Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AASD38uifBO5F9z5_0HnICVjg3E.roa
File: AASD38uifBO5F9z5_0HnICVjg3E.roa (raw, json)
Hash identifier: YddrjBG3GtlTBFORKpprLHCqQDk2rt9o4uFrEiVpwuo=
Subject key identifier: 00:04:83:DF:CB:A2:7C:13:B9:17:DC:F9:FF:41:E7:20:25:63:83:71
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01857355DD21A49C4C7CEF80EF61D55EF5CA
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AASD38uifBO5F9z5_0HnICVjg3E.roa
Signing time: Mon 02 Jan 2023 16:34:44 +0000
ROA not before: Mon 02 Jan 2023 16:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49849
IP address blocks: 87.119.108.0/22 maxlen: 24
77.77.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:dd:21:a4:9c:4c:7c:ef:80:ef:61:d5:5e:f5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 16:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=000483dfcba27c13b917dcf9ff41e72025638371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:34:05:a5:9c:6a:9b:95:cc:c5:11:37:ff:
e9:2f:aa:7b:e6:e8:8d:15:d8:e6:3f:85:3d:11:1e:
5e:80:3b:ed:2d:a4:eb:52:7f:1d:cd:f9:a7:5d:0d:
2c:a7:bb:b1:08:82:ef:3f:e0:89:29:33:80:d2:08:
52:af:f8:60:28:66:a7:55:6a:73:b7:36:b2:73:ab:
5e:ee:db:17:b8:f2:d0:35:83:ed:95:f8:6c:2d:95:
ea:40:f7:f2:73:98:72:59:ae:50:c1:7d:00:1e:3f:
3e:ca:b4:a4:7d:cb:cc:56:5a:9b:20:a9:ea:f6:e3:
e4:db:d3:92:e2:b0:fc:7d:5f:96:13:47:39:51:d0:
bc:6b:cc:1f:32:dd:fa:46:13:9a:f8:5b:08:1b:d9:
26:1f:d4:ec:a5:47:ee:41:87:78:f7:0e:cc:0a:57:
8c:e1:a9:ff:40:07:dd:9d:31:a3:f3:00:9b:e7:a4:
45:6d:12:c1:27:6b:93:95:01:d5:b8:f4:eb:5c:99:
f2:ad:6e:5c:91:b6:24:73:2e:5b:b8:b1:d2:f7:ad:
3b:04:7d:52:49:22:51:77:ef:59:02:fb:c4:4b:0f:
89:b0:3c:ca:d7:bf:47:da:78:1e:ed:26:07:9d:ea:
52:14:55:d0:de:72:29:6f:d8:56:2e:8d:18:5e:56:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:04:83:DF:CB:A2:7C:13:B9:17:DC:F9:FF:41:E7:20:25:63:83:71
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AASD38uifBO5F9z5_0HnICVjg3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.128.0/21
87.119.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:ca:ca:6a:af:ce:eb:5f:01:ca:c6:ca:4e:c7:cd:93:d4:d6:
e1:79:d0:b3:0c:df:d2:3e:91:ba:a4:1d:ef:84:40:87:a6:18:
9d:14:be:3e:c5:b3:cd:7d:89:2c:d6:5a:6b:f1:ff:d8:50:61:
60:99:11:f6:98:01:5a:53:4d:80:0f:33:97:cc:bc:ce:5d:95:
15:eb:81:8a:dd:66:69:73:10:8f:3d:35:f8:24:8c:75:d2:e8:
a9:89:c7:17:3b:03:91:80:12:ee:a1:1e:f6:03:5a:d6:72:78:
67:bd:75:58:cc:34:c3:1e:49:a7:75:fd:5a:0e:99:6b:13:d6:
04:dc:51:2a:89:5d:2d:78:fc:7a:45:a3:22:d3:c2:93:47:92:
dd:67:b9:a9:fc:0c:54:7d:a8:b8:a1:70:e9:d3:ad:fd:21:d5:
de:2e:f0:d2:d3:38:9a:85:d9:3d:6b:af:e8:05:12:0d:56:47:
f7:5c:1a:c4:90:26:00:ce:4d:fa:eb:67:13:78:ca:a0:63:eb:
65:6b:be:6a:4e:cf:c0:b8:d5:0e:ef:ca:e7:0a:4c:25:a8:77:
f6:16:2d:b3:3a:f4:a1:bd:2a:99:94:f5:a6:0a:f3:b3:5b:9e:
c9:f3:be:92:d9:b1:f7:0d:28:c2:4f:86:05:cf:e0:bf:04:92:
8f:3a:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:51 2025 by rpki-client