Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/JI-Q4fS6JSjTTpLJDmu4zLpnbHU.roa
File: JI-Q4fS6JSjTTpLJDmu4zLpnbHU.roa (raw, json)
Hash identifier: HquDIuGTqMda+CyGsmbfFlwWSTYQvd+8ME7rER6aGts=
Subject key identifier: 24:8F:90:E1:F4:BA:25:28:D3:4E:92:C9:0E:6B:B8:CC:BA:67:6C:75
Certificate issuer: /CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Certificate serial: 018CC6B84B5157259CF04690477D6CD9EE89
Authority key identifier: BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/JI-Q4fS6JSjTTpLJDmu4zLpnbHU.roa
Signing time: Mon 01 Jan 2024 20:30:15 +0000
ROA not before: Mon 01 Jan 2024 20:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3561
IP address blocks: 178.212.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:4b:51:57:25:9c:f0:46:90:47:7d:6c:d9:ee:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Validity
Not Before: Jan 1 20:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=248f90e1f4ba2528d34e92c90e6bb8ccba676c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:9d:40:91:65:e1:99:8e:7e:5b:09:dd:82:
0b:4c:dc:55:de:36:47:25:9d:4e:be:93:07:88:70:
0a:e2:ed:58:fb:fe:39:84:86:50:8f:e8:af:c6:55:
b8:be:4b:40:83:79:6e:ac:7a:8e:1e:af:b8:10:97:
a8:82:dc:85:41:11:e0:f6:e1:66:99:51:01:fa:8c:
51:2e:46:e9:f5:b1:8b:4c:24:7a:b3:a0:d1:e8:f9:
d6:16:8b:ad:8a:f7:ef:ee:b2:d3:c7:43:12:c3:83:
02:c1:91:73:76:54:5e:ee:51:7d:48:ce:98:75:ae:
69:87:48:8c:70:d8:b9:60:1c:82:3b:6f:1c:bd:31:
3f:38:89:b6:6f:4f:ab:d0:f5:e4:58:e2:7f:4d:24:
44:33:b9:a0:ce:c6:67:d5:25:09:0a:44:37:36:04:
2b:04:9b:d8:9a:7d:0d:5e:27:db:ad:45:77:a0:0b:
38:59:46:f4:f8:9d:f2:03:27:cd:96:f1:12:2c:ae:
67:f6:8a:6f:ec:98:05:73:07:e1:33:df:e9:e4:d6:
ee:33:37:f0:25:46:16:ae:e7:be:1b:4a:9a:96:64:
70:20:47:fb:87:fe:8d:29:14:15:27:b8:7e:20:80:
77:7a:d8:2f:cc:32:22:a4:d9:d3:7f:09:f5:86:8b:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8F:90:E1:F4:BA:25:28:D3:4E:92:C9:0E:6B:B8:CC:BA:67:6C:75
X509v3 Authority Key Identifier:
keyid:BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/JI-Q4fS6JSjTTpLJDmu4zLpnbHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/vO72Si5uEcTdatBblu_2RN20V68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.77.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b6:56:49:6b:8a:ca:03:2f:c5:60:6b:3b:64:e1:e2:28:4f:
1a:03:91:35:a2:07:77:34:3e:61:4c:c3:04:40:e2:3e:36:05:
51:cb:da:9c:38:c8:88:6b:bb:cb:2c:0b:a2:8e:66:2c:f4:46:
6c:a8:90:28:1d:86:84:f3:cb:b4:e7:a5:7f:86:a5:1f:a3:7e:
9e:1d:45:96:6a:a2:a0:85:8a:df:f5:9a:7b:ca:b1:66:94:b7:
60:69:01:9d:f8:f4:ef:e1:5e:14:a6:4a:cd:62:9b:c6:69:b6:
54:97:30:0e:97:d3:59:aa:d7:72:79:2c:db:92:ff:0e:65:1f:
56:56:83:f2:58:4f:26:b3:8f:35:cc:71:55:86:b7:73:02:99:
da:c5:a4:48:90:02:68:5d:88:d4:4a:97:38:11:4b:de:1d:ed:
3e:14:3e:db:10:95:89:c7:e5:31:98:3b:91:ed:b0:36:31:e5:
ff:b2:03:5d:ed:55:35:8c:b0:3c:a0:2e:8f:f8:18:26:8e:e7:
eb:2c:50:32:ce:ca:b1:3b:11:d6:b9:3f:52:b9:3f:37:5a:73:
44:32:71:dd:3d:50:9d:24:04:7a:b2:2c:ba:e5:83:16:48:36:
35:91:b6:19:97:40:cd:75:75:05:44:34:96:c0:b9:67:2f:2c:
ee:cc:79:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:09 2025 by rpki-client