Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/78X0IG7SGTb_CqUUoAsl9rOEOoQ.roa
File: 78X0IG7SGTb_CqUUoAsl9rOEOoQ.roa (raw, json)
Hash identifier: dHUSFpGblHkPXU9NYMPaCtIz+bczpLlHXComKZfL/BA=
Subject key identifier: EF:C5:F4:20:6E:D2:19:36:FF:0A:A5:14:A0:0B:25:F6:B3:84:3A:84
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 0194221FAE5F9A83CB1712CDD8E4C548BE74
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/78X0IG7SGTb_CqUUoAsl9rOEOoQ.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39334
IP address blocks: 213.109.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ae:5f:9a:83:cb:17:12:cd:d8:e4:c5:48:be:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efc5f4206ed21936ff0aa514a00b25f6b3843a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e9:6b:d3:ce:e4:b8:99:cc:29:c6:0c:a2:52:
1c:49:e1:a7:79:dd:2c:95:a8:07:00:4e:88:83:b8:
8f:14:6e:cb:d1:05:12:c3:eb:c2:d6:36:ce:d9:69:
3c:aa:c4:95:c8:c8:c9:9a:37:84:4b:cc:e0:56:8e:
91:de:a1:8d:60:5c:8b:65:73:f1:f5:f9:18:88:38:
b6:25:30:e4:54:7a:f3:d2:76:87:59:b2:56:58:46:
26:bd:b5:b9:2b:5f:e0:45:94:61:2b:99:14:6e:1c:
7c:a2:68:4c:0c:f7:25:3e:71:dd:53:d7:31:8d:45:
c8:b1:4b:cf:32:34:30:73:94:d1:76:f9:b3:ce:fc:
c9:29:65:b0:cf:94:3f:81:1d:e4:56:54:b7:1b:07:
9d:b9:d6:b2:a4:40:de:9e:3c:fa:dc:99:cc:59:95:
61:c6:e3:0d:22:df:d5:c2:df:d7:37:67:f0:53:1f:
95:78:cc:94:3d:ae:1b:a6:8b:e9:2c:4b:23:35:9f:
46:19:88:4a:1e:eb:49:be:bf:99:aa:5f:79:b2:db:
7a:db:15:54:39:1c:fe:be:49:d5:e3:87:5c:3a:2e:
2f:af:6c:4f:4f:7c:16:14:c7:02:22:ef:85:15:70:
f0:8b:73:3d:e3:85:0f:7f:95:07:89:d9:bf:21:0c:
50:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C5:F4:20:6E:D2:19:36:FF:0A:A5:14:A0:0B:25:F6:B3:84:3A:84
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/78X0IG7SGTb_CqUUoAsl9rOEOoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.84.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c5:22:1e:15:a6:78:65:2f:ca:5b:ae:55:9e:5d:8f:f7:84:
34:53:7c:17:96:da:f6:e0:17:36:de:57:7c:81:54:3c:7c:0a:
7e:64:35:6d:aa:0f:46:77:9b:4d:4b:b3:b8:76:3a:53:7d:e6:
00:19:57:81:31:0c:10:cd:9f:2d:7c:59:23:81:9a:ac:f5:c1:
ae:24:dc:05:5b:b9:49:ef:73:6e:de:74:61:78:7c:e2:dc:01:
23:e8:67:6b:c8:69:3f:0f:4b:31:15:40:1f:81:23:c9:36:6e:
40:ee:29:1d:54:51:a7:a7:07:d3:15:9a:2f:f3:7a:e3:83:46:
4b:fe:2a:d3:83:2d:24:97:e1:0a:c2:12:9a:9b:aa:90:e1:5e:
1a:30:6a:78:74:23:c4:ad:97:d3:d8:42:b7:82:31:af:71:f3:
ef:c6:d8:84:bd:08:35:8b:8e:b1:b9:72:00:bf:6c:d3:68:2a:
55:13:87:c3:b2:b9:48:ca:fa:6e:4f:58:48:6b:98:70:0c:ee:
65:2e:d7:98:f7:f1:a5:60:37:a3:19:93:54:66:01:f4:18:e2:
48:08:47:62:5b:37:10:78:9d:ce:2a:66:ce:c1:5d:52:13:7a:
1d:e8:a3:c7:12:78:bf:a1:28:31:bf:5f:6f:88:52:52:c3:79:
1a:4e:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:39 2025 by rpki-client