Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/XPnKV-62lfU5MjOEYzyuiCkGwQc.roa
File: XPnKV-62lfU5MjOEYzyuiCkGwQc.roa (raw, json)
Hash identifier: lO/uvxZKz+GTRJdV9bZ/y8t4UitKAiYjmg0GW4XnWMc=
Subject key identifier: 5C:F9:CA:57:EE:B6:95:F5:39:32:33:84:63:3C:AE:88:29:06:C1:07
Certificate issuer: /CN=fc7b99de49b6d7a2e267bb27bfd48ed394b84b7c
Certificate serial: 077AC1BB
Authority key identifier: FC:7B:99:DE:49:B6:D7:A2:E2:67:BB:27:BF:D4:8E:D3:94:B8:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HuZ3km216LiZ7snv9SO05S4S3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/XPnKV-62lfU5MjOEYzyuiCkGwQc.roa
Signing time: Mon 27 Jun 2022 04:28:40 +0000
ROA not before: Mon 27 Jun 2022 04:28:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47583
IP address blocks: 185.77.97.0/24 maxlen: 24
185.77.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125485499 (0x77ac1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7b99de49b6d7a2e267bb27bfd48ed394b84b7c
Validity
Not Before: Jun 27 04:28:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cf9ca57eeb695f539323384633cae882906c107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:fa:f1:49:b3:66:af:4f:18:52:3d:e1:c4:
8f:9d:6a:57:7f:f8:72:37:83:63:75:b3:6b:55:89:
a8:f8:5e:2a:8c:76:a6:58:e9:86:30:5b:58:63:57:
51:1d:96:1d:2b:66:16:25:b0:2b:f4:92:2c:ef:c8:
30:77:11:5b:ff:46:6d:1e:55:44:b4:e0:bb:32:fc:
39:c3:6e:68:96:5e:4b:54:dc:99:93:d8:b6:e4:77:
23:38:fa:6e:f5:cf:8b:3a:c1:da:58:23:68:40:f2:
64:61:13:44:9b:87:cc:2e:af:4d:b4:86:4f:a3:4c:
c0:b0:77:f9:e7:c2:63:f1:d2:79:5a:3b:fc:9e:b3:
fb:a1:97:4f:2d:23:e5:0e:6e:b3:3c:2e:f6:50:21:
69:d2:52:63:c4:71:f1:09:f9:be:5f:73:4c:bf:03:
05:aa:b4:9d:a7:c8:8a:ae:f1:f3:90:30:20:e6:12:
28:69:26:1d:cb:0c:7f:e4:56:c6:05:d9:73:fe:05:
4d:68:63:f1:b9:f2:5b:c2:33:2f:ef:34:b8:09:d0:
1d:78:97:b9:e2:3e:1d:1c:ec:d3:1d:f2:c8:1e:b7:
2f:d9:5b:29:5f:44:64:af:e9:d9:7e:c6:6e:ff:22:
ab:23:b4:0b:98:a1:0b:d3:02:b2:62:52:9b:05:2d:
e1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F9:CA:57:EE:B6:95:F5:39:32:33:84:63:3C:AE:88:29:06:C1:07
X509v3 Authority Key Identifier:
keyid:FC:7B:99:DE:49:B6:D7:A2:E2:67:BB:27:BF:D4:8E:D3:94:B8:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HuZ3km216LiZ7snv9SO05S4S3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/XPnKV-62lfU5MjOEYzyuiCkGwQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/_HuZ3km216LiZ7snv9SO05S4S3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.96.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:4f:80:01:4b:8f:d1:c6:48:88:1f:7a:8d:40:2b:a7:cc:b2:
de:63:fd:ac:ee:3f:a4:cf:f3:d2:b0:b5:b6:9d:fa:ec:57:e3:
b3:e6:1c:70:d0:e4:1e:5d:02:22:aa:aa:1c:5b:da:b6:ee:f1:
fa:da:cb:98:d4:02:2f:c5:0b:71:25:0b:ba:28:c3:46:3c:40:
5c:c0:54:5c:b5:4b:a6:de:00:10:52:47:16:fe:d9:b1:85:9d:
8b:b3:6e:47:f2:fd:7e:c8:88:50:0e:6a:5c:cb:e9:b3:8a:1c:
7c:32:cd:bf:9c:56:f9:c3:f2:38:3a:eb:f5:ad:38:a4:dc:81:
d3:ba:ab:51:f0:ef:f3:6f:89:9f:15:ad:ca:53:db:13:f6:c6:
14:ae:f8:ba:47:c7:61:4f:3d:4e:4f:75:73:6e:dd:91:d1:45:
cb:c2:dd:d4:f8:c1:0f:c4:97:95:2d:26:1a:8c:58:c3:89:36:
15:de:9d:11:03:e7:72:bc:11:3a:34:4c:f0:4f:c8:74:b5:fc:
30:37:52:19:73:3a:af:76:5e:06:98:b7:43:7a:b7:f2:43:2f:
c8:2d:bd:6d:5c:3d:3a:af:e1:29:9c:1e:d3:d5:31:4a:02:af:
8a:48:77:4e:38:7a:38:45:8f:49:69:20:f9:09:20:b0:a6:ac:
59:24:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:51 2024 by rpki-client on console-ams.rpki-client.org