb:75:a5:83:
a8:72:2a:1d:0b:3c:d0:36:fe:23:d4:54:d8:e4:29:
59:b9:c3:5f:a4:3e:98:b5:85:f8:95:68:60:69:c6:
9a:92:98:42:18:6d:c0:76:a3:c3:b0:b8:3c:aa:05:
88:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:88:43:BA:F9:38:94:AA:4C:29:8A:98:64:97:5B:E2:C1:A1:9B:33
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/pohDuvk4lKpMKYqYZJdb4sGhmzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.192.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:39:88:04:5f:bb:2b:50:58:86:af:01:c4:56:89:a0:ba:d3:
10:5b:8e:50:3f:8d:5c:5d:08:66:c3:52:b1:ec:2a:9d:2e:9f:
11:7c:9f:ea:d1:00:ce:f7:ad:7c:09:d9:1d:1f:77:a7:7c:12:
44:71:af:a5:7c:0f:64:44:24:0c:33:01:3d:bf:c8:14:4c:59:
a8:26:8f:94:44:5a:80:80:b2:f2:f5:2f:01:53:97:5a:64:3a:
6f:47:f8:86:aa:1c:6f:01:cb:31:95:4c:a0:68:e8:30:c8:54:
df:e3:c3:c8:1d:d8:60:29:db:dd:c6:7e:3f:83:80:26:03:5a:
b2:fc:a0:fe:6b:2f:ef:c0:82:82:c7:60:c5:4c:d3:2a:79:30:
47:52:b1:93:f4:1e:15:9c:20:ad:3d:86:f2:41:a0:00:c5:0f:
ee:23:d5:50:21:49:dd:ff:f6:dc:6b:7c:44:00:cd:85:da:0a:
6f:9c:02:e7:81:9d:24:80:bb:d6:4c:23:2b:2d:db:64:10:e1:
b0:a7:3d:b3:9a:69:73:cb:51:7b:5d:a1:a2:7e:7c:e5:19:53:
3a:c5:94:00:3f:3d:a0:fc:ac:43:bc:f8:e5:4f:03:ae:81:ec:
67:89:91:1f:14:59:15:e2:7a:c9:73:16:db:63:2d:76:1a:e7:
9b:e0:72:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org