Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/KKECh8K7hNffHVDT8ywINErgd1U.roa
File: KKECh8K7hNffHVDT8ywINErgd1U.roa (raw, json)
Hash identifier: jFVe6x1L0XuZf3m6Z9ZwhiY43bHKM8ZXgM5AwxJ+SJ4=
Subject key identifier: 28:A1:02:87:C2:BB:84:D7:DF:1D:50:D3:F3:2C:08:34:4A:E0:77:55
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0194258F60E6E3A3C92CE7FCF5CAF44C12F8
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/KKECh8K7hNffHVDT8ywINErgd1U.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59580
IP address blocks: 147.78.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:60:e6:e3:a3:c9:2c:e7:fc:f5:ca:f4:4c:12:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28a10287c2bb84d7df1d50d3f32c08344ae07755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:a6:2c:db:83:4d:5d:9d:db:f2:1c:f1:06:
76:41:40:6b:3c:af:f6:2e:a3:30:8b:94:aa:1c:87:
23:56:fe:d6:cf:68:28:3f:f8:64:4f:71:a8:47:9f:
e5:09:4a:b3:7b:99:60:2a:84:3f:36:d4:c1:4b:56:
57:87:f6:c5:1b:f6:be:69:b2:d8:8b:aa:f1:c1:69:
6b:5a:47:75:26:ff:30:72:4b:f6:7b:bd:43:79:13:
ae:cd:63:d2:eb:25:64:12:dd:54:14:e9:f7:d6:f9:
0b:73:f5:c0:0b:ae:be:43:27:93:d0:f5:f6:3c:60:
6a:62:68:cb:c0:3b:50:8a:9c:43:60:f8:be:db:54:
bb:90:dc:08:a9:7b:a9:80:b6:6d:d9:1d:21:d8:8f:
af:d3:f5:f1:ed:69:76:2f:f8:f9:1d:9f:fe:bc:81:
71:e8:70:09:d0:51:81:cd:34:a0:f8:87:92:06:fa:
95:93:f8:0b:af:4e:c6:55:7f:e9:2e:a2:f2:90:ee:
25:32:75:df:98:75:5c:84:11:bb:8b:0f:c7:78:19:
c1:bd:0a:60:82:a2:b8:96:08:a0:fe:6f:2a:e3:3a:
55:a7:4d:34:88:17:ed:83:1a:69:8e:2d:63:92:1a:
a1:47:99:c6:3a:c3:e7:26:46:7b:0a:d7:c9:2c:e9:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A1:02:87:C2:BB:84:D7:DF:1D:50:D3:F3:2C:08:34:4A:E0:77:55
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/KKECh8K7hNffHVDT8ywINErgd1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:61:d2:ca:3c:8b:95:ad:18:f9:f5:ac:5f:bd:8c:31:20:56:
0a:c9:03:3b:1a:e6:92:48:85:7c:9f:94:77:d7:e9:03:f7:6f:
e9:dc:ed:7c:3b:8a:e0:a2:06:13:d4:9c:99:b6:b9:17:90:b8:
e0:02:8d:1b:a7:da:85:05:60:7d:22:dc:d5:ef:3a:0e:a7:e9:
e5:fb:f3:86:3f:49:bc:a0:0c:3a:b1:83:c5:07:b0:d8:b4:d9:
89:7e:1d:22:c1:14:cf:40:c7:1f:35:f3:a0:11:1f:8a:14:0b:
dc:27:c9:64:9a:07:05:b0:75:5b:fe:ec:af:ee:a4:60:e0:73:
91:e9:97:7d:40:df:0a:f1:7b:54:a8:df:dd:52:f2:ee:ec:52:
91:b8:49:4a:8a:24:06:96:dc:56:88:bd:92:7d:a9:b2:02:03:
a6:d7:bc:69:a4:d8:be:95:fe:1c:7b:52:4a:18:5e:62:3b:c6:
25:1b:7d:e6:5a:03:4b:02:ca:a6:5f:14:51:e8:63:8e:e3:69:
c5:92:8c:f2:d1:f5:d5:e6:04:fb:eb:45:6b:17:8f:6a:aa:68:
39:7b:0b:5b:2e:f0:6f:35:db:73:45:15:8b:ae:42:cf:1d:7f:
a2:12:33:d0:e0:59:8f:8f:dc:04:96:fb:60:9f:44:68:57:11:
d0:ad:0f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:24:21 2025 by rpki-client