Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/tMAAnJhA4JKQ71oLqzdy37xqpzM.roa
File: tMAAnJhA4JKQ71oLqzdy37xqpzM.roa (raw, json)
Hash identifier: Bjb2kOOr+2tSqGmQNIV+0thxY/+wOq9WnE0XDEbw2LA=
Subject key identifier: B4:C0:00:9C:98:40:E0:92:90:EF:5A:0B:AB:37:72:DF:BC:6A:A7:33
Certificate issuer: /CN=212268a7d5106a342219aab86b13d92be96d4cbc
Certificate serial: 0185730CDEA35BDCE0B529F67109BA9018AE
Authority key identifier: 21:22:68:A7:D5:10:6A:34:22:19:AA:B8:6B:13:D9:2B:E9:6D:4C:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISJop9UQajQiGaq4axPZK-ltTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/tMAAnJhA4JKQ71oLqzdy37xqpzM.roa
Signing time: Mon 02 Jan 2023 15:15:01 +0000
ROA not before: Mon 02 Jan 2023 15:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49234
IP address blocks: 77.87.224.0/21 maxlen: 21
77.87.224.0/22 maxlen: 22
77.87.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:de:a3:5b:dc:e0:b5:29:f6:71:09:ba:90:18:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212268a7d5106a342219aab86b13d92be96d4cbc
Validity
Not Before: Jan 2 15:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4c0009c9840e09290ef5a0bab3772dfbc6aa733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6f:3f:d5:a8:b8:c3:2c:1a:d5:42:ac:48:b0:
ce:8c:28:9e:f6:b6:77:74:f6:3c:7f:7f:f0:46:a5:
53:da:ce:a4:49:3b:d3:21:ae:50:d9:de:02:4f:8e:
d3:b5:9d:f7:7e:79:53:0b:39:de:cc:35:5f:3f:36:
c5:e3:27:8f:5f:03:5b:8f:a1:a3:c2:96:4f:5b:a4:
8d:21:a8:1e:10:ac:bd:b1:5e:80:64:dc:6f:20:67:
a1:f6:fa:09:97:0b:ca:b2:bc:6f:b1:60:3e:c7:48:
a1:ad:b6:a3:6a:3c:11:c0:b1:06:bb:32:14:be:b0:
c5:23:c9:03:42:7f:a8:a4:e9:23:a9:7b:18:24:3f:
73:58:80:3e:62:af:50:7f:b2:bc:6d:1a:e2:d8:8f:
76:24:5c:55:e3:57:7a:e2:17:1e:a6:58:db:2d:8d:
e5:2d:d2:f7:0e:09:66:6a:00:d7:0c:55:28:4c:3d:
d1:02:85:71:84:c3:29:eb:95:30:39:61:50:bf:b7:
4f:5d:b6:08:c0:bd:b7:84:9a:b1:14:e2:64:60:c2:
3f:84:8e:68:4a:42:1d:7e:69:af:9a:2b:5b:95:22:
58:df:e0:10:94:d8:4b:8c:c3:08:d3:cd:4b:65:1e:
ca:a0:7a:4f:fb:1a:a2:eb:04:3e:54:3e:b8:94:7d:
3c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C0:00:9C:98:40:E0:92:90:EF:5A:0B:AB:37:72:DF:BC:6A:A7:33
X509v3 Authority Key Identifier:
keyid:21:22:68:A7:D5:10:6A:34:22:19:AA:B8:6B:13:D9:2B:E9:6D:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISJop9UQajQiGaq4axPZK-ltTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/tMAAnJhA4JKQ71oLqzdy37xqpzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/ISJop9UQajQiGaq4axPZK-ltTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.224.0/21
Signature Algorithm: sha256WithRSAEncryption
93:8a:79:9a:06:48:68:17:6b:06:04:61:30:a8:f1:3c:b1:4c:
7b:75:74:ba:2d:a6:71:c7:27:71:ab:ef:1c:8b:ba:b0:2c:03:
22:33:fd:c5:36:58:e7:b0:8a:6d:a7:64:97:50:a0:9a:4d:40:
d0:b2:03:61:8e:df:d1:18:d6:52:c2:59:5e:29:ab:ad:36:57:
42:5a:6b:89:b1:b0:ad:7c:4b:a4:27:a5:94:e3:d5:19:ae:da:
25:ad:f0:fb:31:15:7a:ea:a0:17:ce:74:21:b6:4d:6e:13:f7:
19:c0:d5:8b:56:3f:a7:10:0e:66:4a:1d:c0:74:30:71:73:71:
3b:8a:1d:e3:f4:75:56:89:22:2d:5c:61:93:af:2e:b2:fc:63:
4b:0e:04:41:ca:00:c4:e8:ae:61:7f:d9:e4:38:5a:f2:e9:2a:
76:fa:8a:c9:03:11:ab:2d:49:38:df:1e:31:09:3d:10:41:ea:
ec:dd:a6:c2:41:fb:df:42:ce:cc:89:f4:2a:74:e0:44:ef:8e:
78:fc:64:f3:2c:6b:c5:e5:4c:5d:ac:73:9f:a1:f8:82:32:50:
97:80:48:a3:f2:3b:27:c7:e0:3e:7b:a9:e3:e7:eb:c3:f0:96:
0e:ed:e5:61:3d:41:7d:db:ab:57:8b:51:d9:70:28:95:03:8c:
9c:1d:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:09 2024 by rpki-client on console-fra.rpki-client.org