Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YdYgG1Rk6mDnFSWzS3-syKlJmRo.roa
File: YdYgG1Rk6mDnFSWzS3-syKlJmRo.roa (raw, json)
Hash identifier: TsYicBfQY2Lj58Gp054b7404vk7pdekrrMz/KbD6U/0=
Subject key identifier: 61:D6:20:1B:54:64:EA:60:E7:15:25:B3:4B:7F:AC:C8:A9:49:99:1A
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01857355D6C250DC041B1A4F6E7D1F0865B0
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YdYgG1Rk6mDnFSWzS3-syKlJmRo.roa
Signing time: Mon 02 Jan 2023 16:34:43 +0000
ROA not before: Mon 02 Jan 2023 16:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8001
IP address blocks: 77.67.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:d6:c2:50:dc:04:1b:1a:4f:6e:7d:1f:08:65:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 16:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61d6201b5464ea60e71525b34b7facc8a949991a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:3c:9b:6f:71:59:fe:84:aa:61:ac:9a:f7:
52:65:16:c6:a8:3c:c8:7d:b4:fc:19:05:3e:d1:a4:
73:c9:36:52:1e:85:ca:ed:38:87:46:97:ba:8b:f0:
41:f1:d7:c0:e4:e3:b9:e4:a8:b9:98:ce:5f:16:d9:
4d:8f:ae:d4:dd:33:2b:9a:d9:24:24:13:fe:aa:15:
75:9d:43:65:54:81:77:46:ce:83:ba:08:db:9a:c0:
24:e6:57:51:1d:bc:5b:b6:18:31:35:29:4e:e3:fd:
a9:a2:1e:63:a7:73:52:10:5a:a8:3a:ba:65:78:53:
cf:32:77:76:c2:57:66:f3:df:53:21:54:8d:37:3b:
f6:9c:20:25:f9:3a:7f:09:ff:2d:e9:3a:6b:f8:dc:
e5:c8:01:a1:23:3b:dc:d6:b6:5d:aa:be:2e:b3:e0:
e7:f5:58:1a:7f:33:70:ce:39:73:2f:2e:8c:ec:0a:
3c:85:15:ee:65:d4:3a:e0:70:53:b0:7e:57:a2:39:
89:fc:75:a6:25:61:1b:11:7e:af:84:48:cb:a2:7b:
40:a1:55:74:f7:81:70:ce:04:f1:0b:24:7a:20:c3:
3b:3e:70:79:a3:ba:53:d9:82:15:07:ba:6d:2a:bf:
3b:ed:b5:d0:dd:f2:1f:6c:55:f0:59:de:1f:dd:91:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D6:20:1B:54:64:EA:60:E7:15:25:B3:4B:7F:AC:C8:A9:49:99:1A
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YdYgG1Rk6mDnFSWzS3-syKlJmRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.101.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:13:4a:45:f1:0b:13:d9:21:f2:7c:1b:0a:66:2f:a2:80:a7:
23:c9:c7:71:57:3d:f8:a2:79:ee:51:38:60:55:2a:b2:84:c2:
f2:13:3c:fc:00:b9:e6:21:83:32:cf:58:85:f1:6a:80:3b:08:
e9:1d:fc:bb:f2:e8:b8:ad:5d:e6:a3:c5:29:1c:35:21:ba:21:
a9:d3:f0:ff:f4:65:a0:0e:d4:d4:6e:51:66:fe:2e:0b:c8:69:
f5:52:f9:c8:bc:ab:03:a3:ff:c0:35:ba:aa:8d:58:8c:14:7c:
03:c7:25:78:f4:d1:86:46:42:d6:10:11:5f:5c:85:fe:3a:77:
40:e5:7a:98:12:b1:be:fa:d0:17:c0:78:2b:81:71:f3:a3:1a:
2b:be:c1:53:3e:c7:78:3a:cd:ef:33:cc:fe:2e:a9:22:3c:2a:
a3:49:2e:77:27:89:ed:35:0a:4c:1d:b8:c3:50:7d:62:a2:d4:
cc:d6:73:5c:58:53:ce:59:2f:ae:d6:82:62:cb:93:4a:d3:e2:
87:04:d8:bd:b8:de:4e:ed:39:a0:db:51:ab:c1:b2:25:34:81:
35:62:3c:82:ba:9a:bd:e1:7e:12:86:5e:fc:72:20:45:da:ef:
77:17:b2:18:e5:d7:12:53:46:ac:d6:43:23:f5:f9:3a:c1:7a:
f7:42:10:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:36 2025 by rpki-client