Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/117d93-40f4-43f0-8c2e-89fa229ba717/1/78-F9M75bz9ebzM89dv-zZmCvSI.roa
File: 78-F9M75bz9ebzM89dv-zZmCvSI.roa (raw, json)
Hash identifier: 5kS+ffZXRpN875ruAEtS0kbShp1Upk+/jjTb0LGNKSM=
Subject key identifier: EF:CF:85:F4:CE:F9:6F:3F:5E:6F:33:3C:F5:DB:FE:CD:99:82:BD:22
Certificate issuer: /CN=04b027ccabc088f12efe1837cd113177a544f55d
Certificate serial: 018CC34933236090EC8CB3D686AA7B67CF5B
Authority key identifier: 04:B0:27:CC:AB:C0:88:F1:2E:FE:18:37:CD:11:31:77:A5:44:F5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLAnzKvAiPEu_hg3zRExd6VE9V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/117d93-40f4-43f0-8c2e-89fa229ba717/1/78-F9M75bz9ebzM89dv-zZmCvSI.roa
Signing time: Mon 01 Jan 2024 04:30:03 +0000
ROA not before: Mon 01 Jan 2024 04:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58075
IP address blocks: 185.233.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:33:23:60:90:ec:8c:b3:d6:86:aa:7b:67:cf:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b027ccabc088f12efe1837cd113177a544f55d
Validity
Not Before: Jan 1 04:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efcf85f4cef96f3f5e6f333cf5dbfecd9982bd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:71:cd:55:52:ef:98:73:8f:b9:e0:0a:71:22:
1e:44:6a:e3:25:80:04:d2:96:0d:ee:b8:11:06:ab:
a0:96:fe:e8:6d:d9:a9:c2:04:b7:ea:a9:9b:37:66:
dd:29:35:d6:cc:7e:87:cd:d4:09:bf:f1:f6:a4:a2:
5d:99:d5:b8:2c:7f:89:43:83:3c:11:c8:b5:a8:69:
75:27:e3:de:ba:91:b3:01:f6:97:dc:ab:25:54:37:
4a:b9:db:a2:b9:eb:6e:ee:5d:96:05:a4:0f:20:85:
7b:06:d5:58:60:5f:d6:a7:11:d1:72:e2:6d:53:ad:
81:f4:f5:fc:cd:54:5a:6a:e5:60:4d:e9:23:da:5a:
85:22:27:9e:32:6b:aa:e5:22:d3:68:91:69:5f:06:
2a:29:bc:75:b3:46:8e:ef:f5:3a:0f:37:ae:3c:c2:
6e:80:b5:c7:35:b5:5a:14:92:9b:b6:03:3c:5a:bc:
9e:3b:5d:89:51:df:22:25:68:f9:cf:27:9b:83:c2:
2c:c1:5d:5b:ef:de:2e:3b:ca:bf:c2:ac:7f:ff:c5:
bc:0a:16:3b:f1:cc:f8:b4:7a:e3:66:07:cf:2a:2e:
46:f0:53:64:ad:5b:6c:d6:cf:a7:cb:46:4f:91:ad:
63:7d:d5:41:78:a6:4b:aa:1d:9f:8a:fe:7a:85:41:
44:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CF:85:F4:CE:F9:6F:3F:5E:6F:33:3C:F5:DB:FE:CD:99:82:BD:22
X509v3 Authority Key Identifier:
keyid:04:B0:27:CC:AB:C0:88:F1:2E:FE:18:37:CD:11:31:77:A5:44:F5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLAnzKvAiPEu_hg3zRExd6VE9V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/117d93-40f4-43f0-8c2e-89fa229ba717/1/78-F9M75bz9ebzM89dv-zZmCvSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/117d93-40f4-43f0-8c2e-89fa229ba717/1/BLAnzKvAiPEu_hg3zRExd6VE9V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.216.0/24
Signature Algorithm: sha256WithRSAEncryption
78:70:2d:c2:ea:04:8d:fa:2e:cb:e3:d0:d6:59:ce:63:47:28:
b8:07:60:40:b2:8c:0e:94:b7:55:9c:b8:cc:4b:27:10:95:80:
e6:5b:a1:c6:32:df:2a:73:52:ca:f8:1b:1e:50:af:6e:a8:05:
fc:8b:37:3e:27:de:11:2e:fe:d4:cf:98:f5:af:c0:73:6b:90:
fe:76:c3:71:1a:25:0b:e9:64:52:c8:11:2e:b4:f1:63:30:4b:
5a:1d:2b:37:11:5e:43:4d:1c:c8:13:c5:7a:9d:31:88:34:d9:
0c:2b:c7:6e:34:72:4f:4e:ed:7f:f7:5e:5c:c4:c7:98:75:c1:
9d:60:19:fa:61:e1:b1:08:97:c5:73:fe:1e:29:b5:ef:0a:36:
e1:30:fc:0e:09:26:8a:97:dc:7a:42:15:ba:b3:a9:ce:2f:08:
f3:41:f5:6c:37:6f:9b:0b:65:a1:46:01:a1:0b:b3:ab:e0:cf:
29:45:d6:26:ad:4c:1b:04:6a:73:e3:68:a3:dd:7a:26:ab:ca:
87:85:b1:a5:69:33:00:4a:19:d1:ae:84:a2:71:37:b0:30:b5:
e4:27:52:8d:ef:6d:35:95:14:7f:1e:84:52:0b:4b:43:9b:1d:
eb:e6:71:3a:f1:ef:b8:4b:e0:da:d4:3f:59:bf:53:8d:1c:2b:
a9:1b:f9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:25 2025 by rpki-client