Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/hHDqTYyYp_lYs3IR0aZoCXi6DPQ.roa
File: hHDqTYyYp_lYs3IR0aZoCXi6DPQ.roa (raw, json)
Hash identifier: ZhbNXhVJ3CkyBBPpzqPWGsIlkGzcZn5yCjXCWHV9H3M=
Subject key identifier: 84:70:EA:4D:8C:98:A7:F9:58:B3:72:11:D1:A6:68:09:78:BA:0C:F4
Certificate issuer: /CN=2766f8233c9049d20c15d9eb46c9bb797617ddb7
Certificate serial: 01856F94C2666FF57339F8D84EC6405BAD4A
Authority key identifier: 27:66:F8:23:3C:90:49:D2:0C:15:D9:EB:46:C9:BB:79:76:17:DD:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2b4IzyQSdIMFdnrRsm7eXYX3bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/hHDqTYyYp_lYs3IR0aZoCXi6DPQ.roa
Signing time: Sun 01 Jan 2023 23:04:58 +0000
ROA not before: Sun 01 Jan 2023 23:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 92.114.83.0/24 maxlen: 24
185.128.192.0/22 maxlen: 22
77.81.167.0/24 maxlen: 24
92.114.36.0/24 maxlen: 24
92.114.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:c2:66:6f:f5:73:39:f8:d8:4e:c6:40:5b:ad:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2766f8233c9049d20c15d9eb46c9bb797617ddb7
Validity
Not Before: Jan 1 23:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8470ea4d8c98a7f958b37211d1a6680978ba0cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:43:05:77:3b:21:cd:a6:a0:60:5b:bc:c3:
6e:2e:ee:c8:ce:fb:f9:b1:47:28:b3:f8:6c:d0:8d:
ce:da:f6:a1:86:2d:e3:5e:8e:d7:a4:bd:16:b3:29:
33:32:0b:01:c4:1f:45:be:a6:f5:bc:2d:55:8a:dd:
45:83:13:23:21:86:b1:f3:71:bf:bf:22:2a:0d:b9:
18:ca:b6:04:2f:43:34:66:ae:09:2f:18:96:c6:7d:
cc:bd:45:cf:31:4c:3c:12:86:77:d6:3c:b0:be:0d:
25:d4:e8:89:60:44:7d:0b:9a:cc:03:8f:08:fd:32:
47:33:70:1e:92:b5:c7:42:26:3d:d6:10:c2:50:f2:
0b:21:44:42:45:10:e2:a2:60:a5:b7:df:65:a4:5a:
99:25:82:c0:fd:55:9f:a2:ab:cf:44:50:b9:a4:62:
17:ba:e5:72:ce:89:e0:54:ac:9f:7f:63:ad:f4:9b:
a2:0a:df:87:3b:3a:0f:1b:fa:3e:1d:42:3d:38:6a:
fa:81:08:66:8e:49:99:27:e1:14:68:3a:6b:90:a5:
9e:49:c7:04:22:c9:5d:7a:39:9b:48:08:8b:3a:55:
00:8e:b8:21:9a:a0:aa:3a:18:6c:8c:7f:4d:c9:fa:
1a:14:03:45:fd:c7:64:26:c6:15:f7:65:14:99:13:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:70:EA:4D:8C:98:A7:F9:58:B3:72:11:D1:A6:68:09:78:BA:0C:F4
X509v3 Authority Key Identifier:
keyid:27:66:F8:23:3C:90:49:D2:0C:15:D9:EB:46:C9:BB:79:76:17:DD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2b4IzyQSdIMFdnrRsm7eXYX3bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/hHDqTYyYp_lYs3IR0aZoCXi6DPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/J2b4IzyQSdIMFdnrRsm7eXYX3bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.167.0/24
92.114.36.0/24
92.114.53.0/24
92.114.83.0/24
185.128.192.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:3c:dd:61:11:91:ae:07:70:30:fa:ba:d2:3f:ae:d8:b2:24:
0e:dd:51:12:cf:c2:c4:be:a2:5d:b6:87:9a:d1:1b:be:0f:25:
94:eb:cf:94:69:b0:b8:67:c8:d9:70:41:77:0e:44:20:17:86:
97:e1:e4:35:99:e5:b5:a4:aa:7b:e0:f4:e8:f2:15:27:61:12:
ce:91:91:91:63:b5:7f:65:82:e5:1a:43:1f:e1:db:4b:c3:21:
b6:16:d8:da:c4:fa:74:ed:c2:e0:27:00:03:32:0e:93:b3:4e:
9d:9b:ee:ea:ec:eb:8e:05:3f:2b:5a:e4:e1:5b:d2:d7:29:ae:
4c:ac:4a:1f:61:a4:6f:85:3b:7b:ea:f9:a6:6f:d8:20:4f:cb:
90:9a:12:4d:ff:cd:46:8d:3c:64:ee:56:fe:a8:a9:8d:49:d6:
6a:96:a6:ec:78:7c:c6:00:c3:93:da:2b:b7:42:2b:9f:4e:4a:
93:65:35:18:7f:45:9a:8e:f3:1b:b1:be:da:61:1d:83:06:9e:
11:1b:d1:b5:12:5e:4a:63:b0:76:1c:5d:f4:10:b6:25:cc:2a:
9f:86:d1:96:fe:80:92:fa:81:72:3b:21:aa:d7:08:f9:00:72:
28:03:7b:46:79:65:dd:dc:13:92:df:84:0e:23:13:2a:0a:f6:
d7:50:3c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:34 2024 by rpki-client on console-ams.rpki-client.org