Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/x4JOQUJHmtFkv-piq7qfRxKdSG4.roa
File: x4JOQUJHmtFkv-piq7qfRxKdSG4.roa (raw, json)
Hash identifier: yMZ61SSEaC3zJKB1XTd2rJ6B5kWbIDADleo5PoSlMgA=
Subject key identifier: C7:82:4E:41:42:47:9A:D1:64:BF:EA:62:AB:BA:9F:47:12:9D:48:6E
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 01856ED4C04C4368E77EA9F157CAA47BC40B
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/x4JOQUJHmtFkv-piq7qfRxKdSG4.roa
Signing time: Sun 01 Jan 2023 19:35:14 +0000
ROA not before: Sun 01 Jan 2023 19:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207795
IP address blocks: 185.177.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c0:4c:43:68:e7:7e:a9:f1:57:ca:a4:7b:c4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jan 1 19:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7824e4142479ad164bfea62abba9f47129d486e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:08:34:d6:f2:85:ac:5b:de:3f:3d:61:14:
a6:c0:04:39:f5:96:89:c1:c3:22:2f:74:e3:64:43:
5c:59:3c:c5:96:6a:e9:44:0e:7b:60:b9:00:9a:39:
d9:63:ee:63:ad:0c:27:01:2b:4e:2d:6e:54:17:d0:
df:ba:b2:38:b8:d7:d3:d9:62:f3:ad:2e:6b:5f:2d:
28:0a:24:30:d7:2b:8f:0b:bb:66:67:0a:bf:62:aa:
0c:ac:92:49:50:78:3d:ef:4d:5b:ec:b2:af:4e:fe:
44:d6:ea:04:c2:29:45:3a:e8:f1:5e:87:e7:e4:e3:
79:47:f8:ce:81:28:06:68:13:58:34:ee:da:08:b9:
7e:c5:11:db:32:85:de:79:06:78:1b:8f:32:b2:6d:
bf:04:94:6d:c1:04:89:51:f3:35:63:dc:f4:d0:67:
2b:08:39:83:28:fd:00:3d:bd:c1:9c:0f:12:e5:7d:
ef:6d:d2:e6:23:ca:21:e6:90:b6:8f:1a:34:41:87:
61:07:a8:9c:5d:0d:7f:29:38:63:c3:14:a7:60:ea:
dc:24:1e:1a:9f:ef:d2:0c:39:b1:1c:3c:b7:20:b7:
a8:f5:cb:43:d4:07:55:49:a1:47:d7:d6:75:de:89:
f8:d6:7b:10:24:85:8c:40:96:32:a4:f6:41:98:3b:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:82:4E:41:42:47:9A:D1:64:BF:EA:62:AB:BA:9F:47:12:9D:48:6E
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/x4JOQUJHmtFkv-piq7qfRxKdSG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.78.0/23
Signature Algorithm: sha256WithRSAEncryption
05:43:65:62:12:10:a3:ed:8e:aa:41:dc:9d:46:a9:f2:8d:fe:
37:a4:41:ab:07:10:30:5a:bf:1b:8f:e9:e5:2e:6c:02:3c:61:
50:e6:09:ef:91:be:16:87:b5:4f:5b:ba:49:1c:8d:b4:13:d6:
66:e1:88:30:fb:17:ea:07:9f:33:e2:a1:96:e9:f8:64:d9:f5:
4c:dc:4d:ad:2e:c5:36:6b:e8:e7:dc:27:cf:09:90:dc:c0:78:
7a:c0:cb:c0:74:e6:49:ab:72:6d:a7:b6:ca:bb:4a:04:70:cb:
17:f9:8e:c4:37:a6:14:45:89:b2:88:a6:1e:52:a1:de:17:e0:
d9:1b:fc:1b:e3:92:f9:34:84:15:aa:3d:9b:c7:3c:5e:49:6d:
b7:05:10:f9:5a:4a:e2:22:58:9c:38:1d:ce:d2:2c:c4:62:c3:
27:08:70:c9:a4:c3:57:e9:71:bc:4e:35:98:79:94:d9:ca:6d:
09:50:02:29:75:01:c4:37:0d:af:65:18:b5:d9:c9:00:a4:dd:
9d:cf:99:e8:e3:4a:45:11:d4:3c:98:16:e3:12:90:53:ab:bf:
79:2f:12:9b:93:2a:cf:0c:2e:db:7e:a2:f9:43:08:be:05:8e:
9a:54:09:56:d1:8e:64:69:37:04:c0:34:2d:7a:52:a0:3d:23:
16:8c:af:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:36:50 2025 by rpki-client