Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/DxvJsda3OyleVy1SdX8HWr8JymE.roa
File: DxvJsda3OyleVy1SdX8HWr8JymE.roa (raw, json)
Hash identifier: wsNvRU34jB9teCWaER1bY9Lnn6PqLUVSW+3xMzlvOxo=
Subject key identifier: 0F:1B:C9:B1:D6:B7:3B:29:5E:57:2D:52:75:7F:07:5A:BF:09:CA:61
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019372EA2F9F0F0C41725A56F49F7EA508AC
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/DxvJsda3OyleVy1SdX8HWr8JymE.roa
Signing time: Thu 28 Nov 2024 13:16:10 +0000
ROA not before: Thu 28 Nov 2024 13:16:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200628
IP address blocks: 77.76.2.0/24 maxlen: 24
83.222.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:ea:2f:9f:0f:0c:41:72:5a:56:f4:9f:7e:a5:08:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Nov 28 13:16:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f1bc9b1d6b73b295e572d52757f075abf09ca61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bd:a5:b6:87:37:84:4a:1d:9a:7c:23:09:81:
4f:f7:5b:65:46:ec:c9:f0:61:6d:72:3e:6b:54:ad:
fc:77:72:0f:17:6c:f3:17:88:14:48:d6:af:36:86:
70:91:bf:f7:5d:bf:a8:98:64:e3:24:6a:ae:cc:34:
b0:ae:48:16:09:43:35:9b:ed:b4:c2:e2:f7:21:b9:
0e:fb:bd:84:15:c1:e3:1d:47:5e:54:44:e4:e5:5b:
ad:5d:84:2d:82:23:0c:a3:81:0e:4c:7b:bc:fe:eb:
34:c3:78:53:a0:ca:98:ba:6a:db:b9:29:ea:41:95:
b3:49:82:8a:1c:17:e3:2e:2a:33:22:a0:52:76:d2:
6f:03:83:19:75:16:37:ec:c1:d2:f2:65:65:a7:8f:
b2:b3:61:45:f9:36:2d:71:20:6c:2c:7c:c5:c2:a0:
23:89:71:b7:90:dc:40:1d:05:e7:f2:b9:f9:a5:00:
11:80:5c:8b:04:02:e3:0c:f1:c2:2c:dd:94:a5:8c:
db:20:dc:99:d6:bb:cd:44:24:28:33:58:35:be:9b:
fc:96:5c:69:c5:c8:2b:f5:5b:78:70:50:ed:6a:dd:
a5:42:fe:2b:4b:95:30:99:a1:ca:53:4b:09:66:bd:
4f:bc:21:19:04:47:18:d1:59:f6:6b:72:16:a3:66:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1B:C9:B1:D6:B7:3B:29:5E:57:2D:52:75:7F:07:5A:BF:09:CA:61
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/DxvJsda3OyleVy1SdX8HWr8JymE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.2.0/24
83.222.184.0/24
Signature Algorithm: sha256WithRSAEncryption
67:53:8f:23:87:6b:df:fe:d6:fa:e9:4c:b0:c0:68:fc:2c:ff:
c9:bb:2a:80:48:ff:0c:9d:53:4e:49:7f:2e:c7:ec:e2:0d:ef:
e4:aa:59:64:56:98:26:53:75:6e:7d:71:97:1c:c1:2d:f6:b4:
68:17:83:95:ee:e9:c6:b0:94:9d:dd:7d:15:57:eb:7d:81:7d:
a1:38:e0:96:75:ae:9c:18:15:a7:e9:2a:24:fa:6b:55:ba:58:
d7:62:ca:95:fe:b7:02:d6:37:fe:3a:f9:e3:81:15:e5:5a:27:
fe:98:d4:29:d1:d4:f5:dd:f3:b4:f7:34:0f:a5:04:5c:0e:f6:
0c:9b:8c:99:2f:99:a1:bd:3f:7a:9a:12:70:5e:ea:eb:2e:c0:
f4:2f:bd:f3:a4:1d:53:dd:af:55:f4:b6:59:52:b3:be:a8:5c:
f2:e5:e0:8a:cb:91:d1:95:d1:68:31:fe:8e:77:02:29:84:9f:
29:a7:2d:f6:c8:42:c5:d4:8f:09:1f:97:15:92:dc:89:95:f1:
ae:9c:ec:0c:45:d7:6f:17:f1:29:2a:8c:00:c7:d2:15:96:9e:
29:ff:5d:db:a9:6c:dd:81:56:12:8f:17:16:cc:73:60:b5:f6:
30:bc:ec:5c:7c:88:f7:d9:73:bc:f4:74:05:a8:a1:7f:44:bf:
21:54:c7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:57 2024 by rpki-client on console.sobornost.net