Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e5fd54-be89-4de2-aace-0d65a6c1d5b2/1/zPAPr8sgC5HVAGZDf429s8XLsgk.roa
File: zPAPr8sgC5HVAGZDf429s8XLsgk.roa (raw, json)
Hash identifier: 3GCj4ulPBdeTcdmGjK1jB6iY4vuuS2tLSll6x/7qZ20=
Subject key identifier: CC:F0:0F:AF:CB:20:0B:91:D5:00:66:43:7F:8D:BD:B3:C5:CB:B2:09
Certificate issuer: /CN=e778acfd17c5fab4e0c60307998d464260293099
Certificate serial: 018570CBE0BC4FDF8B0C79CC2E5C448ADD40
Authority key identifier: E7:78:AC:FD:17:C5:FA:B4:E0:C6:03:07:99:8D:46:42:60:29:30:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53is_RfF-rTgxgMHmY1GQmApMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e5fd54-be89-4de2-aace-0d65a6c1d5b2/1/zPAPr8sgC5HVAGZDf429s8XLsgk.roa
Signing time: Mon 02 Jan 2023 04:44:47 +0000
ROA not before: Mon 02 Jan 2023 04:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41155
IP address blocks: 77.75.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:e0:bc:4f:df:8b:0c:79:cc:2e:5c:44:8a:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e778acfd17c5fab4e0c60307998d464260293099
Validity
Not Before: Jan 2 04:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccf00fafcb200b91d50066437f8dbdb3c5cbb209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fb:54:7b:39:07:77:d1:51:8e:95:fd:d5:b8:
97:ab:01:ff:67:23:bf:fa:f7:35:8a:95:72:c6:f0:
4c:d6:1c:54:da:9d:e8:45:50:08:94:cb:68:9c:48:
66:b4:e7:c9:87:45:63:3c:87:67:4a:01:f5:c9:cb:
85:00:05:4d:dc:1f:73:4d:b7:27:c2:ad:a7:2f:70:
e6:53:59:8e:95:25:be:3f:7c:48:43:7f:60:be:78:
41:22:6d:d5:5c:26:5c:35:96:7b:5f:92:80:f4:29:
96:5f:af:84:b9:62:17:ac:60:d4:7a:97:93:51:aa:
2c:ab:3f:31:75:97:7e:19:88:c6:99:9a:d2:33:88:
be:9b:78:0c:39:30:09:a4:5a:39:81:2c:ef:95:db:
72:1c:2f:fa:7c:21:36:05:12:65:f1:e0:4e:24:a6:
68:6d:86:8f:2e:25:68:a7:7b:48:ca:38:e6:e5:c9:
1a:26:3e:f1:67:fb:84:a2:d3:21:e5:28:67:a3:7c:
94:78:86:a0:be:42:bf:d0:7c:0e:6d:ed:85:9f:c2:
a7:d7:06:88:93:32:3f:e1:da:fa:d0:6f:9b:57:cb:
fc:55:e5:52:a6:1e:fc:d4:de:9a:4c:53:02:e5:15:
57:fe:a0:f0:b5:16:d8:0d:52:48:0d:01:a5:58:cd:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F0:0F:AF:CB:20:0B:91:D5:00:66:43:7F:8D:BD:B3:C5:CB:B2:09
X509v3 Authority Key Identifier:
keyid:E7:78:AC:FD:17:C5:FA:B4:E0:C6:03:07:99:8D:46:42:60:29:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53is_RfF-rTgxgMHmY1GQmApMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e5fd54-be89-4de2-aace-0d65a6c1d5b2/1/zPAPr8sgC5HVAGZDf429s8XLsgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e5fd54-be89-4de2-aace-0d65a6c1d5b2/1/53is_RfF-rTgxgMHmY1GQmApMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.231.0/24
Signature Algorithm: sha256WithRSAEncryption
21:13:44:28:0b:99:66:b0:83:db:0d:bc:92:79:12:03:a7:0e:
91:9a:43:a3:fc:8a:e5:91:15:f1:cc:46:6d:86:a2:f3:41:8a:
be:04:29:cb:cc:96:ac:4e:66:c7:1c:64:d7:7f:f1:03:b0:86:
9d:bf:48:49:cd:d0:9c:6f:73:21:f3:1e:2e:1b:48:f5:e8:6e:
b4:d3:40:5b:3c:b4:22:ed:67:6c:af:e5:8f:76:dd:77:2e:fa:
94:66:ee:61:e7:b4:44:33:42:f9:a1:61:3b:c0:53:4f:7a:6d:
93:4d:53:da:61:b5:15:30:bf:1a:b3:7f:71:b9:e3:99:f3:51:
b6:5b:c7:3f:0a:b7:bb:78:ab:ed:2d:b1:12:d4:10:d1:43:21:
46:70:d1:57:ea:88:4e:b3:f9:f2:f1:69:13:02:a7:34:f7:e6:
c9:33:fe:6b:5c:8a:3c:49:55:32:a9:dd:88:15:7f:39:9f:87:
7d:a9:6a:49:e4:65:71:21:59:fb:48:36:60:e3:11:66:50:01:
99:62:5d:3d:8c:41:e1:cf:f1:10:05:d2:f3:02:86:73:de:7a:
75:10:72:db:8e:33:fa:55:a7:e3:55:24:7b:43:67:c5:02:81:
31:6e:7f:b1:7f:16:fe:c3:34:66:ca:5f:88:8e:cf:a0:bc:31:
fe:75:a5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 14:35:37 2023 by rpki-client on console-fra.rpki-client.org