Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/d_gjQXxu4GiS-VC4hq7FrMI7sWU.roa
File: d_gjQXxu4GiS-VC4hq7FrMI7sWU.roa (raw, json)
Hash identifier: B4UhF4Ka+wM28+jwuP5LCAVWbVr0tX+yEFFJ8/uUckc=
Subject key identifier: 77:F8:23:41:7C:6E:E0:68:92:F9:50:B8:86:AE:C5:AC:C2:3B:B1:65
Certificate issuer: /CN=b3bbc59e67f70508ff1e81a6b535a6ad5261ec89
Certificate serial: 01856BE5A839E87C2188C9E04BD3D2802E6D
Authority key identifier: B3:BB:C5:9E:67:F7:05:08:FF:1E:81:A6:B5:35:A6:AD:52:61:EC:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/d_gjQXxu4GiS-VC4hq7FrMI7sWU.roa
Signing time: Sun 01 Jan 2023 05:54:50 +0000
ROA not before: Sun 01 Jan 2023 05:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 178.212.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:a8:39:e8:7c:21:88:c9:e0:4b:d3:d2:80:2e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3bbc59e67f70508ff1e81a6b535a6ad5261ec89
Validity
Not Before: Jan 1 05:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77f823417c6ee06892f950b886aec5acc23bb165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:f8:ec:bb:ac:60:99:36:0b:c6:2d:78:38:
da:f0:0a:da:43:40:24:ba:c4:44:c3:8b:a3:f8:64:
db:bb:9e:0c:34:3f:60:0d:01:45:e5:9b:15:21:64:
ab:92:ab:f1:bf:fd:29:45:3b:b2:1f:1e:ca:aa:57:
f1:44:d8:b2:12:ff:72:37:9d:77:5f:06:19:9c:2b:
9c:7f:dc:ed:bf:fb:8c:08:6d:4d:f7:2e:cb:b5:f2:
fa:a6:9d:02:ed:29:31:3e:54:da:de:95:d7:b0:20:
b2:97:57:9b:97:2f:cd:21:21:d1:05:8d:34:eb:e3:
14:e2:8a:b9:95:01:a2:76:23:59:e8:5b:9d:ac:47:
76:a0:0f:cc:bf:db:e0:b8:c4:aa:95:6a:ab:2a:af:
8e:e4:10:8c:f6:50:ab:9e:29:9c:cc:78:2a:6c:db:
65:04:01:bc:63:59:05:0b:8c:a1:9f:7d:7e:4e:6c:
5d:5d:85:b3:bb:80:85:cf:60:1b:b4:7e:13:04:0e:
a7:d9:93:b1:87:e1:81:85:8a:af:36:b2:24:a9:9d:
4e:d7:e3:56:47:49:30:88:e1:de:ab:4e:68:ed:12:
6b:23:4e:63:8b:e7:dc:de:19:d2:bc:cf:45:48:c1:
c8:82:b9:94:aa:ae:c5:a3:27:ea:89:7c:88:2b:54:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F8:23:41:7C:6E:E0:68:92:F9:50:B8:86:AE:C5:AC:C2:3B:B1:65
X509v3 Authority Key Identifier:
keyid:B3:BB:C5:9E:67:F7:05:08:FF:1E:81:A6:B5:35:A6:AD:52:61:EC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/d_gjQXxu4GiS-VC4hq7FrMI7sWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.140.0/24
Signature Algorithm: sha256WithRSAEncryption
04:81:7c:e6:06:a3:ce:31:11:40:54:14:c9:2f:b2:29:bd:86:
67:f1:db:3a:c0:73:57:e2:8c:03:22:79:a8:e4:40:d2:b0:34:
4c:49:4a:e9:0c:6d:cf:c2:08:52:f1:ab:43:c4:f8:9b:2e:5a:
5a:3f:5f:ca:9d:ae:a3:ed:1a:ec:3b:14:17:00:4d:b2:e5:46:
f8:93:bd:aa:3b:d0:8e:76:10:7c:cc:32:8a:aa:e8:c0:ed:a8:
e5:14:cc:e7:94:97:6d:67:42:90:1f:44:81:19:4b:a0:86:d4:
a7:7b:be:d6:c8:9b:6b:48:bd:43:23:dc:e8:19:25:e3:14:00:
36:fb:85:9b:a5:0f:eb:7a:44:c1:a5:f1:ad:60:af:5a:f9:5e:
35:fc:c5:cd:9e:44:9f:d2:c9:dc:2d:7c:42:24:b0:fb:5f:7b:
10:52:22:67:86:66:68:e3:4b:21:46:73:c6:c9:5d:e1:b5:b1:
12:45:e5:29:96:13:fe:47:f1:1f:b6:59:8f:4d:72:14:ee:9d:
82:8d:a6:34:2e:eb:9c:8d:41:a6:f8:2d:87:82:61:73:f4:60:
c6:69:c5:13:dc:d0:e2:da:86:ff:af:12:df:36:15:b7:35:f1:
5f:8b:cd:b8:48:d8:c2:6d:9e:3b:52:4c:23:02:e1:2c:e4:d7:
fa:1f:b5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:33:10 2025 by rpki-client