Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/1-RpJTq7g5OdMnEOYPnZJ1hDz7X0.roa
File: 1-RpJTq7g5OdMnEOYPnZJ1hDz7X0.roa (raw, json)
Hash identifier: UhKA5WcdmzNHufnWtq1N8zUmkfkFKZ5MgV4azP72gG0=
Subject key identifier: F9:1A:49:4E:AE:E0:E4:E7:4C:9C:43:98:3E:76:49:D6:10:F3:ED:7D
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0181F732CC306BB62B1575B9EF0F8778610A
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/1-RpJTq7g5OdMnEOYPnZJ1hDz7X0.roa
Signing time: Wed 13 Jul 2022 10:55:10 +0000
ROA not before: Wed 13 Jul 2022 10:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207710
IP address blocks: 185.177.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:32:cc:30:6b:b6:2b:15:75:b9:ef:0f:87:78:61:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jul 13 10:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f91a494eaee0e4e74c9c43983e7649d610f3ed7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:26:87:27:cb:e0:71:ec:1a:36:56:9a:18:
a5:bf:c0:fa:6d:64:d2:66:9b:fe:d4:b2:66:71:02:
38:60:c1:59:7e:ce:87:d3:d9:0b:e1:ec:d7:45:50:
96:ff:42:4d:75:5b:7a:36:a6:04:c3:c0:82:54:a9:
b8:6e:71:52:43:fa:cc:5f:d5:21:a6:67:7d:a3:19:
78:bc:2e:8c:16:be:62:5f:09:73:80:ca:63:25:44:
1a:b2:c4:9a:51:cf:3a:dd:da:ac:6f:03:b7:bc:56:
77:4a:89:72:df:f2:8c:77:59:4f:35:23:1f:e8:bb:
2d:51:df:54:87:eb:6f:6d:36:3b:7b:48:2e:0b:a0:
c8:fa:82:70:29:9f:31:68:20:fb:5a:60:a6:1f:de:
db:0e:7e:80:b1:0a:84:27:60:b9:d9:0c:a1:f6:2f:
80:47:5b:79:57:1a:b5:f0:dc:05:01:f8:ca:fb:8e:
f3:75:7e:7d:11:c3:de:9a:c4:01:cb:df:fe:9d:33:
83:04:51:5f:40:35:14:3f:8c:f2:a1:d9:a7:6a:ae:
9e:ca:da:e1:2e:ef:36:7b:26:57:d3:eb:99:74:b2:
da:e6:c0:d5:02:da:13:3a:42:49:ec:29:01:07:da:
af:9d:ff:6d:03:22:0c:fe:49:fa:f6:86:d4:1f:17:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1A:49:4E:AE:E0:E4:E7:4C:9C:43:98:3E:76:49:D6:10:F3:ED:7D
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/1-RpJTq7g5OdMnEOYPnZJ1hDz7X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.78.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:70:db:70:6d:c2:93:5f:09:88:1a:0d:39:22:3f:21:e0:15:
f5:9a:2a:dd:d8:cc:0b:fa:77:e1:3e:29:b7:ee:5d:0c:49:bc:
7c:de:e0:44:d0:bc:a4:73:3c:8d:97:2d:34:fb:f0:fd:9a:a3:
88:1e:7e:62:5d:2b:97:4e:6e:35:22:b4:2b:65:18:ab:85:15:
dd:3c:e2:c7:eb:bb:39:3b:ec:a5:eb:68:86:63:ed:a4:62:fa:
53:73:3a:ce:68:cd:42:37:19:c0:d9:a0:6d:50:01:3f:f2:09:
d8:93:87:87:fd:e7:cb:5b:87:7a:ca:48:d7:74:4c:a5:39:04:
08:83:e0:61:f7:6e:ca:5d:9d:ab:31:e0:ab:4d:48:59:36:04:
f2:ef:3d:57:17:95:d0:82:5c:ad:d0:f3:ba:16:fa:f4:80:52:
0b:ce:92:20:e8:bd:29:dd:ec:db:53:f5:aa:06:88:8b:0d:88:
64:ee:b3:ce:51:ac:b1:6d:94:e8:ce:50:44:02:4b:be:3f:cb:
70:98:26:97:0a:83:1a:7b:4e:c9:3c:bb:e5:8c:69:28:04:2e:
71:ad:a3:2f:ca:76:38:3b:be:5f:18:13:43:46:ec:96:3b:7c:
3a:e8:a5:52:e1:dc:ea:1c:06:a3:9f:5e:a1:9c:9b:76:12:aa:
90:4b:6e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:59 2024 by rpki-client on console-fra.rpki-client.org