Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/B4_NExyTiba4EzAHAkQ1SHdhftU.roa
File: B4_NExyTiba4EzAHAkQ1SHdhftU.roa (raw, json)
Hash identifier: dEMyHEDa0tn80HgNO1TN3408U9SoidU/avtW/B2RD1U=
Subject key identifier: 07:8F:CD:13:1C:93:89:B6:B8:13:30:07:02:44:35:48:77:61:7E:D5
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B094C1D6209EE990EF47DE95780A8
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/B4_NExyTiba4EzAHAkQ1SHdhftU.roa
Signing time: Sun 01 Jan 2023 13:35:06 +0000
ROA not before: Sun 01 Jan 2023 13:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50734
IP address blocks: 194.209.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:09:4c:1d:62:09:ee:99:0e:f4:7d:e9:57:80:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=078fcd131c9389b6b81330070244354877617ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:8d:ff:4a:97:91:15:d0:fd:c4:d4:cb:72:
43:16:d1:37:91:06:00:80:0a:2d:1a:cb:ab:58:ac:
1d:9b:fd:f2:3b:ee:0a:6d:5e:7a:72:f9:6b:1c:3e:
e9:7f:65:62:19:ca:b7:a2:cf:32:82:0a:c7:f7:d1:
93:d0:3a:ec:ee:08:4c:12:76:dc:d6:a6:e9:3a:ad:
b1:e8:d8:70:dc:6d:9c:5b:41:bb:da:bf:82:f0:cb:
0c:a1:41:c2:80:00:d3:82:c2:28:27:1f:9e:f3:3d:
1d:cf:74:a9:d4:4d:77:58:91:f4:79:c0:b6:c5:41:
f6:8d:64:83:cc:c1:1c:3f:30:01:b5:bf:37:74:a1:
03:7f:05:04:2f:73:99:e4:76:3a:15:3c:3d:98:ab:
e0:e6:8a:83:8b:07:3f:25:67:c5:98:a6:d0:39:13:
d7:fd:ee:79:89:21:ed:e8:29:97:f0:e9:77:cb:d9:
ac:76:7f:d9:b2:e4:cf:3e:bb:d8:bc:b1:a8:fe:e0:
fa:be:e3:6c:ac:32:f5:65:10:4b:6c:93:19:1f:0c:
a8:1d:b5:80:5b:0a:88:e7:5a:95:31:cc:46:9b:d0:
2f:54:a2:b0:7b:7e:f2:b0:f4:bd:6d:cb:33:38:65:
64:b9:ff:91:e2:ea:15:15:18:16:1f:75:1d:f0:b6:
f0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8F:CD:13:1C:93:89:B6:B8:13:30:07:02:44:35:48:77:61:7E:D5
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/B4_NExyTiba4EzAHAkQ1SHdhftU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.78.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e0:a9:ea:d2:42:2f:5c:d1:4b:c6:77:98:29:49:fc:95:cf:
eb:a4:6d:71:fa:fa:2d:e8:e0:2a:6f:0c:53:e3:8c:e4:71:a8:
29:85:21:1d:fe:28:21:16:cf:50:39:52:de:47:1c:84:c6:18:
a7:35:0d:76:75:8c:02:19:7e:a4:ee:76:44:c0:b8:0b:87:74:
07:56:59:f9:31:7a:4c:d1:63:b1:d6:1a:2d:81:08:c5:a8:c9:
85:72:70:1d:af:52:f3:8a:d0:8f:8a:09:bd:21:23:c5:76:69:
d0:20:1b:0c:20:9e:33:62:b7:1c:f3:ee:20:20:36:16:1c:5f:
58:58:94:c8:c7:58:1f:6e:7d:65:d0:6b:ca:c3:46:fe:43:2b:
b3:2b:7b:c7:e5:77:18:db:a8:60:5e:1c:9a:82:91:36:be:20:
32:78:da:d4:e5:4b:04:9d:10:24:de:b7:f7:29:93:6b:c4:1e:
ac:19:b3:fc:f0:57:1e:89:24:37:0d:1a:3b:7d:b5:da:53:b1:
32:e8:db:c6:1a:0f:b8:cf:a1:26:3f:eb:8b:71:3d:1e:86:2f:
53:35:f1:4c:04:55:47:5d:13:76:f0:85:1e:6b:cc:6d:85:01:
ef:d1:24:c9:8d:b9:59:cb:83:cb:ab:28:82:1f:dc:a7:a9:b7:
c6:e7:f1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:37:42 2025 by rpki-client