Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/T74d6mftx2zbqLp5kvBeuWmvAl8.roa
File: T74d6mftx2zbqLp5kvBeuWmvAl8.roa (raw, json)
Hash identifier: LY4mhM/OwEGVV5HoaCqcDFYfGCnW4FpmXHT93GKFSlI=
Subject key identifier: 4F:BE:1D:EA:67:ED:C7:6C:DB:A8:BA:79:92:F0:5E:B9:69:AF:02:5F
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018C6D9F9D2FF88CFDFB7B9489B0DEB521D4
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/T74d6mftx2zbqLp5kvBeuWmvAl8.roa
Signing time: Fri 15 Dec 2023 13:17:06 +0000
ROA not before: Fri 15 Dec 2023 13:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 178.248.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:9f:9d:2f:f8:8c:fd:fb:7b:94:89:b0:de:b5:21:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Dec 15 13:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fbe1dea67edc76cdba8ba7992f05eb969af025f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:f1:bd:3d:47:0e:e2:4a:7d:24:cb:b0:1c:
60:ee:69:61:9d:c9:c2:35:da:94:eb:05:a0:f1:48:
12:bd:ec:d2:8c:fd:41:1e:25:74:24:07:3b:26:92:
29:07:18:cb:b1:f6:d3:e4:55:94:f5:0d:8e:d4:86:
de:51:bc:16:a1:ae:e0:1b:be:52:11:5e:22:78:a8:
3c:b5:ab:6c:c8:8a:40:b5:a4:9c:81:25:a6:13:84:
14:aa:49:70:f5:2d:a8:c2:08:10:62:cd:a7:c2:47:
ac:02:59:68:ae:67:b4:94:a9:36:b4:06:d3:a3:b7:
4c:bc:2e:65:21:08:48:dc:c0:95:58:4f:97:e4:d9:
1e:21:d6:d4:4d:0a:7d:18:2f:0e:08:f6:e5:7c:fe:
ed:ca:6d:91:09:72:fd:b0:fb:14:9c:87:8b:38:8b:
03:24:28:cf:de:16:01:a5:6d:19:cd:f2:9b:0e:4f:
47:7f:88:04:84:7b:4f:c1:2a:6c:00:b6:3a:58:93:
37:47:32:1d:ad:e0:62:ea:4b:6f:1f:87:97:cc:c5:
42:4c:e3:78:5b:a2:55:1c:af:fd:a9:39:52:10:22:
bb:3b:fe:b2:0f:69:b2:4c:8b:b9:b2:64:7b:7c:af:
74:39:b8:8a:4a:7b:59:38:01:73:dc:3b:f8:a4:a0:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BE:1D:EA:67:ED:C7:6C:DB:A8:BA:79:92:F0:5E:B9:69:AF:02:5F
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/T74d6mftx2zbqLp5kvBeuWmvAl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.77.0/24
Signature Algorithm: sha256WithRSAEncryption
87:46:74:24:8d:d7:ec:3c:5f:36:63:e8:fc:c4:d8:0e:62:91:
06:a3:fb:20:b0:7f:22:a4:bc:ed:b8:42:03:e3:68:4a:60:35:
ae:aa:5c:3b:15:87:97:27:20:ca:1a:a7:45:fd:dc:6b:e2:36:
5d:46:76:28:e8:f0:35:aa:03:4f:e4:70:8d:06:d8:ff:30:72:
5d:86:9a:b2:67:50:8a:ff:7f:7c:10:33:80:f8:5f:fb:a1:ad:
f6:d8:c2:05:1e:b2:06:0f:4d:2b:73:4d:03:4f:0d:8c:e3:98:
39:66:cb:bd:e2:57:d2:24:ee:78:12:18:f2:7b:61:d6:07:64:
9c:de:45:e4:23:c2:01:02:c6:7b:d4:c0:fd:fd:a0:b5:26:a8:
a9:5c:6d:df:80:1c:79:e9:52:0a:ca:ff:94:f3:a5:aa:5e:78:
7c:1c:59:d7:47:db:bb:70:07:df:80:19:53:48:f2:35:e9:66:
d8:61:73:a7:fa:72:3d:f6:22:d2:08:e8:1f:21:55:fd:a1:d7:
ae:76:f5:ac:39:57:48:de:4f:61:26:aa:69:0d:8b:28:58:6f:
e3:cd:8d:87:0c:c8:f9:dc:1a:31:ad:03:27:c9:56:fd:1a:6d:
c6:d9:a8:51:e7:0a:05:bf:7e:47:86:19:37:94:73:b4:67:31:
d6:03:ed:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:56:09 2025 by rpki-client