Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vrpXp4hfCoQ94pr1EkGA1w5cL4o.roa
File: vrpXp4hfCoQ94pr1EkGA1w5cL4o.roa (raw, json)
Hash identifier: dAhL1WYcAoaz1Lmnk8olunrTded5mUyFDQAT81qgASw=
Subject key identifier: BE:BA:57:A7:88:5F:0A:84:3D:E2:9A:F5:12:41:80:D7:0E:5C:2F:8A
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 0193019B8D2228CC8E96E2119F2CF445BD22
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vrpXp4hfCoQ94pr1EkGA1w5cL4o.roa
Signing time: Wed 06 Nov 2024 13:13:11 +0000
ROA not before: Wed 06 Nov 2024 13:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35295
IP address blocks: 77.222.45.0/24 maxlen: 24
80.93.48.0/21 maxlen: 24
2a02:408:8093::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:9b:8d:22:28:cc:8e:96:e2:11:9f:2c:f4:45:bd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Nov 6 13:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beba57a7885f0a843de29af5124180d70e5c2f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:26:ba:06:52:94:e4:c8:4c:31:6a:92:51:
ed:eb:35:b3:96:d2:30:13:20:10:a3:75:5d:fa:43:
46:01:24:d1:d1:b2:41:80:c7:ea:e3:48:7b:85:db:
89:ee:ce:86:d4:e6:0c:8a:d6:77:e9:c5:60:5b:50:
88:5c:67:b5:e8:e5:f1:30:b2:18:d7:e6:1d:c4:1a:
86:9e:e8:58:18:04:5f:77:a2:ff:9d:da:94:01:3c:
4f:6e:66:c7:3e:01:20:f1:dd:1b:2c:86:34:64:94:
f4:0b:fa:e7:61:9a:37:a6:26:c7:a5:12:03:33:65:
e0:68:15:bc:b7:f7:33:a0:c4:1d:21:8d:87:29:b1:
34:dc:cf:cb:33:bf:55:3a:a0:c2:ea:8d:f1:ad:79:
62:0b:b9:f3:7a:ff:69:16:38:7f:31:85:07:40:04:
31:1b:ec:ff:7a:e3:e5:60:f3:24:07:18:b2:e1:65:
c0:d7:e4:c4:47:33:2a:52:78:7a:ed:27:c1:63:4e:
87:fb:d9:ba:47:aa:d5:cf:06:3f:69:7d:1c:fc:62:
1c:c1:f1:f3:ab:f7:14:a6:ea:0d:42:98:7c:0f:e0:
9e:7e:23:3c:83:f4:00:f1:8b:5e:5f:55:ac:82:45:
32:d7:7f:18:ae:c3:6e:b1:0a:a4:6d:72:a9:58:4b:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BA:57:A7:88:5F:0A:84:3D:E2:9A:F5:12:41:80:D7:0E:5C:2F:8A
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vrpXp4hfCoQ94pr1EkGA1w5cL4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.45.0/24
80.93.48.0/21
IPv6:
2a02:408:8093::/48
Signature Algorithm: sha256WithRSAEncryption
7b:1d:ec:ff:cf:51:65:a2:86:97:e1:87:56:63:4a:3f:6c:9b:
fb:cf:35:43:2a:1b:57:e0:33:fe:94:6d:4e:71:f5:1f:6d:a3:
95:1e:28:98:f6:95:3d:5f:53:fb:e2:44:b7:de:2d:6c:06:56:
d9:be:be:8e:40:24:63:b7:b3:51:50:38:99:05:a2:9e:4e:8b:
be:f3:9c:a3:07:2a:59:28:62:24:37:ca:fd:10:7a:ed:a7:e4:
60:d7:51:70:08:70:8b:89:bb:29:80:71:a6:e2:05:96:95:33:
5f:a6:bf:b2:4b:ac:3f:dc:9d:f4:f7:a2:93:df:93:bf:e7:0b:
1f:ae:85:0b:e6:46:b4:87:41:1f:fc:de:a5:a0:1f:68:ee:23:
c9:40:a4:ae:31:77:bd:aa:e0:af:e2:37:0d:2f:6f:2c:a1:66:
9c:95:7a:7f:4c:db:99:f3:a6:99:6a:33:82:d8:fe:54:19:80:
06:aa:12:99:3c:c6:cf:12:8f:58:87:b6:e6:d0:c5:63:16:78:
43:f6:0b:da:66:ea:b5:51:97:b0:ed:82:4c:c3:0e:24:32:0d:
be:f3:bb:9c:86:a0:91:a1:15:42:a8:17:a4:76:08:74:b3:41:
c4:e6:17:72:a8:be:7c:e4:02:1b:8b:e6:50:75:eb:d7:a1:03:
8d:4d:59:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:57 2024 by rpki-client on console.sobornost.net