Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/4WPKsvP0bljE4YLQ_RsDCPUOxO8.roa
File: 4WPKsvP0bljE4YLQ_RsDCPUOxO8.roa (raw, json)
Hash identifier: /pXE4tdwv3dfHDvdrnJG5/fTpZ3e7ceFkxfrRASJi2o=
Subject key identifier: E1:63:CA:B2:F3:F4:6E:58:C4:E1:82:D0:FD:1B:03:08:F5:0E:C4:EF
Certificate issuer: /CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Certificate serial: 019425208AFA93E514ACB6955E8ED2271F78
Authority key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/4WPKsvP0bljE4YLQ_RsDCPUOxO8.roa
Signing time: Thu 02 Jan 2025 03:47:57 +0000
ROA not before: Thu 02 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12552
IP address blocks: 147.78.229.0/24 maxlen: 32
147.78.230.0/24 maxlen: 32
147.78.231.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:8a:fa:93:e5:14:ac:b6:95:5e:8e:d2:27:1f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Validity
Not Before: Jan 2 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e163cab2f3f46e58c4e182d0fd1b0308f50ec4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:98:d0:cc:a5:22:aa:86:80:b5:40:84:5e:
f4:69:b8:dc:5b:7a:2c:e3:55:27:e6:03:ae:67:5a:
a0:03:2a:21:40:b5:5c:f0:20:c9:99:c4:dc:80:74:
1b:1f:53:37:f2:c1:e2:ff:d1:e3:8e:11:d8:8d:21:
66:5b:8a:d2:2a:2e:41:cb:ba:95:06:2b:fb:33:57:
36:2e:5b:c3:41:be:98:ec:74:0e:bb:af:eb:86:5e:
5f:b2:52:b8:47:36:3e:23:b2:2a:0e:6a:6e:49:f7:
6c:b9:68:61:ba:5e:e6:1b:57:5c:b8:c7:c1:3c:2c:
e7:c0:62:39:ea:04:98:55:97:6f:30:dd:31:9a:26:
67:4c:00:04:cf:d8:28:dd:f0:d0:19:11:d4:19:e0:
32:76:e6:74:ea:79:e0:4b:1e:4e:7f:a7:d0:77:a2:
b3:2a:54:00:66:9e:c7:fd:1c:62:ed:60:77:3e:8c:
95:90:64:5b:e2:c4:00:ec:56:47:22:43:b9:e5:8d:
7e:83:5e:9c:84:b4:fd:b0:d7:1f:01:17:f1:6b:35:
33:0c:88:8a:ef:77:9d:9a:d4:89:d3:bb:0e:3c:73:
e5:bc:8d:18:1d:cb:f6:aa:af:a5:94:80:6d:23:01:
3e:d0:df:44:19:63:d7:f4:05:fe:1d:e1:93:ab:20:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:63:CA:B2:F3:F4:6E:58:C4:E1:82:D0:FD:1B:03:08:F5:0E:C4:EF
X509v3 Authority Key Identifier:
keyid:54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/4WPKsvP0bljE4YLQ_RsDCPUOxO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.229.0-147.78.231.255
Signature Algorithm: sha256WithRSAEncryption
79:f6:82:83:94:6d:c8:a3:3d:9e:96:34:61:f0:cf:77:cf:18:
ff:a4:a0:fc:3f:b6:d2:54:b6:25:f7:0c:97:9e:99:d9:0c:5b:
10:7d:fb:88:f5:6c:38:ed:8b:21:87:4c:5a:16:52:ec:d6:98:
94:1a:d2:26:91:57:ea:df:ca:4e:e2:32:ff:56:b1:36:0e:81:
77:e0:3f:de:ad:ec:3e:55:50:4b:01:d4:cf:9d:aa:04:12:83:
92:58:f7:38:ee:1b:0a:f8:c8:7f:f3:26:84:a6:3d:26:d8:e4:
37:5d:ba:ac:0b:1c:ae:c6:bb:75:d2:37:49:02:c8:53:33:1a:
7b:7e:51:45:33:13:23:f1:7a:57:5f:09:8f:82:f3:a3:b9:41:
a1:21:75:35:7e:8a:ae:f7:b0:3a:58:0c:7f:6e:6c:3f:c6:c1:
b4:75:1f:71:e0:3a:bc:c0:d5:47:dd:07:f0:a6:7c:0d:db:3c:
95:e8:ef:7b:1e:c9:cb:7a:9c:ec:e3:59:e0:0e:3a:00:af:e2:
18:61:4e:9c:48:eb:25:01:a5:0e:d8:18:37:fa:3c:c5:1b:5d:
c5:f1:44:48:3c:1f:38:eb:d5:89:de:e7:c3:62:59:2c:3c:ba:
e5:4f:05:1f:7b:c5:4d:e4:90:71:94:14:f0:2e:9f:8c:0c:57:
72:d1:b9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:01 2025 by rpki-client