Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/wA_7nvy5lymSnamVa23lOzBVfGE.roa
File: wA_7nvy5lymSnamVa23lOzBVfGE.roa (raw, json)
Hash identifier: IESrFLpjhjF0v8j6bb8JAWQRVJNL4lsa5nBnzBX9HmU=
Subject key identifier: C0:0F:FB:9E:FC:B9:97:29:92:9D:A9:95:6B:6D:E5:3B:30:55:7C:61
Certificate issuer: /CN=fc7b99de49b6d7a2e267bb27bfd48ed394b84b7c
Certificate serial: 05E71D04
Authority key identifier: FC:7B:99:DE:49:B6:D7:A2:E2:67:BB:27:BF:D4:8E:D3:94:B8:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HuZ3km216LiZ7snv9SO05S4S3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/wA_7nvy5lymSnamVa23lOzBVfGE.roa
Signing time: Sat 01 Jan 2022 05:55:47 +0000
ROA not before: Sat 01 Jan 2022 05:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 185.77.96.0/24 maxlen: 24
185.77.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99032324 (0x5e71d04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7b99de49b6d7a2e267bb27bfd48ed394b84b7c
Validity
Not Before: Jan 1 05:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c00ffb9efcb99729929da9956b6de53b30557c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:c4:90:6a:bf:e7:92:82:a7:b6:3c:27:ab:
2d:61:03:91:fe:65:14:2e:51:b2:c0:51:15:e7:43:
5f:8f:3b:79:20:b4:2f:60:ce:23:67:af:9a:0d:5b:
96:74:07:2b:61:a9:37:c8:32:f5:32:e0:49:4c:f5:
11:48:26:37:8a:5b:43:5d:ed:cf:28:33:bd:c8:35:
19:3f:aa:9f:1e:6e:7e:9a:00:6f:a1:ec:90:36:d5:
60:6e:70:51:2e:a2:eb:8d:d2:f8:5a:09:00:a5:06:
8d:c6:77:f1:51:b9:c7:f0:ec:af:61:38:0c:43:45:
c5:a8:bd:23:9a:35:44:5a:46:b3:8d:7b:86:d9:10:
93:95:8c:f3:61:28:4d:35:7f:f7:9e:45:05:66:e7:
a2:4b:13:3e:0c:0d:52:e9:39:15:f8:6c:3f:7e:89:
ba:67:c5:d2:45:9a:45:97:91:11:a0:85:31:37:4e:
6e:7c:87:03:9a:d1:d3:84:27:de:82:14:12:cf:57:
9f:b4:1f:4e:d6:36:0e:7f:df:7a:87:8b:8e:c6:ee:
75:c9:b1:2c:2d:d0:dd:83:49:30:1c:20:4c:a9:f3:
f2:6e:37:57:47:88:05:1c:1b:54:2d:9e:b4:18:17:
ff:4b:67:aa:ec:d2:9b:1d:22:f7:ba:8f:33:b0:f4:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:FB:9E:FC:B9:97:29:92:9D:A9:95:6B:6D:E5:3B:30:55:7C:61
X509v3 Authority Key Identifier:
keyid:FC:7B:99:DE:49:B6:D7:A2:E2:67:BB:27:BF:D4:8E:D3:94:B8:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HuZ3km216LiZ7snv9SO05S4S3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/wA_7nvy5lymSnamVa23lOzBVfGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/_HuZ3km216LiZ7snv9SO05S4S3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.96.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:a4:e6:39:19:ac:f7:56:4e:0b:54:84:32:32:e9:10:2a:b1:
b1:24:05:bd:df:38:e0:c7:ac:a7:77:39:48:00:b8:1a:09:91:
c6:d8:c5:af:92:b7:d9:e1:bb:6c:1c:6b:82:f7:26:93:e5:4d:
25:5a:af:fa:15:2b:02:7d:7e:a3:56:bb:bf:d9:cd:d8:7a:9a:
f9:f8:bf:8e:11:8c:02:52:2a:18:f4:8b:47:17:b6:34:98:fe:
4a:c7:ca:02:43:11:bd:c9:e4:8d:87:2a:e3:66:27:42:e2:78:
8b:9f:c2:08:cd:f2:fc:7f:6f:33:a7:f7:05:d0:5c:9e:85:4e:
99:91:d8:56:99:6c:da:7c:28:f9:7b:8f:63:b5:6a:06:59:21:
7e:4b:9d:c4:d5:ff:dc:8c:28:62:1b:2a:37:2e:7d:3d:0f:5b:
b6:21:aa:36:66:73:42:80:d9:77:fb:5e:4b:fd:ee:e0:1b:dc:
82:16:57:5e:c0:ec:c3:4b:df:48:dd:aa:94:65:c7:1a:69:4e:
2c:9f:bc:41:70:b3:bd:f6:d1:15:b5:90:f5:11:02:84:86:7a:
47:de:71:8e:3b:c9:6e:1f:b8:4e:83:b7:30:72:01:2b:7b:9d:
9b:26:4f:0f:6a:9d:b2:79:b3:ac:0e:4e:ab:93:66:ca:25:3f:
aa:29:a8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org