Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5a725f-15da-4c12-86fe-9001db8d4c64/1/ZFoGJBJ-aP0YJRGUxaegvEAOzc0.roa
File: ZFoGJBJ-aP0YJRGUxaegvEAOzc0.roa (raw, json)
Hash identifier: wykYQVDgBVYzlbzLdlT9hsJ7plIvkhEb6GF2n1H77so=
Subject key identifier: 64:5A:06:24:12:7E:68:FD:18:25:11:94:C5:A7:A0:BC:40:0E:CD:CD
Certificate issuer: /CN=8452ee73277f39d24809746b7262261829b8dfe5
Certificate serial: 01882086B7F83CB24006065C22EEEDFB23AF
Authority key identifier: 84:52:EE:73:27:7F:39:D2:48:09:74:6B:72:62:26:18:29:B8:DF:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFLucyd_OdJICXRrcmImGCm43-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5a725f-15da-4c12-86fe-9001db8d4c64/1/ZFoGJBJ-aP0YJRGUxaegvEAOzc0.roa
Signing time: Mon 15 May 2023 17:47:59 +0000
ROA not before: Mon 15 May 2023 17:47:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 77.72.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b7:f8:3c:b2:40:06:06:5c:22:ee:ed:fb:23:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452ee73277f39d24809746b7262261829b8dfe5
Validity
Not Before: May 15 17:47:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645a0624127e68fd18251194c5a7a0bc400ecdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ab:09:ff:36:c8:62:6d:95:42:88:b1:5a:21:
c2:09:3c:d6:f2:31:69:a4:ef:49:06:e0:b0:8d:8d:
3b:72:1f:50:91:db:14:df:08:3e:69:b6:ac:b9:bc:
ca:79:a8:ba:37:ab:d2:0e:b5:cd:a1:cb:a0:f8:f0:
52:11:2a:96:01:b9:e8:fc:2f:42:ac:61:7c:78:4a:
57:0d:45:19:2e:fc:3e:3f:66:16:e0:9c:35:88:7a:
7f:b1:7e:60:84:33:e1:23:48:8d:fa:ba:50:c7:ef:
24:0f:82:8a:60:66:c7:04:8f:ee:9e:01:3a:ec:6d:
7e:3f:e8:b1:5e:4f:8e:35:cc:2d:f2:45:8c:2b:43:
20:d1:da:f7:e9:6e:c1:dc:0f:17:0f:2d:89:58:b4:
5b:48:85:5e:14:e7:0e:46:4e:b3:3d:86:88:a5:c2:
52:96:fb:e1:49:1a:7c:ae:bb:5d:34:7e:39:31:a5:
84:d0:f4:72:ac:b7:09:29:9c:56:ba:e1:21:a5:a5:
a0:0c:29:fd:d5:0f:a4:91:90:b6:8d:65:b3:22:28:
fa:eb:31:fc:f9:5a:af:03:ac:16:30:81:16:a8:a9:
08:58:e0:e7:af:1b:16:89:39:da:03:c8:bd:95:4c:
af:a3:56:a5:ed:04:c2:a8:ea:44:a0:d7:57:be:08:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5A:06:24:12:7E:68:FD:18:25:11:94:C5:A7:A0:BC:40:0E:CD:CD
X509v3 Authority Key Identifier:
keyid:84:52:EE:73:27:7F:39:D2:48:09:74:6B:72:62:26:18:29:B8:DF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFLucyd_OdJICXRrcmImGCm43-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5a725f-15da-4c12-86fe-9001db8d4c64/1/ZFoGJBJ-aP0YJRGUxaegvEAOzc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5a725f-15da-4c12-86fe-9001db8d4c64/1/hFLucyd_OdJICXRrcmImGCm43-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.82.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b0:6b:1a:8f:aa:d2:c1:0d:b8:d9:99:68:e4:a8:b0:01:c5:
aa:75:95:8e:d0:5c:16:36:22:fe:8b:90:bb:ad:20:ab:ed:5d:
33:c3:5d:9f:a5:6b:de:4a:7f:ea:fe:8c:73:e2:e8:97:20:66:
ae:bf:1f:f1:00:13:ac:b0:5b:c5:b7:0f:a3:4e:3d:69:e3:e5:
44:73:60:c3:40:fa:d0:b3:66:fe:f9:08:97:45:25:b4:da:24:
cd:b3:42:5b:f0:fa:10:d0:28:91:cc:ab:1a:da:da:2b:73:16:
f1:e8:6f:47:fa:b8:e7:fb:6f:15:80:01:3d:0e:29:0d:6d:45:
9d:c9:76:86:73:66:02:ed:23:68:b0:0f:10:1d:2b:41:5e:f0:
4a:18:f8:00:1c:9c:29:4d:3f:dc:4f:31:c7:d6:45:47:3a:1f:
fd:68:96:8a:9d:8a:53:29:bb:10:00:63:81:be:ca:9e:97:30:
f6:a7:91:da:43:f1:f9:1f:f2:c8:38:53:f8:da:d3:72:58:eb:
57:98:a3:4e:8b:be:30:b6:71:a5:6e:d2:62:7b:a9:aa:f5:00:
c8:12:80:4d:5b:24:5b:4c:af:4b:b6:71:4a:92:76:71:9d:9f:
ef:0b:da:67:f2:26:85:e9:29:97:b0:ba:43:68:2d:c3:98:4f:
f4:c1:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 10:12:23 2023 by rpki-client on console-ams.rpki-client.org