Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/BOBgwQPsKXUo9GzpTtJWLmuHKao.roa
File: BOBgwQPsKXUo9GzpTtJWLmuHKao.roa (raw, json)
Hash identifier: t31DUf3VuVsE55kZKdOM/CwyGRToQ0y9LdW//yyGoxE=
Subject key identifier: 04:E0:60:C1:03:EC:29:75:28:F4:6C:E9:4E:D2:56:2E:6B:87:29:AA
Certificate issuer: /CN=aae1356e6404c0b702d5b3813a934435aaec0c98
Certificate serial: 01942748914BEF0E1FB7DC47BEF6022A4461
Authority key identifier: AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/BOBgwQPsKXUo9GzpTtJWLmuHKao.roa
Signing time: Thu 02 Jan 2025 13:50:54 +0000
ROA not before: Thu 02 Jan 2025 13:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43611
IP address blocks: 78.24.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:91:4b:ef:0e:1f:b7:dc:47:be:f6:02:2a:44:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae1356e6404c0b702d5b3813a934435aaec0c98
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04e060c103ec297528f46ce94ed2562e6b8729aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:29:2c:45:38:c5:71:8c:2f:f8:54:c3:6d:
82:0f:4d:8d:92:9b:53:20:a9:c7:9a:7c:4e:20:bf:
25:da:1f:b2:47:72:b7:e6:8f:06:5b:e1:80:37:70:
74:bc:69:2e:7c:7e:1f:f7:1a:33:14:15:59:ab:ae:
3d:35:8b:84:92:c7:f4:fd:1e:7e:cd:5f:5e:78:ca:
da:e4:a7:57:02:c4:af:2e:04:71:48:cc:a2:2f:2a:
d8:53:00:0d:c8:ff:ec:96:0a:48:ac:f4:99:d0:9d:
f2:ac:e7:8e:50:17:e6:45:ba:24:c3:a0:e9:a9:82:
4a:73:44:16:c3:fd:3d:f0:88:23:cc:ca:a5:b8:50:
3f:1a:a1:f7:f3:83:1e:87:d1:aa:11:75:6e:f0:e0:
ea:2b:12:94:ce:12:e6:1a:5c:d0:30:87:02:16:cd:
d7:52:0b:9f:f1:58:f7:4a:23:0f:c5:bd:54:fb:32:
db:2c:d7:14:8e:f3:64:b0:41:98:1c:0b:b6:1e:c3:
a7:09:8d:fe:3f:1e:c3:ac:0a:de:8b:bd:66:90:0e:
32:55:75:57:49:33:3b:d7:fe:00:ee:5e:94:36:fb:
2f:af:ba:c4:74:83:84:46:d6:bf:a7:32:74:32:bf:
5f:58:49:99:ea:0f:87:85:83:21:63:9a:63:cb:cd:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E0:60:C1:03:EC:29:75:28:F4:6C:E9:4E:D2:56:2E:6B:87:29:AA
X509v3 Authority Key Identifier:
keyid:AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/BOBgwQPsKXUo9GzpTtJWLmuHKao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.80.0/21
Signature Algorithm: sha256WithRSAEncryption
91:f4:b9:0d:6b:c0:42:62:ac:65:78:53:5d:aa:e5:98:7c:be:
5c:21:0f:40:ce:77:d8:6b:28:56:0d:f5:42:51:87:7a:53:84:
0f:62:bc:27:88:1a:47:91:29:20:c1:dc:df:a9:e3:ff:83:68:
fe:90:a5:28:01:6a:1f:b6:24:eb:ef:95:85:a4:c2:14:69:8e:
fe:c7:fa:da:bb:67:c2:5c:e6:8a:76:70:a9:2e:e7:58:ac:36:
96:f7:56:42:1f:14:d5:53:ec:36:16:d2:3a:cc:0f:ad:c1:0b:
be:eb:f0:7b:54:32:5d:fd:7b:87:64:63:2d:a9:ec:20:f1:41:
c5:25:68:f9:a2:02:44:9b:a1:8d:7f:4a:4f:27:64:7a:2b:23:
ae:b8:8a:37:b0:31:26:5e:38:cf:47:19:0b:20:79:81:9a:d2:
a0:b2:a0:9d:04:0c:a9:a5:43:2a:12:a3:80:61:77:61:a9:aa:
87:60:2a:ef:d5:70:22:09:bf:20:2e:78:d2:8b:5c:6b:8c:3c:
55:e6:bf:c9:dc:3c:6c:a2:49:62:49:9a:2d:c3:d1:96:e7:70:
6d:eb:ad:b0:c3:7b:0c:4c:e3:83:3a:4a:0a:8c:27:a1:42:a3:
7b:ac:e2:87:01:16:5e:b8:9b:71:d7:34:f8:ca:48:a0:e5:27:
db:70:43:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:38 2025 by rpki-client