Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/342391-0144-44f5-a70d-72000dbf63bd/1/1zNNt1VuNqikhPnv2QFTZZ-_NIE.roa
File: 1zNNt1VuNqikhPnv2QFTZZ-_NIE.roa (raw, json)
Hash identifier: zuZzyX0cUeXsPuN9nfRYd/bdBGCM0Y3UCOzPH6N/Tsc=
Subject key identifier: D7:33:4D:B7:55:6E:36:A8:A4:84:F9:EF:D9:01:53:65:9F:BF:34:81
Certificate issuer: /CN=7cdad8604f8d8873a01b707b40b54226f04b481f
Certificate serial: 0186550937CED0ABB96AC57E0999DB9FE150
Authority key identifier: 7C:DA:D8:60:4F:8D:88:73:A0:1B:70:7B:40:B5:42:26:F0:4B:48:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNrYYE-NiHOgG3B7QLVCJvBLSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/342391-0144-44f5-a70d-72000dbf63bd/1/1zNNt1VuNqikhPnv2QFTZZ-_NIE.roa
Signing time: Wed 15 Feb 2023 12:25:12 +0000
ROA not before: Wed 15 Feb 2023 12:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 77.75.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:09:37:ce:d0:ab:b9:6a:c5:7e:09:99:db:9f:e1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdad8604f8d8873a01b707b40b54226f04b481f
Validity
Not Before: Feb 15 12:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7334db7556e36a8a484f9efd90153659fbf3481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:10:de:41:66:38:6c:a4:f5:99:59:a9:65:bd:
45:e4:d4:d7:60:dd:83:6b:b9:c3:42:02:8e:c1:4b:
56:03:b2:17:fa:11:d1:7e:28:01:60:ad:3d:f5:21:
90:e0:84:86:f6:8b:ff:b4:89:1c:f8:f2:97:27:00:
c6:1b:fc:5f:61:d4:bd:27:c9:ec:51:e0:6a:eb:ce:
e8:9e:d6:22:8e:d9:86:e1:fd:b1:fb:a6:b4:95:db:
84:cd:ae:34:2d:c3:f5:04:68:b5:54:86:57:9f:04:
3c:47:13:75:4b:da:31:a5:80:4d:65:a6:00:4a:f5:
4d:f9:12:f3:3d:ca:a8:df:a6:d4:4a:55:e8:d9:61:
1c:c7:3a:4b:3e:cd:4c:c4:56:5f:ca:d1:43:b7:78:
68:df:3d:65:8e:10:cf:83:cf:a4:0a:db:cc:0f:8a:
ec:66:27:f6:77:ea:d9:1a:40:03:11:03:1b:d4:02:
e3:7f:f9:10:08:6a:c6:b4:dc:47:d0:e9:dd:e4:e0:
60:b7:5e:fb:a5:d1:2a:82:6b:1a:12:3f:c6:ad:83:
ef:1c:be:8d:56:2e:32:a6:3a:40:30:aa:b3:64:b2:
fb:5d:ae:ad:de:bc:8f:7a:12:4e:50:f3:fd:1f:de:
97:58:43:18:5d:46:cc:70:05:31:23:ae:fe:ae:a8:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:33:4D:B7:55:6E:36:A8:A4:84:F9:EF:D9:01:53:65:9F:BF:34:81
X509v3 Authority Key Identifier:
keyid:7C:DA:D8:60:4F:8D:88:73:A0:1B:70:7B:40:B5:42:26:F0:4B:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNrYYE-NiHOgG3B7QLVCJvBLSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/342391-0144-44f5-a70d-72000dbf63bd/1/1zNNt1VuNqikhPnv2QFTZZ-_NIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/342391-0144-44f5-a70d-72000dbf63bd/1/fNrYYE-NiHOgG3B7QLVCJvBLSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.230.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:71:24:5f:7e:32:80:01:9e:48:ff:62:58:8b:33:77:35:0d:
6a:8a:51:d5:72:ee:95:8f:68:96:02:47:2e:07:1b:c4:dd:72:
d8:ce:33:5a:ab:89:d3:69:50:16:0d:3d:3d:e5:a1:f9:52:51:
f2:13:db:86:df:97:9d:f4:12:f1:0f:d9:88:ab:4d:2b:4d:a9:
fa:ae:82:ae:99:d9:ac:37:c0:00:69:3c:11:1d:df:74:f3:a3:
e7:7f:a8:7c:d7:8d:30:0c:60:14:83:4f:4d:77:74:2a:97:31:
3a:0f:b1:de:fa:9e:2e:29:9f:40:30:6a:65:c5:35:08:79:1c:
6d:08:99:eb:d0:70:e9:9a:16:85:d2:f4:fc:c3:8f:56:ea:7d:
26:9f:2c:f8:e7:f2:f0:48:72:4b:78:fa:30:6f:9c:98:5f:d5:
eb:20:41:7d:c4:0a:e0:c6:f8:a5:af:73:b2:7c:14:a1:6a:4d:
51:f7:3e:a4:bc:e9:6a:73:79:00:3c:0d:54:67:ab:72:c9:48:
be:c4:ca:ff:3b:9a:bb:15:06:98:03:4d:3b:68:3a:2d:e7:96:
bf:09:86:0f:2e:5d:b5:68:4d:66:2c:a9:1a:4c:17:8c:ac:7e:
7f:6a:94:3e:1c:95:b6:c0:42:3e:6d:27:f3:33:f4:3a:89:10:
3c:87:cc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:19 2025 by rpki-client