Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/OCmtvoyutUlmQYHtPYpUref_Lcw.roa
File: OCmtvoyutUlmQYHtPYpUref_Lcw.roa (raw, json)
Hash identifier: Fe4u65PoUtBXtctFyHwAqLin/v4sGRun96RsjrSGCO0=
Subject key identifier: 38:29:AD:BE:8C:AE:B5:49:66:41:81:ED:3D:8A:54:AD:E7:FF:2D:CC
Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4
Certificate serial: 019424B3756D22CE739FADF6007CAA8775D4
Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/OCmtvoyutUlmQYHtPYpUref_Lcw.roa
Signing time: Thu 02 Jan 2025 01:48:48 +0000
ROA not before: Thu 02 Jan 2025 01:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59463
IP address blocks: 78.108.248.0/24 maxlen: 24
78.108.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:75:6d:22:ce:73:9f:ad:f6:00:7c:aa:87:75:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4
Validity
Not Before: Jan 2 01:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3829adbe8caeb549664181ed3d8a54ade7ff2dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:66:df:ea:88:19:90:43:77:f6:6a:f8:1d:
a0:0a:6b:3f:64:35:77:23:53:aa:4b:4d:e8:e7:97:
a4:9d:2e:07:9e:fd:a9:c2:86:95:29:40:cd:30:c7:
1d:d8:aa:07:20:34:31:08:45:1d:88:29:62:df:b5:
b0:1f:33:83:be:7d:7b:b0:7a:d3:3c:47:29:9b:34:
f8:cb:6d:49:41:a2:2e:f1:6c:e5:62:07:4c:9d:b5:
c9:7a:7a:86:17:15:13:73:d2:47:96:39:b4:c3:9d:
04:bc:cc:d0:28:c7:32:1d:6e:7c:3f:9f:db:c1:06:
ca:03:57:81:43:20:67:7e:05:c6:a4:b7:3b:7e:55:
ac:b2:06:29:28:80:b2:84:07:68:53:05:33:7e:fe:
31:1b:70:0a:b2:d1:1d:16:0b:7c:31:28:87:2b:be:
7f:f2:0a:f2:8d:86:00:4b:64:50:b3:47:ba:4c:a0:
5c:aa:f0:46:be:3b:d2:67:8c:db:f2:9d:7b:15:9a:
35:74:02:23:94:98:75:56:c1:2f:2e:3d:e7:eb:3d:
fe:52:11:50:a3:7f:f8:31:b9:2e:f8:e4:63:73:40:
a3:4a:dd:be:29:bc:89:6a:43:04:24:53:73:6c:41:
45:23:17:c2:b0:70:64:ef:a2:59:35:ac:45:0a:0d:
56:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:29:AD:BE:8C:AE:B5:49:66:41:81:ED:3D:8A:54:AD:E7:FF:2D:CC
X509v3 Authority Key Identifier:
keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/OCmtvoyutUlmQYHtPYpUref_Lcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.248.0/23
Signature Algorithm: sha256WithRSAEncryption
52:f2:b3:69:c2:ed:e4:ba:10:aa:a4:32:32:8f:32:25:76:b7:
2d:59:8c:96:bf:a3:36:93:87:01:e5:e4:0d:12:fc:61:a3:eb:
8d:86:68:0b:37:e1:3d:b0:a1:97:6d:7f:4f:ae:ed:96:b0:43:
a1:d5:08:32:5f:c6:69:c7:ed:6a:65:b5:8e:f0:f8:06:7f:5a:
79:0f:6d:42:30:88:45:fe:df:81:cc:eb:a4:d8:ef:85:fd:84:
75:27:3e:d4:07:da:ab:01:25:0f:70:c5:29:76:1b:59:a0:bc:
31:8e:af:f1:36:2f:b1:78:98:a9:67:b1:af:20:0e:7f:c8:31:
3c:23:32:74:a7:80:9a:bd:67:ea:e9:6d:84:80:5c:77:c1:74:
fd:98:cb:be:fe:75:ee:26:2b:e3:86:26:c4:35:35:2a:e3:80:
1e:39:1b:1f:b6:82:2a:30:61:39:04:1b:35:ca:b1:d1:0b:a2:
72:2d:27:a6:3b:db:40:e7:53:94:7b:f3:72:a6:ca:e3:01:bd:
09:a8:b9:da:4b:a8:07:3f:e4:51:72:b1:1a:e7:5a:66:08:0e:
0f:e2:71:15:e7:d6:e5:f2:16:7c:98:5c:b0:bb:93:bf:b8:48:
4f:d4:65:d6:75:46:72:5f:de:79:02:80:04:05:10:7b:e8:c7:
43:bb:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:37 2025 by rpki-client