Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/I5CTTekpli0-4sYRHqL267Z1gUw.roa
File: I5CTTekpli0-4sYRHqL267Z1gUw.roa (raw, json)
Hash identifier: RolKxbByVhHsZ7rFCkNthZbEOsYUJKjyvpowYKhQD6k=
Subject key identifier: 23:90:93:4D:E9:29:96:2D:3E:E2:C6:11:1E:A2:F6:EB:B6:75:81:4C
Certificate issuer: /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial: 019425FCFEF24817580F939F7E144477F545
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/I5CTTekpli0-4sYRHqL267Z1gUw.roa
Signing time: Thu 02 Jan 2025 07:48:44 +0000
ROA not before: Thu 02 Jan 2025 07:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59729
IP address blocks: 78.136.252.0/24 maxlen: 24
78.136.253.0/24 maxlen: 24
78.136.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:fe:f2:48:17:58:0f:93:9f:7e:14:44:77:f5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Validity
Not Before: Jan 2 07:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2390934de929962d3ee2c6111ea2f6ebb675814c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:0e:bd:f0:62:08:8f:a6:89:27:f5:3b:62:
4d:cf:6d:82:3c:ab:ce:d4:db:a4:1a:e0:ee:93:b0:
83:2f:a5:b3:a4:af:5c:9f:d2:ea:bf:3d:dd:9c:e0:
e3:2b:f4:13:13:75:1b:6c:94:c2:a6:b4:90:fe:00:
0b:d3:41:f3:53:2a:8e:9e:e4:ea:fc:9c:0f:98:5d:
57:a9:93:dc:1c:e0:7f:e7:73:d4:9b:53:f8:d2:36:
d1:d8:93:91:6d:c5:f6:8c:20:6f:96:3e:99:1a:1c:
4b:d4:49:35:6e:8f:1e:ef:be:24:fb:20:07:2e:c5:
98:92:f2:71:e3:d5:b0:a1:10:a3:c1:aa:a3:19:b7:
13:a3:79:0a:a0:b9:bf:6a:db:e6:d9:db:82:bc:15:
ba:d8:6e:2a:14:b1:f5:b9:4f:cb:34:22:3b:c7:30:
f6:d5:7c:a7:69:67:97:ec:bb:24:65:03:58:11:05:
2b:7a:c1:77:0c:a8:16:52:78:d8:b0:95:19:3d:ad:
52:08:c8:fc:05:7f:8a:bc:bd:e7:1d:3a:20:d7:ea:
9b:60:28:1d:84:b5:22:f8:1c:1c:f5:aa:c2:03:32:
f4:60:b6:15:35:6e:99:60:63:5b:bd:1e:67:e2:8f:
be:d0:14:4d:3f:8a:24:3c:21:4c:02:c2:11:b2:1d:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:90:93:4D:E9:29:96:2D:3E:E2:C6:11:1E:A2:F6:EB:B6:75:81:4C
X509v3 Authority Key Identifier:
keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/I5CTTekpli0-4sYRHqL267Z1gUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.252.0-78.136.254.255
Signature Algorithm: sha256WithRSAEncryption
64:ae:19:c7:68:ef:bf:90:c1:5a:00:64:98:86:28:0b:34:53:
69:86:c3:63:c4:30:64:1f:37:cc:84:43:b6:34:57:1f:a9:55:
a9:d6:4b:89:30:89:4c:02:8f:29:50:66:b8:68:dd:40:8a:46:
b0:74:26:29:d2:60:14:60:76:ad:25:0a:32:f3:95:2d:fa:24:
2e:c9:51:38:62:f4:c0:82:2b:00:c3:c5:e8:f9:aa:42:95:a4:
c7:03:57:63:c4:0a:63:61:f4:35:67:bc:b3:e4:cb:2d:93:ca:
26:5a:78:6a:e6:7e:17:64:fa:92:79:58:96:bc:e0:2e:f4:90:
9a:64:da:6b:a9:a1:55:dc:1e:43:60:81:5c:98:6b:93:e1:e6:
7a:de:a2:46:31:8e:fa:03:76:b3:1c:b4:1a:77:25:ed:0b:cb:
10:15:a5:2a:7f:9f:8a:05:97:6b:0c:3b:7c:51:c1:74:0c:4f:
cf:73:9a:28:a0:61:e9:84:09:c8:3d:16:b1:88:fc:00:c0:25:
57:5f:62:b5:e2:55:77:ab:00:8f:94:e7:75:0c:a1:c9:ab:e9:
99:f1:55:ff:68:23:69:99:3c:56:88:fd:6e:1c:b5:93:de:15:
3f:70:ef:69:84:2c:83:8a:a0:c8:db:41:87:8d:f0:3d:50:22:
0c:29:11:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:14 2025 by rpki-client