Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/1019wzXa_7yWE_anI6R_j7j3vXY.roa
File: 1019wzXa_7yWE_anI6R_j7j3vXY.roa (raw, json)
Hash identifier: rwNS6zImUJtlmCsRpyY/oewva2X7PGck3Drx/MHgTOw=
Subject key identifier: D7:4D:7D:C3:35:DA:FF:BC:96:13:F6:A7:23:A4:7F:8F:B8:F7:BD:76
Certificate issuer: /CN=fc7b99de49b6d7a2e267bb27bfd48ed394b84b7c
Certificate serial: 01856F42C64A2038B6C64379306649F144DC
Authority key identifier: FC:7B:99:DE:49:B6:D7:A2:E2:67:BB:27:BF:D4:8E:D3:94:B8:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HuZ3km216LiZ7snv9SO05S4S3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/1019wzXa_7yWE_anI6R_j7j3vXY.roa
Signing time: Sun 01 Jan 2023 21:35:25 +0000
ROA not before: Sun 01 Jan 2023 21:35:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204035
IP address blocks: 185.77.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:c6:4a:20:38:b6:c6:43:79:30:66:49:f1:44:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7b99de49b6d7a2e267bb27bfd48ed394b84b7c
Validity
Not Before: Jan 1 21:35:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d74d7dc335daffbc9613f6a723a47f8fb8f7bd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:b9:72:18:0a:52:1e:20:93:a6:ae:d3:f8:
70:6b:bb:f5:18:9a:65:41:05:b8:44:80:1c:65:01:
46:21:7a:e2:2b:85:06:7c:d2:6e:78:55:2f:26:2b:
9f:fb:6b:16:e7:dd:b6:55:30:09:dc:8b:66:e8:b3:
48:81:c6:e2:04:55:9d:b5:d5:bb:5d:ba:01:64:ef:
c5:8f:61:13:f2:08:78:58:70:e2:3d:58:9c:5c:1e:
96:51:eb:8f:e1:15:44:6d:9d:bc:0c:8b:55:40:8f:
1e:88:c3:82:c2:cf:ec:87:d4:c7:0c:b4:38:7a:dc:
ad:cc:ca:14:f9:34:76:5c:b5:f5:47:43:42:f0:f5:
ff:36:2f:19:78:4a:8f:a5:b8:99:2f:b2:5a:01:46:
cc:0a:75:07:18:78:14:63:b5:cd:7d:26:9b:b8:ed:
47:3a:4b:b0:29:04:3c:02:e5:09:f8:ab:f3:f0:c2:
89:1d:1f:c6:bd:0b:46:c4:28:31:61:35:63:e0:1b:
4f:3d:76:20:87:99:44:cf:95:95:0a:fc:c2:d6:96:
0d:bf:3e:a6:1d:da:af:96:d1:96:39:66:dd:15:63:
9f:43:bc:94:3e:3a:77:77:c4:31:9a:c9:a0:ce:83:
88:41:04:50:50:fb:77:ac:18:a2:50:89:66:e7:29:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4D:7D:C3:35:DA:FF:BC:96:13:F6:A7:23:A4:7F:8F:B8:F7:BD:76
X509v3 Authority Key Identifier:
keyid:FC:7B:99:DE:49:B6:D7:A2:E2:67:BB:27:BF:D4:8E:D3:94:B8:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HuZ3km216LiZ7snv9SO05S4S3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/1019wzXa_7yWE_anI6R_j7j3vXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/_HuZ3km216LiZ7snv9SO05S4S3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.98.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:81:d5:59:fc:c9:ef:83:ba:e8:06:ca:b8:9d:0b:60:ec:ff:
01:f3:e1:76:ee:fa:36:67:0d:75:c5:52:b0:8c:b6:8b:f8:52:
fa:89:eb:c1:4b:36:6a:de:07:0b:0a:d6:ce:31:54:db:ff:da:
70:ce:44:c1:e4:bf:e3:3e:ce:71:74:6d:42:69:7e:62:e6:a8:
0e:c3:43:1c:40:bf:5d:10:9b:f7:f6:2a:fb:87:cf:04:1f:c4:
57:09:32:ce:57:55:73:3c:31:84:cf:a1:b3:55:3d:d7:82:7e:
3d:60:cb:25:55:22:41:57:39:0f:c4:b8:fe:3a:c0:a3:07:be:
c4:17:c6:5a:11:9a:dc:bc:67:b3:71:dd:b0:25:50:15:be:2d:
c3:cd:70:d7:0a:9b:22:28:53:0b:00:47:49:4e:68:43:fa:5f:
d4:9b:0c:55:49:0c:a6:fa:f4:39:97:3f:28:4f:06:73:ef:6e:
08:ab:b6:8b:0e:ed:82:fa:93:b4:03:0d:1e:cd:29:4c:c8:69:
0f:6b:53:70:0e:53:61:0d:77:0e:0d:3e:cf:90:af:26:95:5f:
53:53:4c:36:cf:f1:87:1f:d0:d9:8c:3f:b6:3f:3d:34:0d:12:
8b:c6:7f:27:d7:7b:92:7e:62:9b:16:fe:95:38:57:fb:ee:57:
a3:c8:b5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org