Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/jAa7bSy2mGXDghaZrIZaGrHANto.roa
File: jAa7bSy2mGXDghaZrIZaGrHANto.roa (raw, json)
Hash identifier: wY6ZRh4TEYD3Q2ukxR7bqNDPWhbXo5/rZRzvPIjV1iY=
Subject key identifier: 8C:06:BB:6D:2C:B6:98:65:C3:82:16:99:AC:86:5A:1A:B1:C0:36:DA
Certificate issuer: /CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Certificate serial: 018CC6B84C325275BBB1913DE3B5140204D9
Authority key identifier: BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/jAa7bSy2mGXDghaZrIZaGrHANto.roa
Signing time: Mon 01 Jan 2024 20:30:16 +0000
ROA not before: Mon 01 Jan 2024 20:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202470
IP address blocks: 178.212.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:4c:32:52:75:bb:b1:91:3d:e3:b5:14:02:04:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Validity
Not Before: Jan 1 20:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c06bb6d2cb69865c3821699ac865a1ab1c036da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:18:ca:80:08:7c:58:d5:08:08:ba:47:b7:54:
53:bb:0d:1d:f3:17:5c:e4:30:28:20:5b:e0:44:51:
61:14:ad:c9:aa:5a:12:fe:d4:59:4e:db:7c:11:b8:
3c:51:97:26:19:49:6d:d0:09:cb:4c:d2:a1:9b:e7:
7b:9b:8f:fb:cc:a9:54:95:6b:f5:cb:01:32:93:76:
c0:20:ef:5a:4c:04:3b:8d:66:c2:7f:2d:39:6e:73:
6b:5e:76:e3:00:c3:0d:f5:45:9c:0d:b0:6c:05:48:
8e:59:05:5e:03:25:d6:9a:6a:fa:71:72:a0:24:64:
a0:4b:0c:9f:f2:90:4f:f6:bd:54:5b:24:d0:0b:f5:
f8:78:a7:8c:9b:bb:91:b0:8b:fe:91:43:01:09:c2:
a6:5d:cd:d0:d1:ef:c2:53:36:fa:a0:2c:65:f6:4b:
04:1e:1f:bd:23:a5:5a:f5:32:b2:e7:2f:0f:50:ce:
46:c4:07:8f:3a:15:a6:d1:3f:df:9c:1a:ad:12:43:
84:4b:92:c6:e7:b2:39:ac:b1:20:e2:5d:b8:3a:01:
3e:db:a8:07:16:03:9f:3b:04:51:e2:af:90:27:ff:
95:a4:3c:55:4f:c4:4b:69:54:cf:98:ed:90:09:8f:
7a:c8:da:90:70:e8:d9:cc:30:59:46:a4:d7:4b:72:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:06:BB:6D:2C:B6:98:65:C3:82:16:99:AC:86:5A:1A:B1:C0:36:DA
X509v3 Authority Key Identifier:
keyid:BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/jAa7bSy2mGXDghaZrIZaGrHANto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/vO72Si5uEcTdatBblu_2RN20V68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.77.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:92:8c:7f:50:97:99:88:97:af:3f:50:b4:67:d5:6b:22:21:
87:cd:a4:77:4c:8a:4b:cd:1d:d3:b9:ce:5c:20:a4:3f:39:f8:
04:54:a9:7c:3c:04:86:b6:3e:32:3e:e6:2f:14:29:60:9b:48:
c5:47:dc:67:70:bc:28:79:f8:2e:a5:bc:a3:f2:c4:94:7d:90:
97:82:e3:4c:dc:6b:24:d2:1f:52:6a:f3:95:cf:d2:d2:99:20:
af:f0:74:b6:fd:8f:ef:16:75:fb:8c:4a:dc:f1:6a:e8:00:ac:
7e:5e:92:e2:79:18:55:25:7a:9b:68:44:f0:4a:1c:b2:cc:1b:
9b:04:9a:b7:13:7b:7e:cd:26:4e:0a:d7:da:83:d0:6c:45:03:
b9:94:ff:ef:68:42:d8:be:56:63:48:79:83:4c:3c:1d:0d:1a:
b4:7f:88:4b:02:ec:22:28:17:36:fb:bb:50:5d:d2:50:c7:9a:
16:96:6a:ba:30:ff:5d:2e:9e:cd:a2:33:4f:a1:0d:d9:5f:03:
d9:c7:bd:4f:be:5e:1c:5d:aa:ff:bb:4f:3a:e3:f1:15:48:b5:
28:48:77:88:2a:26:45:ca:b6:47:e0:c9:b8:ac:ad:62:8d:07:
c7:15:57:8b:d0:6c:3f:6e:65:9f:54:18:2a:d9:72:14:15:5c:
aa:ff:0c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 12:38:59 2024 by rpki-client on console-ams.rpki-client.org