Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/dAVSxn9A98KVLUy6EVl5K32SF7o.roa
File: dAVSxn9A98KVLUy6EVl5K32SF7o.roa (raw, json)
Hash identifier: SrvH5FePM3edQXYJk2ogbac68Gns4DWibjSZvY3sGPk=
Subject key identifier: 74:05:52:C6:7F:40:F7:C2:95:2D:4C:BA:11:59:79:2B:7D:92:17:BA
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 01942747A5968139AAFB2AB432F99F409381
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/dAVSxn9A98KVLUy6EVl5K32SF7o.roa
Signing time: Thu 02 Jan 2025 13:49:54 +0000
ROA not before: Thu 02 Jan 2025 13:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209620
IP address blocks: 78.31.196.0/22 maxlen: 24
2a06:6880::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a5:96:81:39:aa:fb:2a:b4:32:f9:9f:40:93:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=740552c67f40f7c2952d4cba1159792b7d9217ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:29:eb:48:45:77:b7:d9:a5:5d:92:22:8b:
02:d3:6b:c0:5c:5e:25:78:f4:fb:82:44:32:6b:b9:
2a:06:93:ef:a7:00:bb:3a:54:c0:0c:fa:27:f6:48:
e2:be:49:c1:97:57:21:3a:f5:5e:c7:2f:78:6e:11:
93:14:33:43:d9:7b:95:ee:e9:93:c6:5c:6d:50:65:
87:38:f3:94:a1:c6:2a:4e:7c:91:63:e9:63:72:08:
79:71:33:7b:f6:7e:b0:75:72:76:ee:e8:cb:eb:b1:
ef:b8:08:88:2a:05:ca:c1:2d:7f:d2:54:77:56:06:
d4:6b:33:47:4f:89:79:4e:91:d9:d5:44:3f:c8:17:
de:fa:09:e5:ab:fd:e2:f0:0e:e4:23:52:cf:8d:0f:
54:35:90:34:02:2d:ce:a8:c0:1b:5b:05:02:90:19:
56:b9:7d:6a:a0:a5:a4:6d:46:a3:c0:f6:84:57:f5:
f8:fb:f0:84:06:2e:e7:db:c4:a7:d8:8f:2e:bb:b7:
62:1b:04:33:c2:e8:e5:ad:58:79:8b:fe:59:7b:45:
53:e9:b8:3f:0e:21:48:bc:a6:e5:c6:09:a3:9a:2a:
f2:aa:d4:79:33:ed:be:41:62:07:82:c2:e4:d6:c9:
22:d7:d6:07:39:b3:6c:b6:41:ee:5e:86:65:42:05:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:05:52:C6:7F:40:F7:C2:95:2D:4C:BA:11:59:79:2B:7D:92:17:BA
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/dAVSxn9A98KVLUy6EVl5K32SF7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.196.0/22
IPv6:
2a06:6880::/29
Signature Algorithm: sha256WithRSAEncryption
87:2f:c9:02:c7:14:f3:13:ab:69:13:f3:d6:da:5b:71:03:a0:
89:21:47:75:b1:d0:34:5e:8a:78:a0:13:ca:08:76:8f:12:fc:
9a:69:09:02:ad:22:a8:96:9c:28:dc:b9:f7:fb:5a:db:4a:b5:
7c:44:a7:e7:c2:92:3e:06:4a:1a:a3:c8:38:9d:f3:c7:f3:99:
6f:a8:26:f6:8a:c1:d1:bd:29:f4:5d:28:84:28:58:10:2e:ca:
d8:f1:1c:9b:af:c8:0a:1e:b3:5e:74:bd:9f:d6:ba:56:ca:0e:
90:80:0a:03:08:67:3e:94:95:81:eb:af:bb:8d:c4:64:aa:59:
da:42:38:5b:a1:9b:50:00:69:4c:91:91:d1:27:d7:32:dd:7d:
d1:94:1a:c8:1b:f4:b7:3b:d5:e4:d6:07:72:f1:ad:c9:a1:5d:
33:92:09:77:d5:11:60:f5:18:89:33:e5:dd:1d:a9:e0:a0:15:
e5:f6:bf:7c:72:59:18:06:91:4e:22:d8:5b:d0:73:64:2e:1d:
d2:33:48:c3:aa:20:de:f8:52:38:a9:f0:c0:f7:1e:cb:95:ca:
fc:a8:f9:d3:0d:3c:67:52:62:3c:0a:6c:eb:51:dd:07:ab:e1:
64:10:de:9b:61:2f:2c:fd:f4:d1:c1:eb:6c:05:55:b2:0a:a3:
b3:54:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:21 2025 by rpki-client