Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Idx7EBcTNibbmMOF88OI3ylUeoc.roa
File: Idx7EBcTNibbmMOF88OI3ylUeoc.roa (raw, json)
Hash identifier: 6scgWon8LcTToctKRScbKNeUi+MjWYxFYaYJsrXtMMo=
Subject key identifier: 21:DC:7B:10:17:13:36:26:DB:98:C3:85:F3:C3:88:DF:29:54:7A:87
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C14B02E5EAF816C23D0F55D1A1A1C
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Idx7EBcTNibbmMOF88OI3ylUeoc.roa
Signing time: Mon 02 Jan 2023 07:04:49 +0000
ROA not before: Mon 02 Jan 2023 07:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 77.83.104.0/23 maxlen: 24
194.150.204.0/23 maxlen: 24
77.83.106.0/23 maxlen: 24
45.65.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:14:b0:2e:5e:af:81:6c:23:d0:f5:5d:1a:1a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21dc7b1017133626db98c385f3c388df29547a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:80:b4:50:10:2d:0c:42:76:4f:b0:0d:16:
90:5d:10:d9:d6:46:08:88:72:c0:f6:44:17:14:d5:
7a:c1:49:12:19:f4:54:0d:7a:82:5a:c2:c3:29:22:
a6:1f:1a:a3:8e:87:be:2c:12:22:9a:c0:3b:43:c8:
7b:11:c9:10:3f:37:02:46:e5:7f:4f:09:70:47:85:
1a:09:11:0e:6b:03:c7:d1:cb:bf:d5:58:87:cc:a6:
72:c9:e8:42:de:eb:e8:70:13:32:be:6b:dd:8f:0f:
85:44:79:90:6c:d2:6f:fd:93:11:ac:6c:db:9f:63:
be:c4:be:1a:3f:18:b5:40:94:90:c4:cf:66:bf:51:
74:eb:fe:ec:14:a7:d3:f5:ea:74:d3:e0:07:3b:0e:
0b:76:cf:c8:da:29:f8:42:6f:ef:94:30:ef:ed:6a:
fb:97:75:68:48:a8:54:db:28:38:9e:e2:d3:c9:f6:
32:a6:b1:8f:c1:4e:95:1e:e9:e2:64:75:f5:5b:74:
12:a8:d6:63:ad:df:76:62:1b:3b:b7:27:22:52:02:
c1:c5:a7:bb:26:53:86:64:c4:12:96:f4:7f:ff:d1:
07:79:f0:b4:a4:5b:62:34:74:2d:99:f5:77:50:df:
75:e0:19:b7:ae:08:3f:dd:e9:3d:41:9b:67:19:85:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DC:7B:10:17:13:36:26:DB:98:C3:85:F3:C3:88:DF:29:54:7A:87
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Idx7EBcTNibbmMOF88OI3ylUeoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/22
77.83.104.0/22
194.150.204.0/23
Signature Algorithm: sha256WithRSAEncryption
08:a3:79:53:e7:67:2d:95:2e:b1:84:b3:9b:f8:b5:3e:2d:99:
52:e5:02:38:c2:35:01:b8:7c:9c:94:07:41:da:80:e0:d1:1d:
18:d5:48:17:02:42:9d:d4:3e:dc:ff:58:8b:85:02:5f:56:96:
c0:15:e3:36:fc:ee:6a:68:a6:c4:4e:c2:07:fb:07:1d:b5:8b:
77:18:4a:b7:cd:fd:2f:e4:16:92:51:3b:e9:03:d6:ad:e3:63:
42:2f:64:08:ef:4c:3b:60:dc:7b:04:40:ba:43:f6:be:b5:63:
7c:07:96:21:ef:25:e8:3a:b3:dc:fb:ce:e7:72:94:84:b6:5b:
89:72:9a:ba:c1:66:4c:17:03:6e:c3:8e:ed:6c:72:b8:ff:7d:
31:53:1a:54:e5:09:42:37:f8:cb:d7:60:d8:22:90:62:47:b7:
6a:d6:af:17:42:da:52:92:9e:88:6a:0f:d4:67:61:26:a3:10:
0b:2b:e2:b4:62:d0:a9:7e:e4:97:48:33:49:73:3d:4a:ea:00:
68:58:40:36:90:08:bf:61:8e:92:8d:29:87:97:22:37:ba:44:
8a:16:ec:60:8c:09:1e:80:54:41:71:f4:6b:39:b9:38:bd:a1:
ab:be:52:33:96:0f:23:71:b4:48:32:c4:1a:8d:ce:92:01:ac:
65:67:96:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org