Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/KofU_IUQwWNw_REk4H6g3kA3phA.roa
File: KofU_IUQwWNw_REk4H6g3kA3phA.roa (raw, json)
Hash identifier: RALoHV4MElxnNc7X4fJRkxii9LD6fG6d5gEpb6qnX38=
Subject key identifier: 2A:87:D4:FC:85:10:C1:63:70:FD:11:24:E0:7E:A0:DE:40:37:A6:10
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 0189648959E51FBA4DCFB5F78F32B5DB1AE7
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/KofU_IUQwWNw_REk4H6g3kA3phA.roa
Signing time: Mon 17 Jul 2023 15:47:50 +0000
ROA not before: Mon 17 Jul 2023 15:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 77.83.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:89:59:e5:1f:ba:4d:cf:b5:f7:8f:32:b5:db:1a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Jul 17 15:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a87d4fc8510c16370fd1124e07ea0de4037a610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:09:6b:eb:15:60:52:58:b2:56:a7:7a:73:
92:81:c4:6f:29:ea:d5:7d:a2:d9:b7:3c:88:3a:e4:
d3:48:8d:31:01:c9:09:23:35:1c:50:2b:5f:8a:d5:
26:6a:da:51:4f:7b:84:66:6c:a9:59:bb:6a:70:a0:
4f:b5:04:12:aa:c7:c7:da:f0:44:72:08:af:d9:06:
7d:a7:9a:56:42:4f:5a:3e:3f:fd:d5:ea:51:d2:50:
5a:d9:ed:55:db:85:40:3d:63:a7:63:88:07:4b:d6:
e2:59:3d:17:2d:46:84:bf:11:a0:02:60:1d:5d:1f:
63:ff:fc:0f:d7:d3:2f:c6:de:15:7c:a3:20:60:58:
aa:dc:e4:ca:b5:2d:ae:20:1b:51:4c:c0:8b:50:14:
94:c9:a9:a2:cd:57:84:16:76:f2:b0:7c:91:13:70:
bf:6d:54:16:1f:01:6b:2d:94:82:8d:df:8e:5c:42:
53:2c:63:20:f5:a8:e8:d8:a4:0c:74:46:ce:ca:4c:
40:7d:0f:e5:72:ae:39:a0:8d:b5:4a:9d:1b:c0:65:
58:8c:95:90:fa:8d:ad:cf:df:fb:c3:8f:f8:37:89:
37:a8:37:5c:14:70:c9:9d:28:ad:3a:19:b5:d6:cc:
7d:f7:f8:4c:0a:b0:07:25:a8:07:50:ce:43:63:8a:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:87:D4:FC:85:10:C1:63:70:FD:11:24:E0:7E:A0:DE:40:37:A6:10
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/KofU_IUQwWNw_REk4H6g3kA3phA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.2.0/24
Signature Algorithm: sha256WithRSAEncryption
57:77:52:dd:4b:9a:8d:17:0b:ef:92:ad:96:bd:f1:42:cb:97:
ff:30:00:89:0e:0b:e7:9e:f7:87:07:34:32:f9:a3:b6:6f:53:
72:1e:84:5f:71:17:88:ff:f1:7c:24:21:55:a3:4b:eb:b6:cc:
4f:1c:13:46:0d:b7:40:8b:0f:27:d7:ca:d5:ac:b8:1e:fa:88:
02:ce:58:01:d4:22:60:97:36:87:92:06:9e:cb:a6:c7:42:ac:
ad:2e:be:db:f9:56:c4:41:57:d6:f5:20:14:23:e0:c1:a0:c6:
a0:66:05:a2:08:8a:b9:f9:01:19:9a:d5:8d:79:70:34:f8:39:
c0:be:df:bb:90:0c:57:91:70:1d:5d:20:56:9e:63:7a:54:a8:
db:3f:c9:2e:0f:d9:41:b5:7b:9a:84:7f:8c:af:c9:ae:64:ec:
21:a7:6b:4a:4f:33:a3:a5:27:15:2a:33:86:fa:bc:a6:37:fb:
c7:37:8f:e6:95:88:99:48:85:0b:d3:8b:6f:31:d5:76:2e:e3:
52:63:00:60:a2:4a:53:d3:70:67:47:22:9e:f5:e0:15:76:3e:
40:17:94:38:56:af:af:f0:7f:f4:ba:35:0d:eb:9a:33:61:76:
75:f1:ca:6b:d7:e2:e3:81:3f:39:4e:be:fe:74:3e:05:0c:e9:
4a:dc:64:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:13 2024 by rpki-client on console-fra.rpki-client.org