Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/n_E7RS37--ckfD3YCMAssdEk0Qw.roa
File: n_E7RS37--ckfD3YCMAssdEk0Qw.roa (raw, json)
Hash identifier: 0cNH9GiBdBpbjzVcGpOW/DV69fxSMLZWFmLXWw38mh0=
Subject key identifier: 9F:F1:3B:45:2D:FB:FB:E7:24:7C:3D:D8:08:C0:2C:B1:D1:24:D1:0C
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F03603207F1FF755BE9D22785F01C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/n_E7RS37--ckfD3YCMAssdEk0Qw.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197647
IP address blocks: 77.78.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:03:60:32:07:f1:ff:75:5b:e9:d2:27:85:f0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ff13b452dfbfbe7247c3dd808c02cb1d124d10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:56:b2:c2:25:91:72:f8:b4:9e:4f:91:48:
37:09:02:cd:57:37:d3:d3:d6:a1:ee:53:fa:18:2f:
05:96:67:90:78:1d:a0:bd:5b:be:44:cb:85:02:86:
22:af:40:d6:1f:ce:3e:24:5a:3e:2c:1c:2b:d8:bb:
cf:cf:52:6a:ab:ca:81:2d:ac:92:cb:2e:19:ba:08:
ab:de:22:59:ca:bb:33:4d:29:8c:74:e3:43:7b:d6:
62:67:38:ff:98:9e:7a:6f:98:7a:73:b4:04:f1:91:
01:29:02:2e:02:d0:2b:ce:91:7a:f7:d2:32:cd:9a:
e9:a9:85:52:39:40:f4:40:ac:ce:c2:54:14:4f:26:
e9:27:de:2d:ee:9c:88:0b:01:a7:21:5c:39:c8:25:
5e:15:96:98:d1:c8:de:1d:e3:b7:cd:2d:ed:47:2c:
68:25:bb:81:22:b4:be:10:f8:0a:4e:b6:27:13:f0:
7d:a2:fa:fd:ca:85:a5:3c:c1:15:6f:2f:03:68:b4:
c3:4c:dc:0a:19:0b:36:9b:7d:93:2e:91:db:23:9d:
94:84:5f:31:6e:8d:f1:d1:cf:52:fb:c1:67:61:93:
eb:cf:6e:23:a2:c2:d2:d2:0e:18:db:a4:2e:52:d1:
67:6c:5b:fa:5e:d3:92:90:f7:cf:7c:37:4b:c2:a0:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F1:3B:45:2D:FB:FB:E7:24:7C:3D:D8:08:C0:2C:B1:D1:24:D1:0C
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/n_E7RS37--ckfD3YCMAssdEk0Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.159.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:98:e7:b8:02:00:26:e7:10:e6:48:90:5d:d1:81:94:1f:12:
fe:fc:b5:6b:3c:ae:0f:91:70:c6:10:b9:8b:4c:f4:0d:69:f2:
e3:96:35:2d:bf:db:f2:cd:15:9d:3f:5e:95:63:30:ea:71:8c:
2a:c2:75:92:31:62:37:4f:84:a6:c3:c4:93:e1:f4:82:5e:82:
1d:ab:97:c8:16:5f:80:ad:8c:97:bc:dd:41:74:5a:d9:26:1c:
89:42:d5:ad:f7:4d:ad:52:51:ba:d9:48:47:de:4a:aa:9a:02:
c1:92:b3:8f:c2:37:d0:27:49:10:41:d9:38:18:b7:9c:50:13:
5f:ce:2f:75:61:65:7a:85:fd:79:47:d6:ab:f2:cf:90:7b:d6:
d4:7c:44:9c:22:87:b6:f5:e2:37:df:b0:e5:00:92:2c:8d:a7:
aa:84:17:6a:d6:a2:ff:fd:c3:01:0c:a7:ae:25:20:19:42:89:
a0:d2:93:e8:77:74:dc:8c:b0:cb:9e:d1:a9:0e:01:ab:9a:49:
65:19:42:25:de:09:b9:ec:63:d3:d0:38:ca:fd:f3:34:3a:14:
4e:36:01:72:93:d2:18:fd:ae:58:f3:17:20:7c:1a:c6:dc:ef:
18:c5:70:0e:7f:ab:2a:e3:18:b0:bd:a2:bd:61:f6:35:00:e1:
23:c4:64:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:24 2025 by rpki-client