Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/rHwwS4p3mDe3k3RlKoN7KRAD-ks.roa
File: rHwwS4p3mDe3k3RlKoN7KRAD-ks.roa (raw, json)
Hash identifier: +R+/s9k1dxMa5aWYDfQt1b8L7raxUAJF/O4yxOfKP3M=
Subject key identifier: AC:7C:30:4B:8A:77:98:37:B7:93:74:65:2A:83:7B:29:10:03:FA:4B
Certificate issuer: /CN=1f29868e8487dcb4bc7205163f56b9400983644f
Certificate serial: 018CC56E2B1A4B08E329ADF806E4B20FABD9
Authority key identifier: 1F:29:86:8E:84:87:DC:B4:BC:72:05:16:3F:56:B9:40:09:83:64:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HymGjoSH3LS8cgUWP1a5QAmDZE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/rHwwS4p3mDe3k3RlKoN7KRAD-ks.roa
Signing time: Mon 01 Jan 2024 14:29:40 +0000
ROA not before: Mon 01 Jan 2024 14:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42876
IP address blocks: 77.221.224.0/19 maxlen: 19
77.221.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2b:1a:4b:08:e3:29:ad:f8:06:e4:b2:0f:ab:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29868e8487dcb4bc7205163f56b9400983644f
Validity
Not Before: Jan 1 14:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac7c304b8a779837b79374652a837b291003fa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:94:5f:09:4b:c5:d1:8b:ca:07:09:6e:32:
5d:9a:18:a0:b3:81:56:be:8c:8f:fc:f4:ab:24:e7:
5c:be:1d:1d:3d:38:0c:19:dd:53:22:27:4e:40:ae:
47:4e:a0:92:36:58:7c:b3:f1:37:e8:75:40:c3:8c:
a1:86:65:56:81:e3:d9:e8:e4:53:03:79:42:70:cd:
04:10:0e:91:c6:5e:0d:9b:58:10:5f:98:50:a4:21:
30:11:bb:db:49:0b:8d:61:5d:78:8f:4b:3b:61:79:
59:cc:f3:14:c0:a1:6e:49:49:c6:0b:f0:47:fb:86:
bd:09:dc:a1:6b:da:5f:cb:c3:b2:1a:ec:ab:81:2a:
3c:78:ab:aa:b4:88:36:65:ed:94:b2:45:9f:10:c6:
97:8f:a5:02:8f:1f:a7:b8:b9:17:69:ac:c2:85:c1:
27:81:bd:58:26:48:8f:38:31:3a:d1:04:2c:56:43:
3f:b7:62:f7:60:16:2c:23:34:48:ce:44:9e:43:0f:
05:c7:89:47:a8:25:77:e2:ab:63:2a:37:29:a5:59:
7f:b7:64:83:89:2b:fd:df:51:24:f4:50:cc:59:80:
49:20:e0:ba:47:a7:5c:90:dc:58:5f:a5:61:11:2f:
07:aa:ff:ee:50:6f:ee:79:ff:c2:4c:3c:92:e7:39:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7C:30:4B:8A:77:98:37:B7:93:74:65:2A:83:7B:29:10:03:FA:4B
X509v3 Authority Key Identifier:
keyid:1F:29:86:8E:84:87:DC:B4:BC:72:05:16:3F:56:B9:40:09:83:64:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HymGjoSH3LS8cgUWP1a5QAmDZE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/rHwwS4p3mDe3k3RlKoN7KRAD-ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/HymGjoSH3LS8cgUWP1a5QAmDZE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.224.0/19
Signature Algorithm: sha256WithRSAEncryption
82:d8:56:a5:a3:8d:cb:7a:24:12:ff:77:a7:f3:da:ef:f0:21:
4a:56:d5:ed:c5:d8:7b:cc:e6:c6:9c:c8:e5:de:9e:91:b2:9d:
fe:07:57:46:5a:99:3b:ca:df:a1:d3:17:37:4f:7a:b0:35:2c:
f9:61:02:46:89:75:48:bd:51:a6:85:c0:3e:6b:ad:1a:8f:8e:
05:e7:83:78:f4:88:12:05:73:47:b1:a5:1f:c0:83:b4:4d:e7:
78:12:74:f4:3d:c4:86:ce:42:14:4b:86:20:7b:6b:73:f5:77:
80:ec:13:6c:1c:9e:d8:91:09:34:55:f5:5f:fa:1b:bb:48:6e:
96:2d:e0:e8:a5:77:13:d7:d7:53:ee:f7:56:35:07:49:be:cc:
26:9f:9b:49:e4:76:09:d9:ea:e4:90:1b:32:a8:62:0d:16:9f:
57:7c:52:23:38:8a:cd:e6:34:11:a6:d9:01:fb:c3:1a:84:36:
77:3d:f7:55:81:8d:b8:bd:75:de:7d:55:26:c4:85:eb:43:fe:
ee:25:b0:ed:95:4d:00:d0:6d:0f:97:bb:71:b3:e8:ec:1e:ec:
a9:b9:83:88:45:be:1e:59:d7:bb:36:21:5e:de:75:dc:ac:77:
4f:95:7c:52:5b:10:33:c8:15:e2:df:92:38:36:8b:66:6e:f5:
c7:1f:64:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 11:26:59 2024 by rpki-client on console-fra.rpki-client.org