Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/P1xjhgcrB_82E1dr812SN7zD2jw.roa
File: P1xjhgcrB_82E1dr812SN7zD2jw.roa (raw, json)
Hash identifier: 1Ps5EidA8vmNxrrB6k3QxJd8xmqPpWh99eg7n4cVK7o=
Subject key identifier: 3F:5C:63:86:07:2B:07:FF:36:13:57:6B:F3:5D:92:37:BC:C3:DA:3C
Certificate issuer: /CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Certificate serial: 01942521A4203D555213C29523FF42C34A10
Authority key identifier: 37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/P1xjhgcrB_82E1dr812SN7zD2jw.roa
Signing time: Thu 02 Jan 2025 03:49:09 +0000
ROA not before: Thu 02 Jan 2025 03:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198386
IP address blocks: 147.78.62.0/24 maxlen: 24
147.78.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a4:20:3d:55:52:13:c2:95:23:ff:42:c3:4a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Validity
Not Before: Jan 2 03:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f5c6386072b07ff3613576bf35d9237bcc3da3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:b6:de:9a:26:a4:04:c7:fa:f3:16:6f:0a:
62:34:7b:ed:fd:4c:3f:eb:db:a7:e9:f1:4f:66:20:
c5:6b:69:0a:3a:c7:ba:c1:33:9d:d9:d6:4b:1a:b1:
e1:94:55:ce:e9:fe:79:c9:42:64:4c:09:64:9e:32:
0b:38:29:12:5f:4a:6e:72:d7:64:5a:f0:72:c2:80:
2a:a1:cf:e5:c4:6a:cf:34:5b:76:82:1b:1b:35:0e:
60:17:e3:a4:21:4d:09:d7:cf:f8:63:b3:0c:81:a6:
17:f5:3f:06:ec:be:aa:b2:80:41:21:66:57:5e:b4:
a1:79:64:9e:63:4a:57:b8:fe:78:52:ab:e5:d2:24:
6c:bf:37:8c:da:9f:d9:2f:11:a9:89:1f:2b:69:81:
cc:8f:3f:e7:ff:bf:79:0b:80:35:16:3a:05:08:6e:
f1:9a:2f:53:84:e7:ae:6c:76:65:d9:a4:9d:dd:95:
ca:eb:0d:21:52:17:37:53:c4:da:22:df:94:64:ca:
6b:e0:ea:dc:3a:93:e9:24:bd:bf:c7:8c:9a:db:1b:
dd:96:fb:41:e4:3b:c3:02:76:45:16:06:e8:44:75:
77:d2:9b:1d:e0:ca:06:3f:a2:cb:d0:2e:71:29:cc:
0e:dd:81:3f:26:f2:c9:38:89:4f:5b:e6:d4:af:84:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5C:63:86:07:2B:07:FF:36:13:57:6B:F3:5D:92:37:BC:C3:DA:3C
X509v3 Authority Key Identifier:
keyid:37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/P1xjhgcrB_82E1dr812SN7zD2jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.62.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:e9:3a:8e:7c:de:f9:8e:be:e6:db:ef:68:1e:5e:f4:29:f2:
60:93:b1:44:76:97:3e:98:5e:13:b5:be:98:ad:f3:18:97:e5:
40:cc:44:a8:ed:9b:bb:2f:8d:0c:a5:bb:fe:fa:6f:ab:99:33:
87:66:92:dc:bb:a0:8c:6c:e9:8f:cf:e1:c5:fc:00:64:31:41:
0d:e3:fb:97:86:24:ea:6f:4e:f8:7d:41:32:9d:b7:e2:2d:1d:
bf:fd:5b:4e:0f:8e:c2:b9:65:28:b5:b7:78:fd:b2:5f:a2:a4:
67:c1:13:b3:cb:86:f8:9f:fd:17:d4:7c:3a:d8:49:ce:e1:cb:
f9:9d:d2:0e:ff:16:2b:70:bb:5d:12:87:dc:2f:8a:c6:03:8c:
2a:8c:89:79:01:97:c2:dd:e4:c9:db:a6:84:d5:b4:da:1b:d4:
aa:31:a5:0f:7c:84:b2:b3:82:10:34:16:2a:bc:11:e1:7f:d4:
e6:54:90:3b:53:11:c2:59:e5:69:99:9c:58:29:c3:86:3b:42:
fc:c6:8e:bb:11:45:09:7e:6b:1b:a8:59:aa:af:8a:65:b8:a7:
71:77:b8:d4:34:6f:85:b6:4c:da:74:2b:ab:8e:30:40:f8:bf:
9c:0b:fb:f1:82:45:2b:12:43:b4:0b:d8:df:3e:af:ae:93:00:
4f:82:45:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:55 2025 by rpki-client