Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/77IoI86w8Y4Rr2eE07pLChI5QRY.roa
File: 77IoI86w8Y4Rr2eE07pLChI5QRY.roa (raw, json)
Hash identifier: VdrP20Wnws4RyM/EKfxJJDV5k/Jizez3iuUfFv5fdeE=
Subject key identifier: EF:B2:28:23:CE:B0:F1:8E:11:AF:67:84:D3:BA:4B:0A:12:39:41:16
Certificate issuer: /CN=407d2dc10c02f5ec24f690f9f660555486562e59
Certificate serial: 018CC56DDFB3DEC01127A05A17E6A55CADD8
Authority key identifier: 40:7D:2D:C1:0C:02:F5:EC:24:F6:90:F9:F6:60:55:54:86:56:2E:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH0twQwC9ewk9pD59mBVVIZWLlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/77IoI86w8Y4Rr2eE07pLChI5QRY.roa
Signing time: Mon 01 Jan 2024 14:29:21 +0000
ROA not before: Mon 01 Jan 2024 14:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29436
IP address blocks: 192.162.80.0/22 maxlen: 22
193.238.36.0/22 maxlen: 22
195.149.108.0/24 maxlen: 24
192.166.112.0/23 maxlen: 23
2001:67c:2d9c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:df:b3:de:c0:11:27:a0:5a:17:e6:a5:5c:ad:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407d2dc10c02f5ec24f690f9f660555486562e59
Validity
Not Before: Jan 1 14:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efb22823ceb0f18e11af6784d3ba4b0a12394116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:2a:56:3f:cd:c3:5a:b5:09:ec:34:e1:2d:
c1:cd:e7:1c:1a:7f:d8:3a:c1:9a:04:41:90:22:94:
5a:ff:a2:5a:bb:af:4b:a4:dc:a1:61:13:43:fc:75:
56:6a:35:60:4a:3e:c1:97:61:5c:4d:fe:b3:d5:93:
e6:f7:01:d9:2c:77:c1:88:e8:88:62:35:f5:f8:f5:
a7:b4:1d:63:ba:78:a0:96:5f:d7:59:87:2d:1b:c4:
6e:54:d4:7a:11:7d:87:b9:84:21:f3:fe:6d:bc:32:
fa:10:59:99:55:9a:a3:94:b4:d0:5a:74:03:55:8b:
51:44:0e:7a:5d:cc:14:58:d9:bc:a3:1c:86:b6:de:
40:fb:84:3e:95:57:1d:fe:0a:ed:18:e5:36:36:7d:
5e:71:13:c5:3f:ed:af:f2:a5:6c:bf:62:b8:3f:44:
6e:ea:49:96:00:c7:47:e1:04:c2:c0:8f:64:ee:b4:
ae:65:d8:74:31:33:65:62:e0:a2:a0:40:7b:41:4f:
18:b8:5b:6e:de:9d:dc:e7:8a:6b:1d:c0:6d:63:6d:
9e:e3:f7:42:b0:0f:80:d9:da:d8:a5:55:6c:f6:88:
e0:8d:4d:9f:21:5a:c2:92:c2:02:4c:2e:12:80:f3:
45:bd:fc:76:24:68:ab:38:f8:00:67:68:01:48:12:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B2:28:23:CE:B0:F1:8E:11:AF:67:84:D3:BA:4B:0A:12:39:41:16
X509v3 Authority Key Identifier:
keyid:40:7D:2D:C1:0C:02:F5:EC:24:F6:90:F9:F6:60:55:54:86:56:2E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH0twQwC9ewk9pD59mBVVIZWLlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/77IoI86w8Y4Rr2eE07pLChI5QRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/QH0twQwC9ewk9pD59mBVVIZWLlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.80.0/22
192.166.112.0/23
193.238.36.0/22
195.149.108.0/24
IPv6:
2001:67c:2d9c::/48
Signature Algorithm: sha256WithRSAEncryption
11:bf:6b:9c:f3:78:07:d5:66:1d:44:a2:73:21:0e:c1:f7:e7:
cb:ba:71:24:b0:85:cf:6c:18:3f:81:8d:66:fd:98:e1:4d:c7:
b4:cc:63:ec:8a:fa:ec:13:ae:d6:e3:55:e9:dc:06:4c:6c:bd:
0b:74:04:f6:f8:5f:2a:98:3f:4d:d9:44:37:3c:09:fa:02:73:
22:29:8a:26:9f:2d:0e:1e:26:fe:0d:46:ab:eb:10:59:8a:3c:
81:38:bc:b5:fe:85:4b:9d:b5:0d:84:25:39:06:d4:ba:3f:10:
0d:ad:db:62:d2:a8:e6:08:91:b3:af:48:c6:52:2d:2d:6f:de:
05:35:65:f6:de:0f:88:fe:e9:ee:14:68:4c:47:3f:2f:4b:b0:
6f:8c:7b:1e:b6:24:8b:90:44:e7:64:b9:4f:07:c2:52:10:34:
fe:a6:9c:c9:63:40:af:9b:a1:1c:73:67:d7:87:55:99:4c:ac:
28:88:46:ec:32:1c:97:ef:4c:e6:01:41:56:f0:d0:d3:2d:19:
53:61:2e:4e:0d:90:fb:61:ef:fa:3e:ec:0c:4f:61:46:72:62:
d1:79:e8:2c:60:b7:24:1a:7e:26:52:a0:6c:39:40:5c:ab:c7:
64:88:e6:98:bb:d6:f7:a8:9e:10:1a:20:6e:19:ca:f9:d8:a9:
0a:5a:02:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:22 2024 by rpki-client on console.sobornost.net