Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/66N-Djv17QzbVu829sfhkH4hbUI.roa
File: 66N-Djv17QzbVu829sfhkH4hbUI.roa (raw, json)
Hash identifier: o7cYwZM94fRtcojgCS537Z8P4XC0rgicA4bzBkhVpiU=
Subject key identifier: EB:A3:7E:0E:3B:F5:ED:0C:DB:56:EF:36:F6:C7:E1:90:7E:21:6D:42
Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Certificate serial: 019421442C60859379F0B20AE3C220045C1C
Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/66N-Djv17QzbVu829sfhkH4hbUI.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47737
IP address blocks: 78.142.220.0/22 maxlen: 22
94.124.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2c:60:85:93:79:f0:b2:0a:e3:c2:20:04:5c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eba37e0e3bf5ed0cdb56ef36f6c7e1907e216d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:da:88:02:1e:1f:bc:70:92:2d:aa:17:30:
2e:f9:72:49:30:66:de:ab:93:e7:b9:4e:55:08:06:
05:00:51:0b:77:51:0b:8e:78:a9:aa:e7:06:b3:64:
d0:74:17:ef:0a:7f:0e:92:5b:f8:bb:38:22:fe:cd:
b1:b8:e0:00:34:28:f6:a4:c0:21:28:d9:48:5d:85:
3f:71:51:b9:19:30:f6:73:e7:5f:0f:ed:9c:9b:31:
6d:1c:18:77:98:a7:a0:7b:42:24:39:4c:07:ab:e2:
67:3c:79:22:f0:38:7b:00:a5:9d:9c:cc:55:68:55:
d9:72:fb:b8:e0:51:59:94:c3:79:16:b5:24:78:1f:
92:54:8f:32:b2:90:ac:8e:86:16:a3:37:c8:5e:24:
df:a5:f7:bf:0a:5c:e7:c2:af:ae:f3:17:31:23:4e:
60:b1:bd:9a:22:2a:a8:62:df:2b:69:6a:1c:5c:6b:
92:57:0d:c9:90:4b:d3:d6:24:0d:d1:3a:e5:5c:0c:
00:b7:4d:e3:67:19:7f:06:d4:08:fd:36:bf:54:82:
19:1f:07:87:3f:7b:b3:1a:b2:f7:b9:13:33:9e:bc:
13:42:4b:dd:09:6e:a4:a2:cd:23:fc:41:3b:8c:da:
cc:2e:ab:c4:8e:20:00:a1:11:3b:69:14:37:5e:35:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A3:7E:0E:3B:F5:ED:0C:DB:56:EF:36:F6:C7:E1:90:7E:21:6D:42
X509v3 Authority Key Identifier:
keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/66N-Djv17QzbVu829sfhkH4hbUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.220.0/22
94.124.168.0/21
Signature Algorithm: sha256WithRSAEncryption
09:d0:60:18:02:47:94:21:78:70:7e:a9:8f:90:ad:91:f5:3f:
34:f0:e6:7f:51:42:63:c7:a2:64:d0:bd:1d:db:ba:aa:b5:f3:
75:72:3a:26:a9:c2:22:af:90:77:f7:7a:ee:3c:bb:a9:2f:b1:
3e:f6:56:0d:ef:87:42:f6:a7:bc:69:8d:fd:85:67:7f:9a:00:
b7:ad:d2:3a:6b:c3:e6:f3:75:96:58:b4:32:96:77:f3:10:51:
3d:99:34:18:5b:1e:6a:cc:4e:f9:b8:86:4f:1e:9d:6d:14:79:
2b:6b:7d:67:ee:f0:0e:61:47:65:69:ae:07:28:4f:07:16:66:
c7:7b:c0:d5:70:ec:f7:b5:ca:ea:8b:39:eb:36:fb:9d:29:56:
19:23:ca:a4:6d:28:e8:8b:9b:c2:5e:1b:2d:f3:91:45:5a:f8:
13:d7:7e:92:d9:f9:ea:40:5a:ee:16:08:5d:92:b1:3e:57:a0:
72:65:ef:96:dc:e2:28:3f:64:98:f3:b7:31:43:dc:36:76:0e:
36:a9:1f:5b:9e:ba:3c:95:48:b4:9d:4e:0d:15:ed:f7:bf:9c:
e0:68:93:17:d2:70:8f:73:25:7e:d4:5f:ca:10:fc:8d:49:a8:
68:05:f0:0e:2a:4f:69:c6:f5:f8:50:30:8e:35:de:a4:0e:ad:
b0:a0:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:47 2025 by rpki-client