Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rCI0tTyCIeJpb4d9gU_sBmmqJRo.roa
File: rCI0tTyCIeJpb4d9gU_sBmmqJRo.roa (raw, json)
Hash identifier: k+QaRIRqJeiJviwt+rZQM1NV0KncSjG2qkx3/EvU4UM=
Subject key identifier: AC:22:34:B5:3C:82:21:E2:69:6F:87:7D:81:4F:EC:06:69:AA:25:1A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746AC08CABFCF30699406C5AD8AAE27
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rCI0tTyCIeJpb4d9gU_sBmmqJRo.roa
Signing time: Thu 02 Jan 2025 13:48:50 +0000
ROA not before: Thu 02 Jan 2025 13:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206119
IP address blocks: 78.135.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:ac:08:ca:bf:cf:30:69:94:06:c5:ad:8a:ae:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac2234b53c8221e2696f877d814fec0669aa251a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:99:34:5a:5f:39:c2:bf:ad:10:2f:e6:a3:
eb:7f:05:01:65:d8:10:66:2b:d9:8d:15:38:27:d0:
d1:52:1d:f8:73:63:e7:ac:04:07:c9:b7:ff:a1:43:
ad:d1:3f:3b:57:f3:ea:f9:df:26:10:95:ff:77:b8:
2d:87:4c:03:4f:23:d7:59:25:6d:3d:e6:9a:f0:85:
ee:e7:43:9f:ba:9c:65:8b:34:25:60:c7:05:6c:87:
6f:91:10:78:3b:3c:03:38:fb:e1:6b:65:46:a0:8c:
54:51:b1:99:b6:b7:e2:2d:d5:87:3b:32:37:1d:bd:
26:d3:ef:9c:3e:0a:d9:f9:03:ce:a6:9c:41:5f:bf:
6e:ba:37:d1:f6:84:a5:aa:79:06:7e:d8:08:06:26:
c0:68:74:fe:36:9a:be:ac:6b:8e:ba:c6:ba:e4:94:
ef:20:8e:21:bd:8c:02:30:81:8c:33:25:1f:18:01:
2c:a5:12:45:4a:93:67:d6:81:6b:61:a5:de:da:f2:
1f:08:7e:ca:54:97:d1:f8:2a:cc:57:c5:d2:d4:8b:
9f:ef:8f:21:a5:40:83:e1:f0:04:04:38:3f:1a:1c:
bd:5e:b9:ab:e4:c4:b0:f2:b0:4e:79:59:73:1c:8a:
ac:e5:71:8c:3d:f7:e4:ad:0c:3f:c7:87:91:fd:d4:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:22:34:B5:3C:82:21:E2:69:6F:87:7D:81:4F:EC:06:69:AA:25:1A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rCI0tTyCIeJpb4d9gU_sBmmqJRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.72.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ae:bd:d5:09:d0:f5:74:65:53:d8:22:f4:d9:fb:07:80:55:
ab:c2:c0:4e:97:a5:4d:98:5b:4c:88:52:2d:14:fc:4c:71:5a:
38:37:26:6c:58:db:41:eb:12:1e:b9:49:53:ae:ed:48:fb:1c:
40:5c:ad:49:c2:94:02:c8:1f:ce:ca:3b:10:e9:ab:b0:fd:d6:
87:3f:f6:d0:d7:e5:0e:7a:06:18:c2:85:07:ca:e4:b3:e3:ef:
57:0f:e2:28:06:83:80:25:61:38:9a:87:23:bb:10:98:c7:78:
58:91:06:ff:93:67:af:ca:1a:09:c5:44:82:2e:c0:07:12:ab:
cb:0a:bf:62:06:50:52:86:e1:69:6f:fb:e3:2b:d8:38:8e:d3:
e8:8c:e7:09:fe:7a:f2:98:ea:30:62:1f:3d:6e:47:cb:69:52:
ec:db:93:ba:c2:3a:2c:14:11:47:35:20:50:12:dc:2d:69:fa:
c3:88:7e:0e:5d:93:01:42:48:43:0d:58:dd:11:54:be:ca:e0:
f2:85:41:54:ed:59:8c:c5:f1:03:49:9c:f5:37:fa:a9:2c:98:
f9:97:94:3a:17:da:ca:3b:e9:31:43:f0:06:f0:ae:e1:7d:f7:
9d:0e:06:79:64:c8:81:3e:48:f8:1b:1f:96:7e:0f:51:cc:5d:
d7:91:02:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:40 2025 by rpki-client