Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/uZZ3NEsMKPfHdenaOOtle_AGpJs.roa
File: uZZ3NEsMKPfHdenaOOtle_AGpJs.roa (raw, json)
Hash identifier: Blr2t7XHieih91IW9ky4pA/JApATiplRxnAyzcpAt40=
Subject key identifier: B9:96:77:34:4B:0C:28:F7:C7:75:E9:DA:38:EB:65:7B:F0:06:A4:9B
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 01856ED4C22005AD6DCC4D3B8A9160948E13
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/uZZ3NEsMKPfHdenaOOtle_AGpJs.roa
Signing time: Sun 01 Jan 2023 19:35:15 +0000
ROA not before: Sun 01 Jan 2023 19:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399587
IP address blocks: 185.177.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c2:20:05:ad:6d:cc:4d:3b:8a:91:60:94:8e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jan 1 19:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b99677344b0c28f7c775e9da38eb657bf006a49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5f:7e:95:13:4c:68:4f:fa:de:33:37:0a:42:
99:0e:36:b6:35:f2:1e:cd:ba:c7:2c:34:21:f4:b6:
01:17:fa:8e:1e:70:5e:f1:2b:5d:47:ca:0a:ac:23:
7e:1f:c6:1b:6b:ca:63:37:6d:f1:b0:8f:83:2b:4f:
ed:a6:29:f9:94:06:05:61:02:cb:69:b5:9f:5c:ad:
6b:02:cd:91:52:2e:f0:99:05:34:85:f0:e6:ed:0d:
c7:f3:7f:24:a2:59:51:f6:3e:76:49:85:14:a4:6d:
18:c6:ba:14:3a:2b:be:de:08:58:95:fb:68:e2:6e:
2f:fc:c7:65:b5:02:0c:2b:2e:93:9d:db:05:90:ec:
dd:99:bc:4a:04:9f:76:47:30:6b:c6:d5:fb:39:92:
29:24:ce:f7:b8:bc:46:97:35:2f:33:44:fd:2f:a8:
57:63:2b:6c:bf:92:a3:95:bf:2a:93:35:da:c2:db:
a3:4c:91:05:52:ed:00:87:f8:ab:fc:d1:d8:a6:3a:
1b:b0:dc:db:fb:25:fd:e1:44:72:b1:71:66:f4:8f:
8e:8f:4a:25:b7:77:6b:65:77:11:ab:5b:01:69:76:
68:2e:f8:e2:fb:a7:e1:5c:ee:3d:7e:2e:75:03:5a:
92:5e:dd:8f:7e:a0:e9:81:a2:70:9d:a5:b0:17:13:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:96:77:34:4B:0C:28:F7:C7:75:E9:DA:38:EB:65:7B:F0:06:A4:9B
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/uZZ3NEsMKPfHdenaOOtle_AGpJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.78.0/23
Signature Algorithm: sha256WithRSAEncryption
97:70:6f:13:fc:6d:bc:14:b2:d0:94:a4:11:e6:92:cc:ae:80:
b0:0f:5c:f2:b0:a3:11:48:dd:55:f1:d9:fd:d0:15:a3:5d:48:
19:04:ca:e4:f4:cb:e4:97:9a:50:bb:6f:62:4a:b0:dd:04:c8:
02:26:05:5d:31:eb:b3:f3:28:b1:6c:1e:df:04:bd:31:f4:36:
c9:b2:62:09:9d:0a:9a:62:f9:bc:d0:be:2c:3f:1e:26:9c:61:
ec:84:11:9e:76:8d:31:e6:bf:06:19:1a:70:11:ec:44:6b:5c:
0b:71:fb:7d:ad:bb:4e:72:e0:2b:12:94:64:1b:f6:dc:e1:9e:
2b:41:6a:72:95:e7:a1:da:a6:3e:f9:85:f0:b5:dc:b3:96:f8:
db:a2:48:40:e1:11:55:7b:cf:04:98:a2:0d:f9:85:9d:c8:fc:
d4:4e:ff:4d:bd:0a:88:ef:f9:3f:93:5a:42:80:25:28:f3:69:
c8:4c:3b:08:af:60:e9:00:e4:da:73:22:aa:16:66:df:b0:0c:
bb:a7:89:be:5f:2d:6c:08:31:de:11:14:7b:9b:78:4d:38:ac:
41:4d:41:c5:97:18:c2:ad:fc:ff:6d:b9:05:be:03:f8:fd:fe:
70:d0:b9:c4:8c:b4:d6:97:d1:ba:3f:d2:e3:bd:a5:db:75:07:
7a:85:e7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:32 2025 by rpki-client