Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8d8346-2ff7-45af-a99e-a2269e35f5ea/1/1-S7fI_PmwPpqLWMLqDtCGL9AdcU.roa
File: 1-S7fI_PmwPpqLWMLqDtCGL9AdcU.roa (raw, json)
Hash identifier: 3KMYJuMsA/kmwK7xR+zxmouY3ebyv4RyceUwaDe3Iec=
Subject key identifier: F9:2E:DF:23:F3:E6:C0:FA:6A:2D:63:0B:A8:3B:42:18:BF:40:75:C5
Certificate issuer: /CN=77fb3e86b1474db04a15cae0efc3773de4b835bb
Certificate serial: 018964C05333776AC97434B4428469855BC8
Authority key identifier: 77:FB:3E:86:B1:47:4D:B0:4A:15:CA:E0:EF:C3:77:3D:E4:B8:35:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_s-hrFHTbBKFcrg78N3PeS4Nbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8d8346-2ff7-45af-a99e-a2269e35f5ea/1/1-S7fI_PmwPpqLWMLqDtCGL9AdcU.roa
Signing time: Mon 17 Jul 2023 16:47:53 +0000
ROA not before: Mon 17 Jul 2023 16:47:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 193.8.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:53:33:77:6a:c9:74:34:b4:42:84:69:85:5b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fb3e86b1474db04a15cae0efc3773de4b835bb
Validity
Not Before: Jul 17 16:47:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f92edf23f3e6c0fa6a2d630ba83b4218bf4075c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:61:cc:d0:6f:98:35:a2:dc:c6:0d:69:38:6c:
44:4c:2c:45:e5:48:19:05:b7:9f:40:ad:82:ff:4d:
09:4f:a7:06:a3:75:b6:4a:4e:43:19:43:4c:cb:54:
6a:de:ae:1a:fe:ea:e2:c8:f5:9f:b8:9e:90:10:c5:
a7:bc:9a:36:a9:71:65:07:2b:13:9f:6d:72:61:87:
f4:a4:5a:92:19:07:2a:0a:ff:94:4f:6d:e2:ae:b1:
8d:72:5e:5e:b8:67:d2:95:09:58:6d:1d:b5:da:d5:
23:6e:ee:0e:e0:99:03:08:35:b5:b9:4e:48:01:cd:
a7:a4:9e:cc:73:30:98:5e:7b:b8:f3:38:56:ae:a0:
bc:99:6f:ff:8a:85:63:ea:b7:f4:db:d7:33:7b:1d:
a7:b7:8e:4a:a6:1f:03:92:27:8e:eb:de:75:e2:eb:
47:e0:dd:27:10:44:da:0f:91:5d:7a:e0:9d:f6:c4:
79:88:89:59:59:4b:5a:10:d4:a0:ce:cd:cb:1a:6a:
02:35:e8:aa:a9:8f:48:53:a0:a9:fc:ef:3c:31:f8:
e9:80:f8:f7:99:7a:8d:48:06:02:89:ba:23:70:e1:
c0:c2:55:d0:ca:b5:18:01:c2:da:2a:d4:21:43:30:
96:9a:c5:12:7a:6d:42:0f:a8:eb:16:88:cb:04:9d:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2E:DF:23:F3:E6:C0:FA:6A:2D:63:0B:A8:3B:42:18:BF:40:75:C5
X509v3 Authority Key Identifier:
keyid:77:FB:3E:86:B1:47:4D:B0:4A:15:CA:E0:EF:C3:77:3D:E4:B8:35:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_s-hrFHTbBKFcrg78N3PeS4Nbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8d8346-2ff7-45af-a99e-a2269e35f5ea/1/1-S7fI_PmwPpqLWMLqDtCGL9AdcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8d8346-2ff7-45af-a99e-a2269e35f5ea/1/d_s-hrFHTbBKFcrg78N3PeS4Nbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:70:90:7a:62:44:61:bd:1d:b0:5e:8b:ab:2a:20:cc:ca:22:
08:9a:6c:fb:07:61:42:0f:d9:8f:33:ad:ea:a0:00:96:89:43:
4e:fd:4d:2d:28:12:a0:7f:b8:73:a0:b3:c5:13:4e:04:4b:6c:
fc:0c:87:25:f1:96:56:4d:51:f1:a5:d0:a6:49:bc:7a:fa:e3:
d2:6e:bd:9b:96:1d:8e:91:4c:0a:de:94:41:d2:c2:73:8c:64:
1b:de:2f:ff:56:76:99:6a:1b:92:17:31:e5:01:27:10:dd:18:
a1:f1:c0:12:94:56:67:80:7e:48:75:7d:b2:57:b8:2b:29:35:
d8:c7:ee:21:b7:74:82:c8:00:05:d6:be:32:84:fc:c6:95:56:
7c:84:8e:d8:11:93:8c:36:70:40:92:40:47:1d:d6:44:3b:04:
95:71:51:18:05:64:cc:83:1a:af:fb:8b:05:26:af:9e:e0:0f:
cb:dd:04:d5:09:6c:3a:36:2e:59:d0:dd:26:f6:ec:97:31:7a:
b0:e5:0c:84:d5:f9:09:81:2e:2d:ef:ac:59:54:df:ef:0e:8d:
5a:c7:3a:03:94:21:e8:23:fe:34:32:35:7e:5c:ce:fa:72:34:
71:8a:31:ab:e4:9e:98:e8:8a:37:f0:ee:4f:d0:fe:94:c8:ca:
bd:ec:fd:f8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYlkwFMzd2rJdDS0QoRphVvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZmIzZTg2YjE0NzRkYjA0YTE1Y2FlMGVmYzM3NzNkZTRi
ODM1YmIwHhcNMjMwNzE3MTY0NzUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTJlZGYyM2YzZTZjMGZhNmEyZDYzMGJhODNiNDIxOGJmNDA3NWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGHM0G+YNaLcxg1pOGxETCxF5UgZ
BbefQK2C/00JT6cGo3W2Sk5DGUNMy1Rq3q4a/uriyPWfuJ6QEMWnvJo2qXFlBysT
n21yYYf0pFqSGQcqCv+UT23irrGNcl5euGfSlQlYbR212tUjbu4O4JkDCDW1uU5I
Ac2npJ7MczCYXnu48zhWrqC8mW//ioVj6rf029czex2nt45Kph8DkieO69514utH
4N0nEETaD5FdeuCd9sR5iIlZWUtaENSgzs3LGmoCNeiqqY9IU6Cp/O88MfjpgPj3
mXqNSAYCibojcOHAwlXQyrUYAcLaKtQhQzCWmsUSem1CD6jrFojLBJ2B4QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPku3yPz5sD6ai1jC6g7Qhi/QHXFMB8GA1UdIwQY
MBaAFHf7PoaxR02wShXK4O/Ddz3kuDW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9zLWhyRkhUYkJLRmNyZzc4TjNQZVM0TmJzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84ZDgzNDYtMmZmNy00NWFmLWE5OWUt
YTIyNjllMzVmNWVhLzEvMS1TN2ZJX1Btd1BwcUxXTUxxRHRDR0w5QWRjVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2MvOGQ4MzQ2LTJmZjctNDVhZi1hOTllLWEyMjY5ZTM1ZjVl
YS8xL2Rfcy1ockZIVGJCS0Zjcmc3OE4zUGVTNE5icy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEISzAN
BgkqhkiG9w0BAQsFAAOCAQEAS3CQemJEYb0dsF6LqyogzMoiCJps+wdhQg/ZjzOt
6qAAlolDTv1NLSgSoH+4c6CzxRNOBEts/AyHJfGWVk1R8aXQpkm8evrj0m69m5Yd
jpFMCt6UQdLCc4xkG94v/1Z2mWobkhcx5QEnEN0YofHAEpRWZ4B+SHV9sle4Kyk1
2MfuIbd0gsgABda+MoT8xpVWfISO2BGTjDZwQJJARx3WRDsElXFRGAVkzIMar/uL
BSavnuAPy90E1QlsOjYuWdDdJvbslzF6sOUMhNX5CYEuLe+sWVTf7w6NWsc6A5Qh
6CP+NDI1flzO+nI0cYoxq+SemOiKN/DuT9D+lMjKvez9+A==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net