Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/LgMAwFHt8ggsK1FnlL_JjhZsLaQ.roa
File: LgMAwFHt8ggsK1FnlL_JjhZsLaQ.roa (raw, json)
Hash identifier: yn7mdMvuYXDgqEYqedAY3gMvLNbKFVSpxkN6tnSZODQ=
Subject key identifier: 2E:03:00:C0:51:ED:F2:08:2C:2B:51:67:94:BF:C9:8E:16:6C:2D:A4
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 019427482B7FCE2A7A67E59663586C02C0DD
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/LgMAwFHt8ggsK1FnlL_JjhZsLaQ.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62323
IP address blocks: 77.78.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2b:7f:ce:2a:7a:67:e5:96:63:58:6c:02:c0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e0300c051edf2082c2b516794bfc98e166c2da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:ca:e4:6c:c1:52:09:f4:6d:dd:b8:b1:7c:
4a:1d:7a:94:9e:c4:94:e9:b3:68:c8:c8:43:ad:6b:
da:b9:48:c1:5d:5a:ad:a9:65:28:e0:00:02:db:bc:
6e:cc:03:96:ad:ff:97:21:e8:23:7f:42:33:17:d9:
49:85:1d:50:e5:3d:35:19:ac:3c:89:a7:a2:a1:26:
30:b1:10:e7:8b:b8:24:72:09:aa:99:9a:a6:53:39:
de:2d:58:1a:ce:33:a2:58:a1:e2:5a:2b:34:8f:e3:
e6:48:17:3f:60:69:be:f7:01:e8:8d:5d:24:ea:b8:
83:62:84:30:2d:36:83:a8:0a:09:b7:3b:dc:f0:29:
82:25:9e:b9:f1:17:59:31:fc:a8:f6:a4:36:35:7b:
43:3c:37:90:11:f8:22:69:b1:f5:09:d0:9f:fd:5b:
79:98:0b:09:f5:0a:c1:7c:77:09:a6:44:97:4b:fb:
18:57:9e:1d:1e:5f:33:df:a7:85:1c:b0:b9:a3:37:
02:47:31:ef:f2:4b:f0:ca:4f:48:ba:11:fd:b8:f4:
0d:c2:e0:f4:ae:21:a7:a4:33:3a:de:03:a0:23:f5:
9c:c1:9c:88:b5:d1:0b:95:8a:3c:07:67:d8:7a:ca:
3f:bf:f6:1c:c5:c7:66:41:c4:16:ac:a8:2b:ed:95:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:03:00:C0:51:ED:F2:08:2C:2B:51:67:94:BF:C9:8E:16:6C:2D:A4
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/LgMAwFHt8ggsK1FnlL_JjhZsLaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.148.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:52:d3:e6:2f:83:34:e9:ff:64:c2:b6:12:f3:c1:37:e7:05:
43:5a:d1:1c:1f:78:5e:64:20:10:f9:74:e0:d9:4e:9f:6c:c2:
24:50:6a:05:69:10:9c:5c:53:2a:83:14:a7:6c:32:a9:3e:2e:
e4:21:8a:bf:ef:48:ac:cc:9a:ce:ce:84:cc:0e:b8:d9:c6:94:
d7:3b:98:70:a2:70:e7:dd:d6:27:09:43:73:87:62:30:2f:84:
14:9f:22:36:50:fd:64:1e:b4:4c:9b:19:6e:03:75:46:b3:41:
13:df:1b:32:ba:d9:d7:50:1d:8f:f3:0b:92:5c:04:41:8b:88:
b5:36:62:b9:9b:20:97:5c:91:f3:98:95:82:ad:c2:e1:74:88:
e9:e4:6d:29:ea:d1:9f:2e:02:5d:80:4f:59:7f:ba:f0:25:dc:
2e:26:1d:d0:32:d6:f8:63:8d:49:4a:60:bb:0a:71:cf:0a:3f:
7b:98:ae:9e:af:e5:ff:55:92:14:a6:73:c6:60:36:bb:0e:21:
92:b1:ac:76:69:dc:f6:fa:a8:20:65:97:eb:3a:1c:a8:9c:cc:
f5:7c:fa:c7:4d:c4:9f:74:0b:87:0f:60:e8:65:6e:ab:4c:02:
3c:42:f3:03:c1:98:b8:31:2c:1f:3a:4f:dd:c6:f7:7f:99:ad:
72:2f:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:44 2025 by rpki-client