Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/Y48MxWheGIg90vL6QjXuK2Ri1Zg.roa
File: Y48MxWheGIg90vL6QjXuK2Ri1Zg.roa (raw, json)
Hash identifier: oWPAM3Pv3mMEn0xEixzHycyFbvmileK5Wt76ASUYkxs=
Subject key identifier: 63:8F:0C:C5:68:5E:18:88:3D:D2:F2:FA:42:35:EE:2B:64:62:D5:98
Certificate issuer: /CN=9766c6486de74c13d49cca3f0be0224a35ccea64
Certificate serial: 01941FFA18DFEE7BFFCE25AE454C643963B0
Authority key identifier: 97:66:C6:48:6D:E7:4C:13:D4:9C:CA:3F:0B:E0:22:4A:35:CC:EA:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/Y48MxWheGIg90vL6QjXuK2Ri1Zg.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139648
IP address blocks: 78.41.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:18:df:ee:7b:ff:ce:25:ae:45:4c:64:39:63:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9766c6486de74c13d49cca3f0be0224a35ccea64
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=638f0cc5685e18883dd2f2fa4235ee2b6462d598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:fb:34:f5:2c:df:9b:57:19:63:e1:f9:4c:
b0:30:8c:7b:b2:aa:1f:b6:6c:10:00:ae:95:bf:6c:
f3:78:74:51:3c:87:e5:33:1e:c0:a9:fc:50:5d:ca:
9a:a0:63:e7:67:50:4f:f8:76:ab:52:c2:fa:75:f7:
b0:47:32:b2:4f:35:38:9a:9a:ec:94:d0:ae:2c:cb:
98:e7:42:aa:84:e6:29:97:f7:88:0e:84:de:da:33:
c9:31:63:b3:5a:c2:d6:4a:f6:7a:72:d9:60:d9:71:
61:67:7b:65:be:88:c9:05:08:02:cc:9d:ab:37:d3:
2c:fe:44:e8:35:df:29:02:9e:47:0d:5e:10:72:19:
c1:25:a5:59:66:2f:3a:20:97:80:67:8a:72:5b:d1:
a1:21:dc:4a:f2:de:d8:ac:bf:2c:b9:b8:af:21:8e:
36:0b:48:88:b0:8b:48:47:37:3d:26:a8:60:c2:fa:
f5:d9:9a:4d:f2:bd:42:94:27:bc:41:21:f1:20:cd:
ca:ce:80:b4:06:7e:86:53:88:04:e9:0b:43:53:b7:
9f:ee:11:33:fe:d8:87:a2:46:b1:54:eb:89:a1:8b:
52:8e:0a:64:ca:3b:18:10:77:d6:63:c2:14:55:dd:
7d:df:38:47:f6:6b:77:dc:f3:fb:c4:b3:a1:39:e6:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8F:0C:C5:68:5E:18:88:3D:D2:F2:FA:42:35:EE:2B:64:62:D5:98
X509v3 Authority Key Identifier:
keyid:97:66:C6:48:6D:E7:4C:13:D4:9C:CA:3F:0B:E0:22:4A:35:CC:EA:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/Y48MxWheGIg90vL6QjXuK2Ri1Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/cea9b6-56b4-4b04-8b71-5d4d9d0c6597/1/l2bGSG3nTBPUnMo_C-AiSjXM6mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:3a:82:9e:2f:37:ea:7c:45:3d:c1:41:f7:f7:97:6e:c7:ad:
e7:a6:df:29:fb:ea:5b:16:d8:fb:7f:5c:a2:0c:5d:e4:93:cb:
7c:3e:8a:01:43:ae:6a:e1:0f:cd:65:3b:a1:3e:46:7d:05:13:
03:4a:87:28:c6:b0:30:92:d3:1a:39:5a:2f:68:3b:96:cf:07:
d8:aa:a3:6e:08:df:84:2a:b2:90:33:9a:7c:ff:df:0b:e5:1b:
f5:10:77:03:31:00:09:7e:b1:c4:09:c8:13:15:c1:48:b3:82:
06:c0:23:0e:68:88:e6:57:0b:fa:b1:f6:21:9c:84:7c:34:dc:
b6:12:7f:49:f6:b5:21:99:a3:c0:a7:ee:95:b0:f5:28:2b:61:
a7:82:f2:fe:46:ca:f6:2e:d8:bb:ba:26:72:09:ed:e4:8e:98:
07:61:9d:ee:dc:47:25:ad:fa:08:56:63:98:f6:75:e1:c4:0c:
fa:31:c9:1f:9a:fd:ed:40:f3:9f:34:28:43:74:e7:dd:49:c2:
b8:d1:cf:1a:6e:94:9a:d0:b0:b9:51:bf:af:6b:12:94:8c:24:
3e:74:7f:f4:6a:73:75:b1:58:cc:5d:74:fd:e7:7a:79:7d:5c:
8c:e5:ab:e6:cf:d4:45:fb:17:9d:c6:e1:8a:f0:e7:ad:bc:4a:
77:43:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:27:56 2025 by rpki-client