Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/vXvQ4LqkdRPKLesH3VCQdmZwG74.roa
File: vXvQ4LqkdRPKLesH3VCQdmZwG74.roa (raw, json)
Hash identifier: e09oKmDwxwm8hNYq2DuZhKyC4wEox2NvsFJ/7SJeH+Q=
Subject key identifier: BD:7B:D0:E0:BA:A4:75:13:CA:2D:EB:07:DD:50:90:76:66:70:1B:BE
Certificate issuer: /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial: 0189638D9BE5125154DBD1D45E08BC15F843
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/vXvQ4LqkdRPKLesH3VCQdmZwG74.roa
Signing time: Mon 17 Jul 2023 11:12:52 +0000
ROA not before: Mon 17 Jul 2023 11:12:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.75.192.0/24 maxlen: 24
77.75.194.0/24 maxlen: 24
77.75.195.0/24 maxlen: 24
77.75.196.0/24 maxlen: 24
77.75.197.0/24 maxlen: 24
77.75.198.0/24 maxlen: 24
77.75.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:8d:9b:e5:12:51:54:db:d1:d4:5e:08:bc:15:f8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Validity
Not Before: Jul 17 11:12:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd7bd0e0baa47513ca2deb07dd50907666701bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e5:62:eb:44:58:a1:e2:e9:93:4b:da:16:dc:
7c:ab:6f:21:41:28:ea:1e:09:27:8d:a9:12:c3:70:
e8:50:9b:4e:65:d0:9d:fa:9b:14:51:0d:55:c0:fc:
74:0a:6b:2f:06:18:7c:cf:4f:fb:f1:e9:08:c8:81:
31:68:5d:94:31:d7:53:5f:bd:38:61:6f:a7:a6:71:
59:e6:16:c6:7b:e1:4f:45:d3:28:5d:16:ad:65:4d:
a5:3a:d8:8e:b7:e0:e3:26:fd:dc:16:c0:39:e1:a2:
98:a3:8e:f8:07:5e:28:63:56:b2:cc:92:6f:5a:a4:
29:ab:bc:72:22:2b:b6:b9:86:c9:5d:96:e1:ce:a3:
e9:a0:6b:d9:33:7e:ae:ff:89:bb:43:a7:ce:50:49:
f4:76:ab:0f:f7:37:64:a8:5f:a2:89:90:42:b8:f6:
1a:d1:f5:27:f8:93:64:af:91:b1:3e:c9:56:a3:75:
f9:1c:a6:4f:ee:87:d3:c7:be:49:9a:47:8e:d7:a4:
8b:d1:ca:a1:be:18:53:ec:7b:6a:d3:67:f1:dc:9e:
53:d3:36:bc:bd:69:c7:66:9c:9a:69:e6:95:b0:f2:
c0:4b:83:11:75:d8:a9:9f:72:b1:2c:3b:76:22:ec:
84:48:19:0c:6b:69:e4:38:bb:c0:b8:11:ae:e2:4e:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7B:D0:E0:BA:A4:75:13:CA:2D:EB:07:DD:50:90:76:66:70:1B:BE
X509v3 Authority Key Identifier:
keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/vXvQ4LqkdRPKLesH3VCQdmZwG74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.192.0-77.75.198.255
Signature Algorithm: sha256WithRSAEncryption
77:f7:ea:50:98:e1:cc:87:f7:05:0e:93:f2:3c:2c:bd:85:13:
df:96:ca:e4:41:7c:6c:ab:59:80:36:a9:e2:74:2d:d6:42:60:
0b:b1:f4:bb:c9:d0:e9:f1:16:f0:98:f2:a2:e3:4a:bc:11:43:
6a:7b:58:23:ea:aa:03:22:6f:cb:c0:f1:b4:a2:c4:0c:48:67:
fd:a6:c2:67:12:85:e2:26:54:8d:c6:c7:45:c8:d8:a8:a3:d8:
62:8d:d7:e0:fa:04:6e:f1:91:50:58:73:38:c9:b1:9b:c3:fe:
75:bc:42:72:3a:0c:15:99:f7:01:34:cc:a7:d1:43:fa:cc:a9:
bd:8e:77:d0:3b:7d:05:a8:30:11:42:c7:37:c2:70:ef:0b:e5:
c6:1f:9d:a0:be:11:12:61:9f:4f:8b:b1:6b:dc:eb:4e:66:53:
7a:3e:6f:40:a4:12:d5:4a:e3:78:7d:40:d9:18:97:89:8d:7a:
2e:85:77:1c:76:1b:fd:8d:6a:dd:f1:79:7c:89:31:36:49:64:
06:bb:fb:56:99:50:19:34:83:13:f6:fd:cd:44:ef:1d:cd:94:
ef:0b:b1:75:59:e6:2c:d7:d3:00:57:8a:10:7d:b6:c9:ac:25:
af:cc:6c:db:83:d4:12:80:16:69:66:73:e3:60:45:12:b4:81:
34:93:30:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org