Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/WlUybVqOxBvEB9Rp20sB-HtMb5k.roa
File: WlUybVqOxBvEB9Rp20sB-HtMb5k.roa (raw, json)
Hash identifier: U5lOUySaqZu1ujquhqsyTQneH4K/BLVVQ1vKf5my9MA=
Subject key identifier: 5A:55:32:6D:5A:8E:C4:1B:C4:07:D4:69:DB:4B:01:F8:7B:4C:6F:99
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 01856D4ADF42A12C49ACA09D5F80632A7CBC
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/WlUybVqOxBvEB9Rp20sB-HtMb5k.roa
Signing time: Sun 01 Jan 2023 12:25:01 +0000
ROA not before: Sun 01 Jan 2023 12:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208590
IP address blocks: 79.110.170.0/24 maxlen: 24
2a0d:1a43::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:df:42:a1:2c:49:ac:a0:9d:5f:80:63:2a:7c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Jan 1 12:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a55326d5a8ec41bc407d469db4b01f87b4c6f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:3c:c0:f6:74:77:73:79:3f:2c:06:38:54:
b5:c3:d8:62:20:f0:c8:e9:52:bf:0b:2d:f9:be:94:
24:3d:0a:5c:23:1a:54:7d:9f:3c:e6:1d:f2:b7:24:
d0:f1:2b:59:b1:4f:50:de:1b:ea:36:ed:b6:b6:90:
c9:c4:1f:61:32:2f:27:9c:c4:19:44:eb:c3:d4:3e:
0e:ee:90:d7:7e:54:0d:3e:02:2d:71:8e:46:d3:40:
dc:1f:0e:d8:d3:1c:4b:0d:3e:89:09:99:f2:49:5d:
fc:51:55:27:6f:b3:0a:4a:4f:35:02:8d:32:62:07:
9e:ca:c3:1e:51:9f:91:44:ce:a8:a7:34:84:04:56:
72:34:0a:b9:a1:bd:9f:d4:79:c7:7a:8d:a6:ee:8f:
8b:23:d3:cf:52:45:24:3d:dc:16:41:91:ff:91:75:
ec:77:40:1c:a4:8a:f0:f8:1a:3b:88:64:aa:17:1d:
89:3d:ff:91:1e:dd:59:58:d4:25:e3:11:07:a3:56:
91:ef:47:2b:51:46:0c:5f:05:92:ec:aa:aa:86:0e:
08:36:c3:e9:34:aa:73:0c:d6:c7:ff:ba:38:81:ad:
62:7c:55:4e:53:42:07:54:40:5c:ef:e9:fa:a3:9d:
13:fb:b5:38:e7:3a:b1:6b:2b:f6:4f:f7:d0:5c:37:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:55:32:6D:5A:8E:C4:1B:C4:07:D4:69:DB:4B:01:F8:7B:4C:6F:99
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/WlUybVqOxBvEB9Rp20sB-HtMb5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.170.0/24
IPv6:
2a0d:1a43::/32
Signature Algorithm: sha256WithRSAEncryption
60:3c:c0:d1:00:d2:40:08:c2:5f:b0:83:ce:52:5f:81:e0:90:
fe:f4:30:d2:c2:8b:c6:c1:45:58:58:47:8d:7d:67:0a:b7:ab:
68:8e:b5:f5:dd:4f:70:3b:b0:88:21:02:04:86:0d:da:dc:59:
23:1b:b4:bb:2b:aa:0e:e2:73:10:00:6f:21:bf:ae:07:50:f1:
79:28:80:7a:c5:c8:c3:1f:8a:2b:0a:e8:10:9e:b3:da:f3:42:
77:06:94:ad:0c:10:7b:11:ac:8d:ed:85:bc:a2:bf:8a:2f:be:
20:66:a3:0c:e0:50:07:18:1a:25:96:8a:ca:d3:5b:db:df:98:
85:98:a0:59:ac:44:63:f2:d3:fe:92:08:c2:b7:db:ae:80:13:
5a:fa:ab:93:0c:9a:24:8b:17:56:6f:58:5a:14:75:04:3f:dd:
b2:da:4a:ae:85:75:19:b7:7b:db:72:4b:d6:7f:78:94:b1:b3:
3b:be:a2:c6:d4:9b:69:7e:eb:7a:04:2d:cb:f6:c0:f2:27:1b:
01:bd:84:da:7d:56:bb:68:27:12:77:7f:45:6e:71:38:49:9e:
fd:01:7e:6e:7e:55:6c:55:1f:45:7a:74:d9:77:ef:b8:9b:20:
85:98:78:71:52:75:37:71:85:d0:4a:b8:d3:6c:4a:bc:3d:bd:
9a:4e:c0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:40 2024 by rpki-client on console-fra.rpki-client.org