Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/h0xICNWVIQEJRy7f7INxkbXQu80.roa
File: h0xICNWVIQEJRy7f7INxkbXQu80.roa (raw, json)
Hash identifier: L7Mx3nIVj+p0FUfgbpmPj6eB0lsHSYDv5xzQAWyq2jw=
Subject key identifier: 87:4C:48:08:D5:95:21:01:09:47:2E:DF:EC:83:71:91:B5:D0:BB:CD
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0181F732CCD2810E35DDF868A6D0A30CE88B
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/h0xICNWVIQEJRy7f7INxkbXQu80.roa
Signing time: Wed 13 Jul 2022 10:55:10 +0000
ROA not before: Wed 13 Jul 2022 10:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207795
IP address blocks: 185.177.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:32:cc:d2:81:0e:35:dd:f8:68:a6:d0:a3:0c:e8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jul 13 10:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=874c4808d595210109472edfec837191b5d0bbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cc:f4:01:2f:aa:50:06:31:c4:71:82:fb:25:
38:46:53:a8:88:57:6f:43:79:9d:22:de:27:d2:d5:
6d:70:8e:06:ee:01:ce:a3:4c:97:0c:6b:91:84:cd:
90:67:88:0a:36:d3:95:9b:6b:bf:e0:ac:61:a6:f2:
f4:0b:39:e5:b4:6d:00:c2:a4:54:a7:a1:8f:b8:c5:
9c:33:c4:0e:32:17:42:ad:f2:5b:96:e6:d9:71:ed:
bf:4c:a8:c4:b1:6f:28:ac:03:46:b9:05:4f:d7:54:
2e:5b:fb:bc:ec:59:c7:2d:8f:ce:22:44:42:2d:99:
15:61:f5:e5:d8:92:76:7a:4f:64:c6:db:23:0e:35:
8b:b8:73:f3:74:59:b0:b8:52:15:87:0b:1f:29:44:
91:b4:ba:66:5f:a0:7c:57:48:bf:a0:bf:2e:9b:b2:
1d:d5:f9:ee:56:b5:b7:3e:54:d0:9e:71:b6:fd:0e:
ab:a6:02:d7:f0:d5:24:11:f3:a8:f3:d7:6f:17:68:
65:39:bf:84:14:aa:d5:8b:d7:6b:64:48:25:b2:7c:
07:09:8c:03:84:7b:ac:d6:47:4a:ae:a8:7b:ca:04:
8f:b4:e0:25:9a:14:55:72:de:ab:5c:0c:ba:38:d8:
a0:18:b5:16:ca:48:1a:9e:d4:45:cc:74:2c:94:bb:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4C:48:08:D5:95:21:01:09:47:2E:DF:EC:83:71:91:B5:D0:BB:CD
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/h0xICNWVIQEJRy7f7INxkbXQu80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.78.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:b6:f2:0d:30:1a:5b:de:f8:d3:aa:05:42:2f:89:56:71:05:
c4:c3:bf:cd:f6:a9:ca:da:0a:c4:2e:e1:7b:d2:41:e7:9d:fd:
ba:7e:43:70:b2:3c:1f:51:45:2c:46:7e:36:32:d1:23:ba:9c:
1f:bc:c1:73:99:7e:ba:ed:66:d0:e8:62:9a:3b:95:cf:60:24:
09:f2:cb:68:65:94:60:ca:28:1a:80:4b:b8:90:65:d3:73:28:
d3:bd:ff:98:a8:c4:57:27:4f:97:ae:77:0a:ef:59:eb:33:b6:
f9:2d:a2:57:87:11:7b:ef:13:e2:17:7a:12:bc:2b:76:c4:b5:
e7:7b:79:5c:2a:95:42:77:3d:a5:20:24:f8:21:9e:e3:87:10:
bd:f3:b9:cd:bb:39:6e:35:38:52:91:a5:03:15:6e:4f:6f:af:
76:c4:48:bc:8e:e3:2a:4f:ed:16:31:fc:27:21:44:74:5d:b4:
e6:19:3a:d2:52:d7:70:11:7d:98:fe:6c:4a:a1:28:8d:c5:71:
fd:63:d5:4c:fa:82:32:5d:ce:fb:3c:51:40:d1:fa:22:a7:de:
1b:63:34:c7:b5:78:b0:19:fd:38:f3:95:a1:08:f7:3c:f2:6f:
df:99:ac:82:29:09:ad:a9:a8:5f:fe:d5:fa:9f:1b:61:79:a2:
e9:12:84:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:44 2024 by rpki-client on console-ams.rpki-client.org