Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/80dfb2-948b-4214-82ed-ac7012cf1dcd/1/jxKcqTn_oehg3lHNAHjNVIKDhqo.roa
File: jxKcqTn_oehg3lHNAHjNVIKDhqo.roa (raw, json)
Hash identifier: h2+TDzc5b96dCiP9KExaL9sAbbGpyTb6nPd68zbX+Og=
Subject key identifier: 8F:12:9C:A9:39:FF:A1:E8:60:DE:51:CD:00:78:CD:54:82:83:86:AA
Certificate issuer: /CN=f26862cbc58b4da44f7195255464a8d9545fed04
Certificate serial: 0185724C7C2661992461D4620E639510FE78
Authority key identifier: F2:68:62:CB:C5:8B:4D:A4:4F:71:95:25:54:64:A8:D9:54:5F:ED:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mhiy8WLTaRPcZUlVGSo2VRf7QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/80dfb2-948b-4214-82ed-ac7012cf1dcd/1/jxKcqTn_oehg3lHNAHjNVIKDhqo.roa
Signing time: Mon 02 Jan 2023 11:44:53 +0000
ROA not before: Mon 02 Jan 2023 11:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207046
IP address blocks: 178.212.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:7c:26:61:99:24:61:d4:62:0e:63:95:10:fe:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26862cbc58b4da44f7195255464a8d9545fed04
Validity
Not Before: Jan 2 11:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f129ca939ffa1e860de51cd0078cd54828386aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:be:d6:a6:e0:c3:71:7a:25:93:00:3a:ae:93:
bd:02:41:e4:56:9b:5a:c7:17:9a:a4:46:22:5b:41:
9d:6d:fa:3d:55:32:66:1b:28:55:90:a7:60:61:66:
7c:16:7e:33:9e:a8:90:f7:34:9b:4f:66:43:92:a8:
6f:77:21:13:9a:56:17:87:61:9c:a1:a3:b0:20:2e:
84:97:82:16:fc:25:f2:00:7c:de:72:8e:cf:56:94:
cd:93:4f:22:06:ab:63:6e:82:c4:25:ca:35:18:6d:
57:1c:2b:2c:2d:ed:04:91:13:7a:54:a8:8a:79:50:
bb:58:92:b5:ef:a6:aa:b6:ba:aa:76:2d:e0:06:7a:
75:9b:fa:d4:b2:48:02:70:06:e5:54:be:ea:ab:3e:
eb:80:55:99:6d:4b:92:fe:8b:44:83:be:97:c8:a0:
27:c2:77:08:ba:ae:d6:1b:fb:84:11:8e:0d:99:5d:
f7:05:b2:46:df:4a:2f:14:96:35:ad:74:f7:19:1e:
40:37:15:74:28:cc:e7:08:eb:02:26:5a:8c:b8:5b:
64:f5:e8:2f:ed:78:d8:50:08:c2:1e:14:67:13:1d:
53:e0:18:9d:57:64:00:66:d7:35:c2:8b:9f:ad:1d:
26:82:d9:60:0b:ae:6c:9a:ff:dc:ce:c9:e3:93:57:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:12:9C:A9:39:FF:A1:E8:60:DE:51:CD:00:78:CD:54:82:83:86:AA
X509v3 Authority Key Identifier:
keyid:F2:68:62:CB:C5:8B:4D:A4:4F:71:95:25:54:64:A8:D9:54:5F:ED:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mhiy8WLTaRPcZUlVGSo2VRf7QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/80dfb2-948b-4214-82ed-ac7012cf1dcd/1/jxKcqTn_oehg3lHNAHjNVIKDhqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/80dfb2-948b-4214-82ed-ac7012cf1dcd/1/8mhiy8WLTaRPcZUlVGSo2VRf7QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.225.0/24
Signature Algorithm: sha256WithRSAEncryption
21:41:b8:a5:cf:0d:23:cb:61:d1:6c:14:36:18:1a:77:bf:f2:
3c:79:db:cf:e1:03:8e:93:dd:60:c4:ff:0a:03:ba:9a:33:99:
1f:59:c3:62:50:70:be:15:21:4d:b8:c0:7d:34:af:ae:1b:49:
d0:d7:80:e3:66:a5:84:c4:99:a3:fb:dc:ee:4c:2d:c7:09:83:
12:b8:ee:ad:d5:66:28:87:2b:7a:0c:e9:53:20:33:49:76:03:
73:b3:6c:2c:4c:3f:f5:b4:2e:97:61:95:ff:70:3d:2b:de:88:
18:7f:69:ac:54:f7:5d:40:0b:9a:c1:93:b1:a3:8f:0c:f9:ce:
17:27:26:e7:58:9f:15:06:4a:91:6a:b8:3f:d2:3a:23:58:4b:
f7:a6:4e:8d:8f:d4:41:05:de:51:39:22:91:8b:cb:04:b9:54:
60:82:c8:38:22:20:55:59:42:63:e1:e9:38:f5:43:23:f9:fb:
ae:d6:fd:e4:84:96:c3:1e:4b:05:0a:55:16:44:96:fe:dc:76:
ac:50:a3:0a:34:b9:17:95:cd:67:1d:2a:19:30:e7:65:73:74:
ab:2b:2b:29:c4:fa:6d:1c:c0:67:3c:1c:2d:ca:d5:dc:2b:1c:
81:1d:cc:bd:e9:21:60:49:f0:69:41:a9:88:3c:2a:a1:3a:83:
5f:99:65:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 11:34:50 2023 by rpki-client on console-fra.rpki-client.org