Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/G7zf72sBqG6SIizruoWW7nXXTL8.roa
File: G7zf72sBqG6SIizruoWW7nXXTL8.roa (raw, json)
Hash identifier: B1ceUJ2wqTVXSIE465Dye1nhRKOvy6QAYIRnG5EUzGo=
Subject key identifier: 1B:BC:DF:EF:6B:01:A8:6E:92:22:2C:EB:BA:85:96:EE:75:D7:4C:BF
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01857142F76B1021BB32EFD22254C7F7989F
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/G7zf72sBqG6SIizruoWW7nXXTL8.roa
Signing time: Mon 02 Jan 2023 06:54:52 +0000
ROA not before: Mon 02 Jan 2023 06:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 262287
IP address blocks: 77.83.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:f7:6b:10:21:bb:32:ef:d2:22:54:c7:f7:98:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 2 06:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bbcdfef6b01a86e92222cebba8596ee75d74cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:94:c8:c3:f1:bc:6a:1a:53:b3:ce:0d:c5:
05:27:49:77:4e:09:11:ed:04:df:cc:cb:e0:9a:03:
cb:e3:24:63:e4:65:b9:9d:57:a3:1c:1e:21:f2:ef:
1a:9b:16:e0:c1:cd:10:78:ce:f7:33:5b:34:20:88:
c6:0c:56:c4:8c:9a:e1:86:7a:c2:0e:b1:9c:de:c6:
c1:e0:db:3d:bc:ba:92:45:d2:77:6a:a6:94:af:d3:
a8:9c:ad:c3:d4:cd:85:82:7e:73:e8:a2:3d:09:42:
47:57:e5:ff:42:96:1c:33:d5:6f:d3:dd:61:6f:10:
20:39:96:d0:a6:66:cb:c2:6a:82:14:1a:77:b5:9e:
29:0b:b5:c2:5d:08:4e:84:16:01:58:88:36:2f:f4:
b2:e5:2f:35:54:fe:fe:4a:1d:24:d1:c1:8e:43:99:
36:5f:63:cd:45:c9:09:81:66:9f:8c:d2:5a:04:c7:
61:4e:b5:68:7c:ce:69:cc:16:a3:62:47:fb:02:06:
db:1d:2c:33:9f:9d:0e:d5:61:38:14:14:b9:79:7d:
56:0d:14:85:a3:d1:a1:f8:56:fc:f7:b0:8d:c7:e8:
ef:e9:5e:1e:70:49:a4:5d:4b:00:05:c7:f8:31:15:
07:90:d3:20:d2:b5:71:1f:94:3d:02:b4:f5:4a:f0:
01:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BC:DF:EF:6B:01:A8:6E:92:22:2C:EB:BA:85:96:EE:75:D7:4C:BF
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/G7zf72sBqG6SIizruoWW7nXXTL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.252.0/24
Signature Algorithm: sha256WithRSAEncryption
df:0a:27:18:f2:00:8f:c6:d4:ae:7b:93:09:a1:b7:05:a9:cd:
da:5c:1a:2b:bc:d3:ff:40:ed:ee:98:cf:b4:01:84:e9:a5:88:
5b:10:9b:f1:67:d1:fb:0f:01:f2:74:75:56:32:32:b9:a6:75:
dc:33:6a:57:51:34:5f:eb:4c:c6:e6:da:be:3c:57:e4:10:4b:
01:25:a3:20:eb:e2:4c:87:73:32:2e:79:de:90:f2:96:30:7f:
ac:b2:ff:c2:39:4e:ee:0c:14:cd:b0:46:41:86:3d:5b:2c:17:
8b:16:df:e2:46:b9:4d:59:64:54:e5:88:21:32:30:dc:6d:dd:
48:c5:6c:31:ff:3a:93:b0:79:8a:e0:d4:15:f1:4a:3a:28:66:
bc:bc:d3:97:45:a9:12:19:81:00:08:83:2e:ca:a9:b9:10:42:
7b:99:81:e7:7a:03:dc:51:8c:5f:52:4d:0b:d0:b9:a1:b6:21:
67:1c:f3:a8:b8:6e:85:07:af:16:38:e0:1e:29:bf:a1:c2:1b:
81:f7:41:09:91:59:dc:8e:ba:87:73:7f:f8:7b:8c:ad:33:9e:
95:39:e1:8d:e3:ab:6f:e9:2f:51:e7:79:b4:42:b4:b0:e1:be:
ac:a1:d2:9a:8a:74:03:9c:e4:ce:2b:c0:d1:de:fb:3c:bb:35:
20:60:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org