Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-nSdSaSIuZc0Ulqa8HVRrTPXndA.roa
File: 1-nSdSaSIuZc0Ulqa8HVRrTPXndA.roa (raw, json)
Hash identifier: F3n0UgzGXPY4F8+Xc8AYOsyC/B1jxq/AY7rOwi/brD0=
Subject key identifier: FA:74:9D:49:A4:88:B9:97:34:52:5A:9A:F0:75:51:AD:33:D7:9D:D0
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0181D86BFC456E3B6679C29775F351B2AA1C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-nSdSaSIuZc0Ulqa8HVRrTPXndA.roa
Signing time: Thu 07 Jul 2022 11:29:24 +0000
ROA not before: Thu 07 Jul 2022 11:29:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60408
IP address blocks: 77.81.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:6b:fc:45:6e:3b:66:79:c2:97:75:f3:51:b2:aa:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jul 7 11:29:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa749d49a488b99734525a9af07551ad33d79dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:b8:95:28:2a:8e:2d:38:02:b8:9b:43:6b:
3a:5c:24:47:20:e1:8b:76:65:a5:5a:1a:58:a2:f0:
98:d3:d6:91:21:89:0a:f5:a8:e5:48:01:66:ba:b3:
a3:4c:24:44:a6:50:dc:0a:a2:a9:07:da:6f:53:76:
96:85:a8:43:29:78:05:98:a8:f9:e7:3e:7b:98:d1:
5c:c3:a8:3a:a0:0a:93:e3:ac:05:83:91:f9:69:27:
9b:a8:bb:c1:1d:26:61:ab:96:b0:c6:3b:4a:b7:2c:
e4:d2:e8:ba:f5:bf:4d:9a:bd:c7:c8:cb:2d:09:ce:
3a:08:11:f1:30:41:d1:f5:ee:33:99:fd:2d:85:e8:
99:17:51:bd:90:0d:0d:20:b4:65:00:a7:a8:bc:8d:
4a:1b:65:46:0a:ba:b6:0c:94:60:47:a0:f7:41:4b:
15:2e:d5:41:2c:d4:73:d7:97:d9:b6:8c:2d:d8:bc:
a4:46:da:2e:a5:a3:3f:5d:67:9d:88:c9:41:b2:e5:
71:59:86:37:f1:ae:73:47:59:21:1e:49:e1:5c:46:
8c:dd:76:22:21:0e:07:f7:e8:2e:19:db:69:26:7e:
5c:5d:e0:3f:e7:ab:59:67:7e:bb:d9:34:e2:be:43:
82:64:c0:a2:23:cb:67:b2:cd:8d:60:7b:a4:cc:4a:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:74:9D:49:A4:88:B9:97:34:52:5A:9A:F0:75:51:AD:33:D7:9D:D0
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-nSdSaSIuZc0Ulqa8HVRrTPXndA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.101.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:24:04:7b:0d:96:79:cf:3d:6f:00:cf:28:48:ee:95:f7:e6:
35:f0:2f:f2:cf:70:50:32:45:b0:20:09:22:a6:8d:c1:f4:74:
50:c3:c2:b0:34:2a:f3:ed:53:7e:4e:74:bc:28:cd:e0:86:33:
fc:9d:8b:82:cc:d8:e6:1c:24:3a:36:fa:ff:71:01:5d:cb:b3:
be:99:8a:7f:02:be:22:fb:16:27:92:e8:83:a1:57:81:cb:03:
10:65:b1:61:57:2e:84:d3:26:62:d8:e6:95:b7:2c:46:32:ff:
f5:d6:e1:d2:4b:69:15:81:37:8b:f1:47:72:80:21:47:a1:df:
7e:ba:8f:d2:f6:86:91:3b:bb:f3:ea:11:fb:fc:50:d8:d9:b8:
78:7e:90:36:59:a6:d5:36:ea:a1:3b:ba:64:f2:17:3a:e5:29:
65:81:9d:4a:2c:33:03:bf:10:86:c3:e4:6e:45:12:43:e5:ed:
81:48:25:67:87:e7:96:34:76:8d:24:11:4c:b8:76:39:34:70:
d0:03:25:16:a0:d2:76:a4:63:7e:da:12:dd:98:63:85:8a:11:
45:2f:e9:6a:80:1a:41:ae:bb:53:b4:48:da:4c:89:fc:4d:43:
42:c0:d5:84:8d:03:c1:54:0e:fd:80:3d:b4:59:cf:05:e5:2f:
97:49:ca:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:16 2025 by rpki-client