Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/rjuN-ZTOCGAomaycIkzHFBIupdk.roa
File: rjuN-ZTOCGAomaycIkzHFBIupdk.roa (raw, json)
Hash identifier: mpitT9m9PBhweeULsMgo7mL5tvByadSSpZctsThk9Hg=
Subject key identifier: AE:3B:8D:F9:94:CE:08:60:28:99:AC:9C:22:4C:C7:14:12:2E:A5:D9
Certificate issuer: /CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Certificate serial: 019423D6FC563A5DD517E12EDFC0600D3572
Authority key identifier: 69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/rjuN-ZTOCGAomaycIkzHFBIupdk.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49808
IP address blocks: 195.78.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fc:56:3a:5d:d5:17:e1:2e:df:c0:60:0d:35:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae3b8df994ce08602899ac9c224cc714122ea5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:00:3e:b5:36:68:11:e6:1b:4d:f8:c9:86:
36:72:e9:da:33:1d:ed:d0:70:ab:e7:74:83:4d:ce:
76:30:12:75:fc:ff:09:35:36:6b:fd:f7:b1:22:2a:
8f:b1:3e:8f:3e:1d:ea:35:4e:7b:d1:8e:67:9f:f8:
43:e6:31:e4:4e:27:e5:19:a4:f7:35:23:89:88:f1:
70:a3:8c:06:76:22:d8:f2:81:69:41:f7:c2:ef:d8:
e2:78:55:7e:8e:43:d5:3d:cc:b6:14:d1:42:6a:28:
d0:0a:c3:da:de:db:0a:c5:d7:43:7b:c0:9a:10:36:
b3:cc:e0:f1:21:28:69:1e:62:10:58:1d:51:7c:a8:
1c:f3:ba:4c:5d:d0:4f:e7:32:5f:f4:ad:cc:44:32:
a9:c3:b1:3d:39:6d:28:4b:fd:35:01:ae:63:c3:08:
08:56:97:60:dd:cf:bd:20:c1:44:8c:85:8c:e4:e1:
11:78:a5:00:e2:e5:94:08:b8:ca:09:31:1d:e1:40:
74:55:2e:37:e9:14:17:3b:92:ab:53:76:b7:2a:93:
9c:bf:e1:70:23:da:14:14:7e:50:0c:ae:5a:d8:ed:
95:2b:84:d9:11:74:c7:e3:b2:10:a0:30:c9:87:e8:
76:df:8c:cc:71:b4:0a:ea:03:f4:25:ce:13:f7:9f:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3B:8D:F9:94:CE:08:60:28:99:AC:9C:22:4C:C7:14:12:2E:A5:D9
X509v3 Authority Key Identifier:
keyid:69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/rjuN-ZTOCGAomaycIkzHFBIupdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.46.0/23
Signature Algorithm: sha256WithRSAEncryption
00:03:57:e2:f9:f5:ff:d7:3b:cb:17:c7:6e:f7:71:48:9d:ab:
3d:41:15:91:93:af:4b:c0:42:8a:a9:c1:fa:9a:1c:ac:51:a2:
4a:59:5b:4e:dc:a4:6a:11:5f:53:1e:94:ad:4e:ff:7d:a0:64:
89:69:98:e5:7e:f0:a2:c2:60:72:73:21:b9:67:bd:9b:99:66:
60:b1:c4:28:02:22:ad:b7:bd:9a:b5:2e:59:8b:82:ee:3f:f5:
29:ef:38:29:ce:f5:2c:39:56:5f:54:6e:30:cd:87:1b:75:4a:
61:84:38:d1:c4:58:81:66:17:b8:48:1e:48:cb:a5:4c:0c:3d:
b0:5c:42:1d:2d:f9:8f:15:3b:f9:ac:97:c3:6d:f0:fc:6a:05:
c9:b2:1a:04:1c:20:0c:06:2f:d9:fd:fa:d6:9f:7b:86:6c:b8:
7d:3b:53:c3:2f:ed:65:ee:d2:ab:ed:b9:f5:6a:9e:6f:40:03:
31:63:98:78:28:32:10:94:88:5b:47:ba:83:f7:a1:bf:d6:cb:
b7:9d:18:e1:42:d3:8b:81:95:00:c8:19:4a:17:b7:67:cb:1f:
c9:7f:8a:da:fd:e4:3b:d2:e9:e4:fe:51:d5:ee:63:18:75:81:
35:fe:08:29:45:f6:fd:88:65:27:eb:0a:c1:7a:49:09:2a:fe:
d9:9c:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:06 2025 by rpki-client