Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/GZOZ_VlgRUgYmAdY0KV2_2DHRrg.roa
File: GZOZ_VlgRUgYmAdY0KV2_2DHRrg.roa (raw, json)
Hash identifier: vZKsH3v+CEUH8wNsPT59ekO+MKuXRzlgCRd9boAgfOY=
Subject key identifier: 19:93:99:FD:59:60:45:48:18:98:07:58:D0:A5:76:FF:60:C7:46:B8
Certificate issuer: /CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
Certificate serial: 0185738FC50D81B9A73E3406C741DBA08D22
Authority key identifier: 08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/GZOZ_VlgRUgYmAdY0KV2_2DHRrg.roa
Signing time: Mon 02 Jan 2023 17:37:59 +0000
ROA not before: Mon 02 Jan 2023 17:37:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.246.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:c5:0d:81:b9:a7:3e:34:06:c7:41:db:a0:8d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
Validity
Not Before: Jan 2 17:37:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=199399fd5960454818980758d0a576ff60c746b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:fa:2d:c4:3e:56:7b:a8:f4:9d:e3:c3:c9:
68:9e:fa:56:76:c3:61:cb:ac:51:13:cc:02:d4:dc:
36:78:c9:78:a8:5c:e9:02:8f:44:1b:79:13:64:a5:
06:ce:3b:85:d9:dd:eb:a7:fd:fb:3b:b8:79:5a:9e:
53:41:70:fc:00:5b:0b:67:fa:eb:34:05:ca:ce:ab:
8a:a0:8b:ac:1f:35:d6:6c:73:0a:f2:df:c8:87:da:
59:a0:11:9a:3e:2f:17:1a:59:ac:a1:ed:87:57:78:
1e:c6:10:7a:42:d2:a1:7e:3f:83:f2:8a:74:2d:28:
86:7a:e3:d1:8f:2e:ee:ed:a6:a3:5b:d8:3e:6e:7e:
71:a8:59:1f:78:9a:d9:ff:77:f3:bb:d3:c0:a4:96:
8b:ea:c4:bc:37:85:9e:19:25:c2:a1:9b:8c:10:0d:
ed:5b:58:d5:ff:b2:25:04:90:38:60:3b:b5:a5:97:
0a:35:41:25:6a:75:11:bd:21:0f:10:8c:4d:d7:df:
9f:7d:30:12:78:e0:5d:ed:d2:0c:54:53:de:a1:84:
7b:9a:c3:40:ca:d3:89:98:b8:b9:74:ff:a4:8a:e7:
18:12:47:a7:5c:2a:00:74:4d:a3:ab:6d:1c:b6:1c:
74:71:af:ba:3c:d5:15:b9:74:fa:36:3e:7e:54:0d:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:93:99:FD:59:60:45:48:18:98:07:58:D0:A5:76:FF:60:C7:46:B8
X509v3 Authority Key Identifier:
keyid:08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/GZOZ_VlgRUgYmAdY0KV2_2DHRrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/CIHCbv12cfJy3E_n1D7MmYpcDPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.240.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:cb:0e:e5:2d:f5:c5:38:f2:54:62:7f:20:8e:3a:25:16:b7:
76:93:03:e1:8c:e0:f4:d0:2c:90:97:2b:b5:ef:fc:35:de:0a:
10:1a:70:7d:8f:19:93:34:f6:41:96:d2:45:f3:c7:1b:e3:ed:
f7:b7:be:73:34:0b:65:fe:0d:e5:23:56:7c:5f:7b:7c:72:a6:
f1:13:1f:8c:f5:35:1c:cb:fa:30:3a:ef:4c:fb:e9:ee:ce:d3:
18:b9:e5:62:c3:06:72:57:97:4f:8a:46:65:99:3c:c4:f7:01:
25:48:42:09:e6:a7:0d:2c:cc:4b:34:a0:28:54:e9:07:cb:60:
bd:a0:1c:19:41:5b:49:2d:45:b7:bb:06:83:1e:55:10:1e:19:
6b:73:19:07:1d:ab:e3:e0:e1:b6:38:c0:00:ee:79:81:20:0e:
1e:c5:e4:30:b5:65:50:8a:0f:a7:ea:88:c3:e2:94:80:cf:10:
7c:b9:ba:64:ab:4a:4e:d7:92:0f:ac:3a:82:a0:de:fa:f6:e3:
2a:fd:c8:d1:b2:f2:b9:27:de:bd:73:bd:e4:e8:f7:7d:a1:96:
29:e2:67:7a:42:b3:42:92:f5:98:69:9e:85:1f:5b:10:01:a8:
e2:1c:88:fa:d1:f8:95:2e:c2:f9:51:a4:bc:89:fc:6b:94:3e:
4b:df:8e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 07:39:11 2023 by rpki-client on console-ams.rpki-client.org