Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/7Ih44HEchM76fosssYsDhPW80DM.roa
File: 7Ih44HEchM76fosssYsDhPW80DM.roa (raw, json)
Hash identifier: fUnotk/PUA4nwBmKa2OkgoRu1RIyYVBHFgrPwz0Fmwc=
Subject key identifier: EC:88:78:E0:71:1C:84:CE:FA:7E:8B:2C:B1:8B:03:84:F5:BC:D0:33
Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial: 0194274741091D1CD08AA88684BD32D3C593
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/7Ih44HEchM76fosssYsDhPW80DM.roa
Signing time: Thu 02 Jan 2025 13:49:28 +0000
ROA not before: Thu 02 Jan 2025 13:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201311
IP address blocks: 185.78.248.0/22 maxlen: 22
193.186.36.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:41:09:1d:1c:d0:8a:a8:86:84:bd:32:d3:c5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
Validity
Not Before: Jan 2 13:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec8878e0711c84cefa7e8b2cb18b0384f5bcd033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:79:5a:f3:27:ed:ed:f4:89:58:00:bf:42:
59:e4:d2:b9:be:40:49:a6:04:e4:30:1e:1d:46:75:
5a:93:7d:e6:71:6e:b6:27:5e:6d:bc:d0:bc:3f:aa:
09:d0:a6:44:98:97:97:c5:70:60:8c:cd:89:fa:97:
1c:6c:91:53:a7:6e:61:f3:24:c7:ed:f6:0e:0f:16:
64:03:28:31:b6:66:5f:7b:88:00:c2:35:64:e1:1e:
42:b4:bb:00:aa:1f:bf:1d:0f:61:60:c7:c9:4b:39:
25:9b:90:03:c6:68:da:cd:cc:dc:85:1c:7c:b9:bb:
19:ef:04:7f:cb:f7:dd:17:a1:bc:4b:8b:39:33:8f:
73:8e:e3:65:6d:2e:49:ea:40:3e:47:0a:14:39:73:
bf:61:de:1f:99:30:f4:4e:72:e3:9d:9d:92:db:6c:
9d:ad:ed:0b:8c:a3:58:3e:48:93:69:55:42:fe:19:
18:bc:6b:e6:ea:98:e9:cc:c6:12:3a:98:5f:fa:f8:
28:d3:d8:61:d8:7d:ee:77:01:94:96:de:7f:47:a0:
43:8c:24:6d:0e:d3:f7:98:54:95:84:70:5c:a5:66:
64:90:18:b5:1b:b7:85:8d:d8:ac:9e:60:b9:3b:a3:
a5:ae:24:3a:5f:7a:bb:79:70:ab:e8:7a:9c:27:60:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:88:78:E0:71:1C:84:CE:FA:7E:8B:2C:B1:8B:03:84:F5:BC:D0:33
X509v3 Authority Key Identifier:
keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/7Ih44HEchM76fosssYsDhPW80DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.248.0/22
193.186.36.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:9f:96:ed:c1:9c:84:3f:4e:aa:a3:cd:a6:54:50:f8:00:60:
44:c2:bb:34:f1:a4:86:ff:65:58:b1:e4:1f:08:7e:79:cf:6f:
1a:18:25:15:38:3f:5a:5d:15:2a:73:ab:28:99:65:e5:5b:30:
cc:84:0d:09:76:e5:a4:79:4e:0f:c3:d4:4f:b9:b7:45:da:d5:
e3:bb:98:20:80:67:3e:80:4f:78:1f:bc:54:5c:32:a5:e9:01:
ae:ad:eb:0b:cf:22:0a:62:cd:ff:bf:06:bd:2a:7d:21:ca:89:
0c:74:35:26:d0:09:26:b8:0a:f8:c4:af:59:87:19:01:4f:a8:
99:0d:40:6e:c7:a2:d2:11:b1:ba:52:bd:e4:7e:9a:36:58:53:
4f:c4:9c:dc:a2:bd:f1:ac:32:b4:c7:40:7b:b2:5b:bc:a2:f6:
56:0b:44:f7:fa:bc:a8:61:e5:93:02:a7:4f:6e:59:fa:e2:e9:
a9:fc:56:62:2d:0b:5f:14:38:b1:1b:1e:42:35:2a:ac:96:5f:
00:49:2a:e1:2f:c1:d0:e3:74:b2:7d:69:ba:09:34:d6:78:67:
03:9f:21:83:51:b8:42:ef:de:ce:78:1a:a5:c9:9f:3a:cf:c6:
67:2d:89:66:c6:90:66:8f:6e:18:84:36:5a:5f:00:94:4e:72:
f4:f3:38:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:14 2025 by rpki-client