Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/K1-fBiboHS-GQ6ErDJdUiH-rY_I.roa
File: K1-fBiboHS-GQ6ErDJdUiH-rY_I.roa (raw, json)
Hash identifier: AOJaEckufNSu4V7SdBMyiCpYmSZ+CDZ6Okor58DXN7s=
Subject key identifier: 2B:5F:9F:06:26:E8:1D:2F:86:43:A1:2B:0C:97:54:88:7F:AB:63:F2
Certificate issuer: /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial: 01941F8C007178E122E16AD4DEF9540303EC
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/K1-fBiboHS-GQ6ErDJdUiH-rY_I.roa
Signing time: Wed 01 Jan 2025 01:47:36 +0000
ROA not before: Wed 01 Jan 2025 01:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207945
IP address blocks: 78.156.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:00:71:78:e1:22:e1:6a:d4:de:f9:54:03:03:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b5f9f0626e81d2f8643a12b0c9754887fab63f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:af:ad:67:ca:29:4d:cd:e5:8b:59:ca:f9:55:
0d:db:ff:9b:16:4d:ba:1d:83:7c:28:17:96:ac:1b:
a2:66:f1:51:04:2f:b5:ea:14:5a:d8:6d:d7:7c:89:
45:e0:2e:cf:cc:51:96:c7:49:b2:54:86:ff:d0:87:
14:65:97:67:af:b7:07:88:47:1d:12:0a:a9:26:1b:
3b:f8:da:0d:6e:aa:0d:aa:90:14:7e:fa:ed:b4:9f:
a3:99:96:da:74:b0:df:72:a4:7b:10:9d:62:98:14:
01:af:6d:95:46:c4:c7:5b:5b:fd:c4:6d:9e:cb:19:
d1:1b:04:02:3c:ad:63:9f:7f:65:b2:91:4f:79:a4:
5f:b4:f5:41:39:f2:d8:29:4c:e2:b2:4f:0d:80:3a:
84:a2:15:08:11:83:cd:be:4b:b4:81:d1:48:0e:1d:
5e:81:03:b9:46:34:d9:03:5c:d9:3b:2a:d2:8f:41:
cf:48:84:96:ad:81:f5:b7:af:c0:9c:e1:f2:9e:c9:
43:b9:52:cf:08:cd:c6:c6:62:89:3c:15:34:5b:94:
8b:f0:86:00:00:fb:1c:07:06:b6:90:52:9f:83:f3:
f7:5f:59:fb:b5:68:19:73:d1:be:1f:44:8b:c6:b7:
c9:9e:a5:56:48:cf:17:19:9f:c6:f6:de:eb:f5:15:
21:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5F:9F:06:26:E8:1D:2F:86:43:A1:2B:0C:97:54:88:7F:AB:63:F2
X509v3 Authority Key Identifier:
keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/K1-fBiboHS-GQ6ErDJdUiH-rY_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.156.140.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:11:9d:1e:45:9e:d8:ef:f0:b3:9b:8f:90:9d:fa:99:7b:6e:
8f:88:de:fb:8c:75:ea:93:cf:99:05:a6:1e:70:e4:9a:1d:c7:
2f:66:63:31:f2:82:38:c0:ab:bf:5e:4f:74:6f:05:0b:a4:5a:
a0:30:0d:c0:c9:87:74:f6:84:1e:cc:da:a9:fd:b8:cc:3c:2e:
17:4c:ba:ee:2e:8f:5f:ed:d4:8f:b1:11:df:fe:c8:6b:d2:63:
9e:58:94:1e:a5:fc:35:c0:69:ed:b6:a2:19:4a:55:d0:49:11:
86:d1:71:92:51:80:1b:cc:2c:2e:ad:e4:6c:92:5f:c9:ba:48:
f5:ea:29:85:7f:5c:4d:a2:03:80:aa:26:10:96:88:43:a2:47:
1e:1b:50:02:83:b2:e5:f6:c5:d1:dc:64:ca:2d:ae:3a:58:27:
37:2e:28:fe:aa:e8:89:cc:4c:0a:57:55:6a:40:82:f3:a8:0a:
fc:43:6b:c1:13:2b:fa:0d:cd:2a:01:cf:5f:09:db:4d:5f:88:
14:a1:da:58:1e:db:6f:25:2a:ad:44:19:f9:29:39:ea:c0:c9:
83:e5:55:91:97:9a:6b:30:08:06:59:fd:d3:d5:c1:59:52:ea:
8e:a5:48:fe:8a:df:38:72:1a:d6:2a:1f:77:d8:98:8f:3e:2c:
9f:86:c7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:33 2025 by rpki-client