Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EcRlb239LJBoOSp746dYSdx2a1Q.roa
File: EcRlb239LJBoOSp746dYSdx2a1Q.roa (raw, json)
Hash identifier: Ll9hIDA5+7OHhdBwJEXE6PWZF+4IzXNxpiiXr1CaS2s=
Subject key identifier: 11:C4:65:6F:6D:FD:2C:90:68:39:2A:7B:E3:A7:58:49:DC:76:6B:54
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01951927A259F75FB2AFD6720E367A50B70B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EcRlb239LJBoOSp746dYSdx2a1Q.roa
Signing time: Tue 18 Feb 2025 13:03:02 +0000
ROA not before: Tue 18 Feb 2025 13:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202804
IP address blocks: 185.20.78.0/24 maxlen: 24
185.20.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:27:a2:59:f7:5f:b2:af:d6:72:0e:36:7a:50:b7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Feb 18 13:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11c4656f6dfd2c9068392a7be3a75849dc766b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:ba:fb:8a:23:0e:04:fd:94:22:f6:dc:08:
05:a1:e6:f6:39:86:32:7a:ab:34:38:bf:d8:17:77:
0f:f0:47:7b:9a:57:c3:c7:26:cd:5f:18:09:17:62:
83:06:d1:4d:65:06:fb:ec:18:bc:5e:ea:ea:34:fd:
58:d9:11:1b:c8:a4:75:a5:88:c4:8f:3d:25:48:0f:
7d:49:75:73:15:ea:0b:b0:17:7d:05:3a:3e:09:78:
96:6e:57:a5:1b:ef:f5:5d:65:76:29:ff:46:94:ee:
4f:02:3b:df:f5:40:54:56:59:d2:00:ef:34:20:c3:
1b:39:86:48:dd:3f:1c:99:2b:de:27:41:37:38:68:
3e:05:07:f3:03:f7:65:33:2b:c2:3c:8f:aa:f5:fb:
ad:55:92:eb:79:ea:c7:b7:58:15:52:19:f1:7d:b9:
f9:c5:e3:18:80:49:68:72:c4:f2:94:e7:64:bf:3d:
f0:73:91:45:0c:40:62:a3:cc:37:be:e5:a7:80:c4:
ef:b0:f0:8c:a2:5e:c9:e1:65:61:11:0c:78:0a:85:
ce:dc:fb:30:a7:bc:a0:9d:6a:24:7f:e2:32:77:9d:
fe:0c:9e:0f:c8:02:ba:3d:72:00:13:c5:e5:e1:45:
40:0d:ed:30:73:1a:46:da:e4:6a:56:f9:c7:b5:41:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C4:65:6F:6D:FD:2C:90:68:39:2A:7B:E3:A7:58:49:DC:76:6B:54
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EcRlb239LJBoOSp746dYSdx2a1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.78.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:2a:f3:3b:ec:df:91:74:79:bb:90:eb:87:28:60:40:30:78:
93:f8:81:33:e3:fb:8e:15:95:45:09:bf:22:01:27:4b:32:eb:
98:72:ba:88:62:f5:41:bd:b3:3f:d2:78:dd:f0:20:df:16:53:
ab:48:10:96:e4:46:57:15:70:75:55:6d:c7:b7:b4:3f:78:cd:
0c:e6:7f:ba:d1:34:64:70:e5:40:31:08:56:4e:c6:3f:b0:99:
40:49:da:8c:d9:fe:d9:54:38:99:ac:03:29:50:14:1d:ba:58:
e8:e5:27:e1:85:af:f0:e2:05:d6:e5:39:04:18:18:fe:74:c4:
df:27:81:ac:0a:85:db:45:39:c9:a7:41:7d:f4:81:60:22:11:
24:11:09:98:60:cf:77:f7:d0:27:7c:5b:86:9c:85:8f:8a:e6:
3c:47:9e:47:a6:6d:27:3f:0b:8c:5d:5e:2d:32:eb:9f:84:8d:
22:91:29:b5:55:e2:a5:19:c4:e1:61:9a:7d:a5:d3:3e:ed:4a:
93:bb:7d:41:0a:c6:a8:32:81:ed:c3:b7:72:80:3a:76:24:df:
ce:1a:0f:c8:d6:09:65:e9:5b:ef:3b:47:54:a8:27:46:18:92:
af:31:41:be:d5:c0:9a:00:b6:da:4f:8b:68:38:a8:af:de:40:
fe:a4:e3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:23:36 2025 by rpki-client