Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/VYSDWAgtDy6NZtC1RYOJCEiewek.roa
File: VYSDWAgtDy6NZtC1RYOJCEiewek.roa (raw, json)
Hash identifier: Kf4M2qhZALEV8GFOAED24wwtBJDk1qWpiqqUwQEQxCo=
Subject key identifier: 55:84:83:58:08:2D:0F:2E:8D:66:D0:B5:45:83:89:08:48:9E:C1:E9
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 09E2980C
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/VYSDWAgtDy6NZtC1RYOJCEiewek.roa
Signing time: Sat 01 Jan 2022 04:56:11 +0000
ROA not before: Sat 01 Jan 2022 04:56:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 217.145.236.0/22 maxlen: 24
79.110.168.0/22 maxlen: 24
139.28.204.0/22 maxlen: 24
2a06:1e80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165845004 (0x9e2980c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Jan 1 04:56:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55848358082d0f2e8d66d0b545838908489ec1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:10:96:4d:b6:66:0b:32:05:db:14:6f:4e:
20:da:9d:ae:af:1f:dd:ec:f3:c6:11:1d:64:46:db:
57:61:e9:62:c7:35:5d:cc:b6:5f:10:e9:b7:32:fa:
29:09:be:e1:20:5f:ba:bb:c3:2a:63:23:dd:d6:ce:
bc:bb:3c:f9:ee:22:33:58:b3:f4:8c:4f:fa:0e:33:
b8:13:19:7f:7c:de:72:ac:bf:c4:c4:cb:0e:56:5d:
24:d8:e2:58:ec:fa:7f:ad:25:aa:3c:7d:7c:60:c2:
63:93:d5:4a:3f:ed:68:5a:6f:34:0f:81:25:33:51:
85:de:a6:5c:52:d1:15:1c:c8:ab:3e:a2:53:8b:9b:
aa:03:b2:85:ff:b4:86:d7:7a:7a:0c:2c:7b:74:3b:
5f:35:08:cc:c5:1f:64:57:98:12:30:b2:2b:f3:56:
f8:3d:df:19:af:39:33:dc:61:bc:89:7a:85:70:42:
50:de:36:ea:7d:8b:7f:d8:ef:10:72:59:e9:4c:ef:
d6:8a:81:1c:c7:d7:b8:86:38:42:58:5d:e9:e7:f4:
57:3e:45:d6:11:4c:1f:25:6b:ee:92:ef:37:26:27:
60:e5:e8:0d:2d:2e:0b:5b:35:fa:49:f6:91:8b:6d:
3a:08:26:d3:24:02:3a:b7:44:9a:69:dd:a3:9e:64:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:84:83:58:08:2D:0F:2E:8D:66:D0:B5:45:83:89:08:48:9E:C1:E9
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/VYSDWAgtDy6NZtC1RYOJCEiewek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.168.0/22
139.28.204.0/22
217.145.236.0/22
IPv6:
2a06:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
26:1b:b6:d9:38:18:02:c7:2f:32:b0:c0:8b:0d:f3:a1:e3:60:
00:40:f5:79:af:85:38:37:ea:5e:de:c7:83:4d:4b:99:58:88:
06:41:a2:e1:df:55:90:2b:47:52:66:ff:c3:f2:4e:41:e4:32:
59:a0:e8:b1:08:39:b5:1c:d7:bd:10:f7:9c:46:b3:1e:78:d2:
56:0d:c2:b6:77:0c:a8:6c:c8:31:59:55:6b:ce:de:7a:97:b2:
96:1f:a0:f7:bf:0e:c5:9a:ee:9f:ab:e7:2c:67:5a:2e:dc:67:
1f:a0:19:43:6d:69:46:37:7d:cf:b2:72:c2:c7:c5:af:35:c2:
59:2f:f7:39:ea:e0:7d:5c:31:db:66:da:04:ce:f5:26:90:26:
18:78:34:f1:25:b6:24:07:5e:73:c9:bf:78:5c:1a:36:2b:e3:
98:1a:66:a1:49:42:01:47:6f:94:34:2e:32:78:01:97:19:dd:
5a:a5:39:e1:2d:a6:42:20:82:94:cd:7d:6e:07:58:80:c7:d4:
c8:c8:45:76:1f:53:ad:58:ab:ae:1f:ab:b7:a6:97:cc:e7:bd:
00:1c:f8:cd:18:76:fd:a9:18:02:8a:52:e2:ab:d9:c2:fb:f7:
7f:2a:69:5a:bf:9b:81:90:48:80:a2:f8:d6:3c:e5:e4:e3:0f:
cd:2d:0d:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:24 2024 by rpki-client on console-ams.rpki-client.org