Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/Gi4RYcCzqTN031KxrrwyRSAgSkE.roa
File: Gi4RYcCzqTN031KxrrwyRSAgSkE.roa (raw, json)
Hash identifier: 8J+4ii/ARXmTMoYc2eo0khb11mURJjPVVhj/+j0l8XA=
Subject key identifier: 1A:2E:11:61:C0:B3:A9:33:74:DF:52:B1:AE:BC:32:45:20:20:4A:41
Certificate issuer: /CN=875a4d852d6f2e59e937adbf1128fc24b0d40900
Certificate serial: 0189CB7745227EBAC51805D71F90CDE5F9CF
Authority key identifier: 87:5A:4D:85:2D:6F:2E:59:E9:37:AD:BF:11:28:FC:24:B0:D4:09:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1pNhS1vLlnpN62_ESj8JLDUCQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/Gi4RYcCzqTN031KxrrwyRSAgSkE.roa
Signing time: Sun 06 Aug 2023 15:28:58 +0000
ROA not before: Sun 06 Aug 2023 15:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201949
IP address blocks: 77.72.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cb:77:45:22:7e:ba:c5:18:05:d7:1f:90:cd:e5:f9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875a4d852d6f2e59e937adbf1128fc24b0d40900
Validity
Not Before: Aug 6 15:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a2e1161c0b3a93374df52b1aebc324520204a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:cc:85:db:d9:c0:7f:61:3a:9f:33:f6:55:
66:f9:bb:ed:29:7b:ed:6f:3e:f7:5d:9c:71:e1:24:
9e:f3:64:b1:7c:fc:f8:1d:79:a4:b7:81:52:92:4e:
61:2e:5f:8e:12:f2:44:0d:02:a1:96:98:50:83:cc:
06:8d:f1:b9:b6:44:f3:b4:0d:0e:10:47:71:4b:97:
3f:8d:31:33:5b:d1:fa:73:01:ef:ab:9c:eb:8a:a4:
a8:0e:ff:d4:eb:8a:1d:a4:5d:31:5a:4f:b4:30:d3:
3b:6e:fc:97:40:e0:3b:10:54:8c:85:b6:e0:90:9a:
9a:6e:c7:80:99:dd:6f:10:5a:7a:7f:a1:fe:1b:69:
23:20:55:e3:71:e8:c8:3d:c1:47:50:22:07:82:90:
07:a7:41:eb:56:e9:ac:5c:63:0f:19:6e:4d:7d:de:
fd:15:5b:08:e3:85:69:a6:40:9c:ba:8d:1c:a8:d9:
c3:4e:cf:9b:30:18:d9:a1:50:6a:eb:80:0c:eb:ea:
44:4b:aa:eb:19:2f:d9:a6:9a:d1:69:e6:3b:17:83:
4e:3b:cb:0e:55:fb:0d:a0:ce:39:66:25:65:5e:fe:
b1:f8:ae:9d:1f:1d:9e:bf:70:51:48:e4:b8:15:f3:
35:f4:fa:83:a0:b2:d3:3f:e8:e2:f2:f5:aa:0f:b5:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2E:11:61:C0:B3:A9:33:74:DF:52:B1:AE:BC:32:45:20:20:4A:41
X509v3 Authority Key Identifier:
keyid:87:5A:4D:85:2D:6F:2E:59:E9:37:AD:BF:11:28:FC:24:B0:D4:09:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1pNhS1vLlnpN62_ESj8JLDUCQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/Gi4RYcCzqTN031KxrrwyRSAgSkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/h1pNhS1vLlnpN62_ESj8JLDUCQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.81.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:94:cf:bf:c3:7c:62:64:58:ac:01:a2:e9:5e:61:5e:df:b6:
da:15:e2:e5:f8:50:95:48:cb:d4:0e:9d:24:04:b0:96:ac:69:
17:91:59:b0:51:cb:62:dd:a3:c5:cd:5c:2b:93:9f:ec:e5:fd:
3b:22:63:d9:e9:c8:5e:25:e6:ff:96:cb:35:de:36:a9:73:66:
78:43:0f:67:e3:18:a2:2f:71:75:6e:5c:c3:4a:9b:27:59:58:
16:82:72:da:ad:af:ee:84:2d:32:9b:9b:76:8e:5c:cc:ba:77:
eb:f2:67:01:eb:a0:1d:e2:2a:42:34:39:2d:51:ad:c0:2e:07:
56:a3:af:4b:3d:7d:d3:16:cd:24:e4:86:c4:de:48:0b:4b:85:
6f:3b:86:56:56:31:87:e6:3b:0b:ef:a0:2b:ff:e1:28:ea:55:
34:30:7c:c3:93:27:e0:7e:f1:30:4c:f6:55:00:65:03:fa:8b:
f0:1d:f6:52:ad:4a:04:e2:f9:f2:8d:fb:9c:16:17:9c:4e:40:
9b:3c:e6:4b:b0:c8:6d:cf:19:89:df:9a:be:d5:ba:3d:dc:b4:
16:eb:1d:37:f7:9b:dc:df:58:96:24:c6:8d:86:07:95:0c:6a:
ed:00:ed:87:cb:84:2f:c6:e4:7e:f6:dc:f8:b0:1d:43:a8:8a:
39:0b:e0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:17 2023 by rpki-client on console.sobornost.net