Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/29DCjYRUYwjFihqzzu6CERGg2UY.roa
File: 29DCjYRUYwjFihqzzu6CERGg2UY.roa (raw, json)
Hash identifier: iizZCdiD8BsRvg47CS/7VF3Ni6ZWwMnRfnWe9SliKP4=
Subject key identifier: DB:D0:C2:8D:84:54:63:08:C5:8A:1A:B3:CE:EE:82:11:11:A0:D9:46
Certificate issuer: /CN=80340326822530f943859c73e7df3d3655168b70
Certificate serial: 018779E374A6446626707C6B4F4D5069402B
Authority key identifier: 80:34:03:26:82:25:30:F9:43:85:9C:73:E7:DF:3D:36:55:16:8B:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDQDJoIlMPlDhZxz5989NlUWi3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/29DCjYRUYwjFihqzzu6CERGg2UY.roa
Signing time: Thu 13 Apr 2023 09:12:42 +0000
ROA not before: Thu 13 Apr 2023 09:12:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.75.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:e3:74:a6:44:66:26:70:7c:6b:4f:4d:50:69:40:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80340326822530f943859c73e7df3d3655168b70
Validity
Not Before: Apr 13 09:12:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbd0c28d84546308c58a1ab3ceee821111a0d946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:b3:d9:1b:79:bc:91:0f:3d:85:c8:ab:fd:
77:3b:c8:f1:98:b7:af:e2:71:f8:ef:7f:81:28:1a:
4a:fd:55:2c:1d:c7:ba:c9:f4:a6:3c:4e:ba:9a:2c:
c3:82:57:b3:3b:26:0c:32:25:c9:e4:3a:d4:0d:04:
19:63:3d:ec:0f:f1:01:67:8b:bc:81:2b:b0:ee:ff:
b3:33:10:9e:fd:0f:b8:35:b7:dd:4a:a9:be:3a:b3:
85:78:86:c8:9a:d5:99:13:39:c4:ad:0f:96:28:71:
32:b1:54:e4:4a:3d:4b:f0:32:c0:30:b6:8d:af:94:
aa:0b:90:c0:91:52:d8:c5:38:20:08:f4:4e:1e:1c:
92:bb:c4:99:1d:c3:c2:de:b8:62:4b:c3:d8:de:12:
d3:5e:b2:d6:b3:d4:f9:ce:21:a6:9c:76:80:d2:9d:
82:02:42:90:90:9c:dc:2c:79:fd:69:7d:8b:49:f7:
0a:0a:f0:4c:7c:d5:2d:37:36:31:e6:00:8f:96:81:
de:1c:41:fc:99:ff:8f:ab:d2:3c:5d:68:cc:03:cb:
96:1d:7a:69:31:6e:da:13:15:8b:ae:61:64:cc:4e:
24:72:ad:5b:db:46:d0:2a:71:25:01:99:85:fd:7c:
34:50:05:ea:22:ea:92:9e:f2:a0:42:8a:7e:64:ac:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D0:C2:8D:84:54:63:08:C5:8A:1A:B3:CE:EE:82:11:11:A0:D9:46
X509v3 Authority Key Identifier:
keyid:80:34:03:26:82:25:30:F9:43:85:9C:73:E7:DF:3D:36:55:16:8B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDQDJoIlMPlDhZxz5989NlUWi3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/29DCjYRUYwjFihqzzu6CERGg2UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/gDQDJoIlMPlDhZxz5989NlUWi3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.229.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7c:d0:10:0f:5d:d4:a7:a2:26:2c:f8:7e:f9:d4:4c:9e:24:
41:f3:16:f6:93:83:41:76:a4:73:d8:ed:5e:de:fa:7b:d8:4e:
54:ec:f2:01:fe:ca:ec:4b:f6:73:bc:90:d6:69:d5:88:ad:9c:
d1:3f:c7:3a:a6:f6:6d:f7:46:02:91:00:44:3c:f2:85:22:02:
eb:6d:8e:6e:d3:5c:ad:6c:c5:0d:aa:d2:47:82:fb:bd:d6:41:
c4:e1:4f:bc:ea:6e:eb:39:7f:e4:e6:d1:51:6e:d0:81:34:c5:
2b:22:a8:f7:2d:d2:d8:ed:8c:c1:e6:db:d1:38:9f:c9:08:b8:
53:56:16:63:c1:18:85:ae:42:16:eb:af:a3:80:f5:b1:ec:47:
41:08:0d:9f:ae:0a:76:43:21:e3:84:e0:58:71:62:55:bc:28:
2a:69:51:9b:d0:2b:b0:bf:96:53:fc:3d:5d:8a:5e:4d:f5:32:
73:e8:87:af:e7:90:4c:09:4e:da:41:4d:a1:74:04:d3:ae:30:
2a:cc:72:f0:a5:b3:0f:99:f6:3d:59:9e:8a:01:19:3f:b3:92:
56:93:d3:95:2a:9e:8f:10:2a:7e:2e:cf:71:aa:da:b1:1b:59:
c2:67:16:ed:29:51:c4:c5:5a:d4:00:89:a3:d7:36:46:4d:5c:
99:5f:60:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:17 2025 by rpki-client