Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/jEj77J4BczAWa2NHE0G_a_az_FI.roa
File: jEj77J4BczAWa2NHE0G_a_az_FI.roa (raw, json)
Hash identifier: ezydQzVEr5Jp0UFZkN/5uZRGa25rMKPyy73M6Mjh3GU=
Subject key identifier: 8C:48:FB:EC:9E:01:73:30:16:6B:63:47:13:41:BF:6B:F6:B3:FC:52
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 018689BAA2D96700B78D54E75AA4EFA84070
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/jEj77J4BczAWa2NHE0G_a_az_FI.roa
Signing time: Sat 25 Feb 2023 17:59:15 +0000
ROA not before: Sat 25 Feb 2023 17:59:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6768
IP address blocks: 212.87.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:ba:a2:d9:67:00:b7:8d:54:e7:5a:a4:ef:a8:40:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Feb 25 17:59:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c48fbec9e017330166b63471341bf6bf6b3fc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:a6:c1:e7:c0:8a:43:70:c0:4b:74:37:27:
45:2e:9a:32:8c:9e:e4:09:4b:17:13:28:31:6f:62:
a7:7a:8c:33:46:29:dd:a7:7f:30:1d:25:ac:30:0d:
8f:7c:c7:80:39:f8:d6:1d:ae:1b:b5:85:ed:17:3b:
0b:18:5b:0f:6e:d1:1d:4c:41:a8:95:ae:9d:00:3e:
4f:56:4d:34:bb:72:55:c8:44:0c:99:f4:c7:6b:89:
82:d3:a8:df:d2:92:d6:02:9a:80:d6:79:16:8a:89:
54:60:ea:1b:d5:e6:06:3a:00:18:a3:26:37:42:68:
5f:62:4b:91:3e:6c:78:7f:7f:ef:97:06:71:d7:20:
73:c4:c4:6c:af:0f:61:c0:6f:db:f0:cc:f7:5a:87:
e3:09:a4:da:05:1a:41:72:8c:73:a5:3c:63:d3:94:
57:16:ff:6c:a8:e2:24:ef:d7:ff:16:0f:85:19:59:
38:fb:1c:8f:50:70:36:dc:e6:e2:86:2f:fb:c2:e7:
be:9a:49:35:2d:ac:e2:3b:9f:e7:73:06:ce:ab:97:
44:1f:2f:c1:b0:4b:7e:50:84:37:18:1f:1c:79:e3:
bd:2d:32:43:04:bd:ac:46:86:24:4d:3f:be:4d:a6:
f6:5f:f0:36:93:30:e7:21:d6:f0:3a:b7:12:3e:a7:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:48:FB:EC:9E:01:73:30:16:6B:63:47:13:41:BF:6B:F6:B3:FC:52
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/jEj77J4BczAWa2NHE0G_a_az_FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c0:87:43:17:93:70:9f:b0:69:07:6c:93:88:3d:74:8f:52:
70:48:ba:fe:6b:7d:88:f0:c7:0c:c8:6c:0d:c5:87:70:f7:0d:
c3:a8:76:0b:41:48:77:75:43:c8:42:e0:bd:fe:e7:ca:f1:4a:
20:95:f1:c6:0c:59:80:3f:f0:8c:dc:94:24:50:4d:74:21:0e:
24:70:80:88:5b:ec:ee:2f:ee:9d:02:ce:7a:04:7d:91:7a:03:
ca:e7:02:14:21:dd:38:cf:71:5f:0a:a6:81:f7:f9:ea:f7:4a:
5f:51:3e:43:5f:db:7f:2b:a5:91:4f:0a:c4:23:6a:b3:42:ec:
94:b9:ba:dc:93:09:f5:96:b3:42:a1:bc:f8:0d:bb:80:54:db:
6a:95:8f:3a:7b:9d:0b:21:31:2c:b2:b1:ed:97:b9:42:d4:0f:
45:f4:38:06:d9:69:33:45:b3:05:12:da:03:02:af:af:45:a4:
cc:76:cd:b1:7c:9a:69:34:1d:70:f4:17:8b:a6:ef:18:63:a3:
5a:b6:1d:82:0e:21:c5:c1:81:b3:f0:a0:8e:0d:a9:00:9a:42:
39:54:01:4d:01:5e:26:a7:ab:7b:4d:88:5b:ee:e5:cd:f7:0c:
14:5b:51:7f:f1:eb:81:c2:4a:f0:38:a6:16:05:9e:ad:1e:db:
5e:d2:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:21 2025 by rpki-client