Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/Cka5hS1QJ8F_fpaHbYBDWvVz3zQ.roa
File: Cka5hS1QJ8F_fpaHbYBDWvVz3zQ.roa (raw, json)
Hash identifier: XX2tqE6/Sow+NPYgN6k7d0MyJwwc/rwS4gYgRP4EXrM=
Subject key identifier: 0A:46:B9:85:2D:50:27:C1:7F:7E:96:87:6D:80:43:5A:F5:73:DF:34
Certificate issuer: /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial: 019425FCFFC28F4B9F56BB7E5323ED0F655E
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/Cka5hS1QJ8F_fpaHbYBDWvVz3zQ.roa
Signing time: Thu 02 Jan 2025 07:48:45 +0000
ROA not before: Thu 02 Jan 2025 07:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 78.136.252.0/23 maxlen: 24
78.136.254.0/24 maxlen: 24
78.136.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:ff:c2:8f:4b:9f:56:bb:7e:53:23:ed:0f:65:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Validity
Not Before: Jan 2 07:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a46b9852d5027c17f7e96876d80435af573df34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:a8:4b:24:59:e1:0f:e7:44:59:32:6f:cd:
37:05:74:ac:be:97:75:eb:94:3e:f1:50:aa:56:64:
15:05:5f:78:44:57:ec:98:0e:f0:60:71:f3:09:e3:
44:5a:59:cd:5e:5c:66:c5:68:f9:d1:8f:65:8b:da:
7a:a4:22:6c:26:e6:c5:d8:43:2b:d9:9a:0e:07:95:
3b:6e:06:c2:02:cf:09:2e:8a:ef:23:54:6d:a1:23:
2d:82:f6:c8:d5:df:8e:6b:65:56:3f:85:8b:0a:f0:
43:50:12:68:be:34:0f:4a:a8:c7:9f:45:f1:38:c5:
e5:34:f3:25:b0:6d:ce:0d:ad:c2:eb:cf:7b:da:bd:
e3:93:6c:a7:19:69:f4:24:ad:6a:45:d5:7e:b4:61:
96:6c:58:bb:bb:14:d0:bb:5e:af:24:52:cd:dd:35:
b0:26:74:39:91:4b:0f:38:53:28:a0:9c:71:a8:35:
2c:f9:61:57:94:40:d4:35:9e:20:ee:c2:66:84:a3:
c6:21:dd:b0:a6:74:e1:88:83:b3:a4:18:9f:03:0e:
7f:ea:e8:a2:d9:1d:87:b5:45:ba:7a:3f:8e:81:3e:
5d:db:3e:11:8c:1a:b0:43:81:a1:6d:75:6a:63:5c:
66:9c:5a:90:7b:15:ee:23:42:ec:15:bd:d0:6f:c3:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:46:B9:85:2D:50:27:C1:7F:7E:96:87:6D:80:43:5A:F5:73:DF:34
X509v3 Authority Key Identifier:
keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/Cka5hS1QJ8F_fpaHbYBDWvVz3zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.252.0/22
Signature Algorithm: sha256WithRSAEncryption
51:de:c6:f4:13:be:ff:5a:4a:4b:78:5a:85:af:99:b0:1f:21:
7f:bd:1a:b7:1c:a2:41:3d:49:c3:90:1c:2c:0d:69:46:13:06:
cb:c6:c6:28:4a:34:ce:54:be:36:29:c6:98:0e:e7:86:62:01:
d2:ac:88:30:28:82:a5:54:33:1d:bf:9a:f4:e3:4a:f9:a1:28:
60:63:85:29:4e:f2:05:7b:c0:7c:0e:50:32:46:23:a7:ec:5c:
e1:61:56:53:a0:da:70:84:db:d1:a3:92:95:a7:01:59:20:3c:
7d:35:50:46:ca:ea:49:e4:fa:ff:52:b0:30:d2:f2:0a:f9:17:
3e:38:cb:a9:46:93:0a:5c:0f:71:32:4e:6d:b6:e0:44:a3:9a:
f9:57:ca:4f:ad:c9:89:29:72:a5:41:eb:49:3b:a6:37:62:08:
4e:7c:d2:a0:5a:7a:ae:53:9a:2f:b1:40:48:5e:4e:34:ea:4f:
d6:d6:f1:8c:f1:d1:51:74:94:23:d7:a5:b3:af:8c:87:0b:d9:
48:03:14:3d:75:9e:f0:df:f4:c4:a7:a1:53:4d:b2:60:a1:5f:
2a:e0:d9:31:92:87:33:4e:a5:70:b9:bf:74:1e:20:8c:38:78:
f0:41:59:34:c3:7b:45:48:59:79:54:1f:0a:cf:38:77:e8:3c:
af:b5:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:26 2025 by rpki-client