Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/UJ3xF6-J16Fa8k3eaGL7GyfbMsM.roa
File: UJ3xF6-J16Fa8k3eaGL7GyfbMsM.roa (raw, json)
Hash identifier: +l2bpUdZY142qcpXeo96uEK0+oOCrNS16D7kEOarOhI=
Subject key identifier: 50:9D:F1:17:AF:89:D7:A1:5A:F2:4D:DE:68:62:FB:1B:27:DB:32:C3
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 019425FD81FDFDE76F67E7047DF0D2DABE4D
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/UJ3xF6-J16Fa8k3eaGL7GyfbMsM.roa
Signing time: Thu 02 Jan 2025 07:49:18 +0000
ROA not before: Thu 02 Jan 2025 07:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58250
IP address blocks: 78.93.10.0/24 maxlen: 24
78.93.82.0/23 maxlen: 23
78.93.117.0/24 maxlen: 24
78.93.178.0/24 maxlen: 24
86.60.32.0/19 maxlen: 19
86.60.56.0/21 maxlen: 21
86.60.127.0/24 maxlen: 24
212.93.203.0/24 maxlen: 24
2a02:df4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:81:fd:fd:e7:6f:67:e7:04:7d:f0:d2:da:be:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Jan 2 07:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=509df117af89d7a15af24dde6862fb1b27db32c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:67:d6:c1:1d:6c:29:c7:f6:5e:14:c4:4f:
4e:9c:53:7f:f7:40:9d:a4:5d:a4:f7:91:89:ee:71:
6b:4f:ba:e6:72:dc:9c:90:4c:96:13:ab:5b:73:f2:
a8:a2:d9:70:24:22:66:61:64:ca:42:50:3e:26:46:
e7:85:eb:03:1e:c7:a3:a5:d4:8f:af:9a:a3:eb:2c:
f0:6d:55:8a:b7:b8:f7:86:7a:1f:4d:1e:0b:42:c7:
d2:c9:4e:29:33:81:3e:29:5a:3f:97:f6:0d:cb:df:
34:3a:95:2f:13:99:af:ce:4c:1d:03:21:81:d5:54:
d6:49:71:22:c5:a9:86:53:21:aa:ba:5b:15:1f:07:
2b:f9:f6:84:9f:58:95:87:17:7d:a5:e9:be:fc:08:
4e:d2:4a:f9:41:2a:fe:ad:60:5f:ea:b2:5b:72:93:
6e:6f:b4:aa:45:28:a3:fb:33:73:fd:93:79:34:35:
21:9b:86:37:bd:b8:0b:4a:09:65:9d:74:4f:d5:4d:
75:bc:fb:91:7b:b4:9b:89:75:00:f1:2f:f4:4e:6d:
61:fc:b5:5d:7e:4a:8d:c5:a9:12:99:48:49:be:fd:
36:6f:a5:a1:61:fc:be:29:0f:51:e2:04:44:ff:23:
15:ed:82:45:9b:e0:4a:af:bd:5b:ad:d5:9e:2a:67:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9D:F1:17:AF:89:D7:A1:5A:F2:4D:DE:68:62:FB:1B:27:DB:32:C3
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/UJ3xF6-J16Fa8k3eaGL7GyfbMsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.93.10.0/24
78.93.82.0/23
78.93.117.0/24
78.93.178.0/24
86.60.32.0/19
86.60.127.0/24
212.93.203.0/24
IPv6:
2a02:df4::/32
Signature Algorithm: sha256WithRSAEncryption
29:30:bb:c3:fd:30:91:13:86:61:25:79:06:89:4a:c2:ac:e7:
82:da:a8:bc:bf:70:28:ac:67:81:6b:a5:35:9d:a1:4e:7f:c9:
b5:11:14:9a:0b:ee:b1:4d:94:75:d6:ca:2d:51:91:ee:24:b7:
8c:08:73:7c:94:c3:c2:4f:62:48:9e:77:27:b2:0e:b7:79:d7:
f2:8f:5f:f4:e4:b9:c1:ec:84:74:ee:3e:71:b0:38:95:cc:e6:
17:be:44:af:92:fe:6f:cc:6e:9a:31:e6:e9:13:56:22:a7:2d:
ef:30:81:54:30:f8:f2:05:f1:01:c4:15:e9:7a:f2:8c:21:4b:
b7:df:9f:c5:9d:32:57:f3:2c:f1:a2:56:83:ed:00:26:b7:e4:
05:4a:55:fc:e9:3f:84:0f:99:31:4f:05:87:de:4b:a9:a3:64:
83:5a:dd:ca:5d:ef:19:f7:35:94:3f:4d:97:26:c8:49:fb:4e:
3a:25:37:57:87:68:48:c4:05:a5:d6:e1:7b:ba:34:94:27:29:
ee:a5:8d:ed:6b:39:6a:53:9b:c8:b7:72:83:ad:dc:10:32:d8:
bf:75:96:c8:c1:26:16:e4:38:7c:9a:d2:60:98:8b:7e:ad:3d:
64:a4:bf:ff:7f:62:5c:59:13:33:6a:83:69:b3:c6:f4:01:79:
74:08:09:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:43 2025 by rpki-client