Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/WzTLOTiHe9vB3hAqlAy8pw18Doo.roa
File: WzTLOTiHe9vB3hAqlAy8pw18Doo.roa (raw, json)
Hash identifier: OSj0Xgv5CShMqmpg0KY2bWpFRvfkFgflayWsnGxuzf8=
Subject key identifier: 5B:34:CB:39:38:87:7B:DB:C1:DE:10:2A:94:0C:BC:A7:0D:7C:0E:8A
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 019423D73B2D9365BFFDFFA1FC248AF91B59
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/WzTLOTiHe9vB3hAqlAy8pw18Doo.roa
Signing time: Wed 01 Jan 2025 21:48:15 +0000
ROA not before: Wed 01 Jan 2025 21:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197972
IP address blocks: 82.144.95.0/24 maxlen: 29
82.144.95.16/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3b:2d:93:65:bf:fd:ff:a1:fc:24:8a:f9:1b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Jan 1 21:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b34cb3938877bdbc1de102a940cbca70d7c0e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:fa:2f:c3:76:47:82:8b:ef:28:f4:42:5c:
bd:1f:bd:35:6d:57:f4:c2:64:36:84:4f:01:88:bc:
5d:9f:d4:a1:72:f9:8e:47:80:6f:53:54:06:3d:a5:
cd:53:5f:3e:e7:52:95:62:ec:94:5b:f7:2f:a9:4a:
29:47:12:15:49:ad:d5:a7:88:73:51:df:1d:de:20:
07:26:78:3d:70:23:ff:e2:59:db:0f:ee:da:3f:ce:
ba:ad:4f:d9:96:d4:89:09:6f:66:e4:bf:48:dc:a0:
8a:49:19:b9:e2:5b:01:15:b6:02:65:97:a9:61:82:
03:bd:8c:36:08:d5:96:6c:68:d9:56:ca:a3:ce:83:
4d:1a:e5:27:bc:b9:a9:94:d2:59:cb:34:9d:09:7e:
61:39:b8:ee:fb:0f:71:44:4d:6b:13:a2:4f:a5:5f:
a4:ed:e2:8f:b9:59:74:d0:67:1f:23:56:65:b8:b3:
ef:8d:47:06:88:36:6b:a7:94:43:48:40:e8:87:37:
f4:f9:f6:3e:cc:a0:5f:0f:74:50:4a:a4:3c:41:0b:
dd:5e:20:8d:b2:a1:4c:00:b9:bc:ad:de:cc:15:c7:
00:7e:ec:93:51:37:cc:e7:02:03:5a:a0:1c:79:08:
3f:83:72:19:13:2b:ab:94:2d:6e:91:fd:c4:9a:3f:
0a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:34:CB:39:38:87:7B:DB:C1:DE:10:2A:94:0C:BC:A7:0D:7C:0E:8A
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/WzTLOTiHe9vB3hAqlAy8pw18Doo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0a:5a:e5:3c:39:04:af:ed:76:3f:73:a3:37:db:da:56:f8:
b6:d4:d2:3d:9f:7f:28:90:0d:df:85:b0:c8:2e:b6:89:54:52:
a0:72:29:b0:40:fc:c8:4f:fb:8b:5c:1f:94:93:fe:b7:42:02:
a6:f5:24:88:0f:d7:50:35:84:7b:0c:da:ec:33:87:65:dd:96:
7f:5f:7f:34:4d:c9:93:51:91:53:5c:cc:c7:bf:aa:87:30:52:
28:80:66:f1:b1:e0:9e:fc:1d:cb:81:6e:ae:42:a8:5e:cf:77:
f1:bf:ee:45:92:10:8d:90:f2:65:76:a8:5c:32:ff:47:3c:22:
dc:88:bb:b9:52:2d:dc:b0:44:a7:cc:35:68:50:9a:27:f5:fc:
8c:6d:b1:69:71:30:fe:79:20:09:94:55:bd:14:1e:0f:a1:9e:
46:77:e8:26:ee:f7:65:2a:5d:d3:5c:94:73:9c:bb:6a:a6:27:
75:3e:87:8f:a5:de:0d:a6:db:81:d3:70:c2:3e:c6:04:88:90:
b4:96:3f:17:39:8a:4e:1d:c2:e9:6c:a3:5b:c7:71:2b:b0:a2:
f7:db:27:9c:49:2a:42:f0:7d:58:c9:7a:e8:93:e9:8e:2b:a2:
15:02:67:9e:5f:ac:a5:31:5c:64:42:a5:28:b3:93:35:10:83:
c3:eb:3c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:33 2025 by rpki-client