Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/DfxRMTZeU_vcIlKHRbQeq0534dU.roa
File: DfxRMTZeU_vcIlKHRbQeq0534dU.roa (raw, json)
Hash identifier: VK8lY8GyecRktPxTHoPlzgDFUpbnJBByPMQzZ3FihZg=
Subject key identifier: 0D:FC:51:31:36:5E:53:FB:DC:22:52:87:45:B4:1E:AB:4E:77:E1:D5
Certificate issuer: /CN=7ca38a5f646535fe005f7d13de4a2a50f4e6e482
Certificate serial: 018CC26D762B2EEBF14AB2C1885930508CD7
Authority key identifier: 7C:A3:8A:5F:64:65:35:FE:00:5F:7D:13:DE:4A:2A:50:F4:E6:E4:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKOKX2RlNf4AX30T3koqUPTm5II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/DfxRMTZeU_vcIlKHRbQeq0534dU.roa
Signing time: Mon 01 Jan 2024 00:30:02 +0000
ROA not before: Mon 01 Jan 2024 00:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50994
IP address blocks: 178.218.224.0/20 maxlen: 20
87.239.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:76:2b:2e:eb:f1:4a:b2:c1:88:59:30:50:8c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca38a5f646535fe005f7d13de4a2a50f4e6e482
Validity
Not Before: Jan 1 00:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dfc5131365e53fbdc22528745b41eab4e77e1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:97:cd:84:b2:0c:5c:c6:54:85:5e:db:fd:
6e:3c:72:40:5b:5f:c0:25:21:4b:f0:b8:9f:f8:77:
c9:ff:a3:a3:fa:f5:9b:41:d8:f0:28:7b:07:48:e5:
a1:e2:28:89:bf:02:48:dc:0d:a2:98:e4:04:4c:a0:
ea:21:2f:f9:a5:52:66:7c:44:8e:06:77:c9:ad:df:
45:5d:24:c3:e7:79:c9:41:40:18:16:85:15:3d:5a:
f5:22:79:57:17:ff:cc:8a:09:98:59:b9:12:c5:51:
f3:86:fd:55:8b:0a:24:7a:33:bb:5d:8f:66:56:01:
d1:36:3a:34:31:b6:cb:77:ae:f1:12:0b:72:ad:8c:
5a:81:c3:6e:42:15:55:77:bb:a1:ba:be:e1:c4:31:
3f:ef:8e:e4:d9:ca:2d:23:df:ab:54:c2:36:41:1f:
d8:70:fb:a3:90:e1:9e:e8:7b:c3:9b:61:d2:35:77:
4e:71:22:f6:bd:e9:25:02:7c:73:d2:c4:d0:2f:2e:
a6:14:3d:e7:08:1a:ac:09:cb:03:ad:39:ec:9e:cc:
86:a1:33:5e:d4:7e:a6:af:4e:9f:45:fb:c2:94:6e:
92:b0:84:ce:db:57:da:67:d8:bc:c3:9e:8c:69:e2:
83:a0:d3:a7:89:fc:74:5e:6b:58:b9:bb:bc:fb:86:
d2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FC:51:31:36:5E:53:FB:DC:22:52:87:45:B4:1E:AB:4E:77:E1:D5
X509v3 Authority Key Identifier:
keyid:7C:A3:8A:5F:64:65:35:FE:00:5F:7D:13:DE:4A:2A:50:F4:E6:E4:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKOKX2RlNf4AX30T3koqUPTm5II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/DfxRMTZeU_vcIlKHRbQeq0534dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/eda814-3e4b-405a-8a5d-c38892271e8b/1/fKOKX2RlNf4AX30T3koqUPTm5II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.168.0/21
178.218.224.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:ee:ab:cd:9e:d6:c4:1a:7e:6a:5b:38:35:9c:74:bf:74:8b:
c5:0a:38:f1:4c:b4:75:dd:45:c5:86:9e:6e:8a:a5:59:c2:81:
02:7e:c6:c7:4b:09:06:1f:fa:7d:68:34:3c:42:4f:57:1e:8a:
6b:a8:fb:5e:16:39:e1:bc:66:9c:38:95:0e:00:ea:b6:8f:76:
bf:c0:9d:5b:9e:21:7b:b4:68:90:ed:f2:85:82:24:82:5d:e5:
d6:09:55:47:78:89:02:37:7c:f7:b6:c9:cc:19:39:ce:0e:7f:
8a:22:e9:63:64:78:3f:5c:48:45:c1:6a:dc:70:85:c0:5e:6f:
4d:5d:c3:bc:2f:f1:ee:6d:58:e6:b0:f8:39:9a:6d:cb:f2:4c:
d9:b9:1f:4b:4e:15:99:40:17:b7:73:f7:6e:7a:97:f3:71:7b:
3c:b8:37:48:47:9e:93:c4:e2:b7:4e:95:41:cb:ae:ef:f0:71:
64:94:9b:2c:04:7e:4c:da:1a:a8:e3:a0:34:08:d5:60:eb:ac:
2c:0e:10:aa:fc:17:b4:2f:22:d8:aa:99:9f:63:e3:8d:a8:fe:
e3:b3:b9:9a:00:75:33:1d:cb:b2:f6:8b:bd:cb:c0:24:92:89:
be:c3:3c:22:b2:db:db:56:82:07:fa:ae:d7:77:0d:f9:fa:e8:
ce:2a:ed:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:20 2025 by rpki-client