Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/VvG9bOF7IDxax22zbbEdiU4TlkU.roa
File: VvG9bOF7IDxax22zbbEdiU4TlkU.roa (raw, json)
Hash identifier: 5eya+3NguqKpFCQstSxkSWD+WSgoU33yvKl+dis+4jM=
Subject key identifier: 56:F1:BD:6C:E1:7B:20:3C:5A:C7:6D:B3:6D:B1:1D:89:4E:13:96:45
Certificate issuer: /CN=fc7b99de49b6d7a2e267bb27bfd48ed394b84b7c
Certificate serial: 01889A49DCABFD8C225E6358E64AB5C70263
Authority key identifier: FC:7B:99:DE:49:B6:D7:A2:E2:67:BB:27:BF:D4:8E:D3:94:B8:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HuZ3km216LiZ7snv9SO05S4S3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/VvG9bOF7IDxax22zbbEdiU4TlkU.roa
Signing time: Thu 08 Jun 2023 09:15:11 +0000
ROA not before: Thu 08 Jun 2023 09:15:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201349
IP address blocks: 185.77.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:49:dc:ab:fd:8c:22:5e:63:58:e6:4a:b5:c7:02:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7b99de49b6d7a2e267bb27bfd48ed394b84b7c
Validity
Not Before: Jun 8 09:15:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56f1bd6ce17b203c5ac76db36db11d894e139645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d5:7f:24:83:51:e3:51:19:0f:5f:5e:43:98:
36:65:92:a8:d4:46:64:ce:87:45:d5:00:7d:99:57:
fd:d0:a6:0e:ce:04:32:9e:93:75:c6:1b:14:75:22:
8c:80:b8:54:d6:dc:06:13:8f:a1:6f:d7:fe:b6:8c:
39:1e:f1:1b:5d:5e:90:d5:1e:7e:48:80:76:96:c6:
2d:80:23:b7:9d:15:ba:32:bd:93:9c:50:5d:f4:95:
a3:9d:6b:0a:5d:de:f1:90:a1:d0:a9:47:45:fe:a6:
bb:00:54:f8:82:1f:54:ff:9f:15:32:57:b1:04:63:
67:ab:41:8b:32:a1:54:56:b4:60:29:0a:bc:30:4a:
ce:58:de:42:c5:24:88:74:d1:49:cc:67:96:24:7f:
35:d4:a9:1c:3d:6a:85:e1:bc:db:af:c8:5b:c5:44:
0c:18:5d:d0:49:a7:6d:77:23:f4:0a:77:49:9a:ec:
e3:38:2b:46:e3:6e:35:96:54:a6:b1:33:92:3f:3d:
49:e8:7a:26:44:e8:96:76:ba:73:5d:9c:2f:dd:77:
a7:b7:d5:75:f8:e6:d3:6a:89:6e:7d:ba:68:26:43:
b9:d3:cb:7a:9b:c8:eb:6a:33:01:73:ff:61:ec:71:
ca:74:51:52:e7:1c:63:30:41:e6:f3:38:53:d0:e1:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F1:BD:6C:E1:7B:20:3C:5A:C7:6D:B3:6D:B1:1D:89:4E:13:96:45
X509v3 Authority Key Identifier:
keyid:FC:7B:99:DE:49:B6:D7:A2:E2:67:BB:27:BF:D4:8E:D3:94:B8:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HuZ3km216LiZ7snv9SO05S4S3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/VvG9bOF7IDxax22zbbEdiU4TlkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/_HuZ3km216LiZ7snv9SO05S4S3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.98.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:01:a2:a1:b1:3d:65:8e:37:49:02:f0:d8:c9:c7:18:b4:40:
2b:5b:cf:6c:ea:6b:08:16:c5:76:1a:f5:93:11:e6:b5:02:23:
7e:78:bb:47:90:76:dc:1b:74:f1:5f:68:14:06:32:e7:08:49:
9f:b2:a8:64:53:08:be:41:67:86:6c:2f:eb:03:f1:fd:a7:05:
94:22:5e:44:20:5b:ca:84:0d:8a:b2:f2:f4:c9:52:0c:24:37:
d4:8d:2e:b3:c6:7a:96:2b:0b:e8:41:d6:f3:4a:6a:5c:e4:5c:
b5:68:97:ab:a3:e9:5a:c8:ee:a5:e8:db:03:78:16:8e:71:b3:
86:5c:7c:bd:85:6b:65:35:85:06:77:48:9d:72:ee:c5:75:14:
e0:0b:eb:f0:b4:82:1a:40:60:c2:bd:bb:15:17:eb:ea:9b:88:
76:6f:52:7e:e6:23:eb:5b:3e:2e:f0:1c:66:26:3c:95:fb:93:
48:68:f1:cb:f7:d8:e7:18:93:c7:0b:f3:51:a7:44:1c:18:c2:
99:68:9a:b8:c5:6f:df:bb:3b:29:98:f1:05:39:8f:49:ee:36:
d1:99:a1:a9:4f:86:86:d1:c3:db:f2:d6:f6:07:61:2e:52:a8:
00:28:3e:be:a9:74:b9:4f:ef:b2:5a:0b:9d:e9:d9:78:a9:4d:
ab:90:23:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org