Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/56gu6la0lJYc7AdiRIHF8PsGYWM.roa
File: 56gu6la0lJYc7AdiRIHF8PsGYWM.roa (raw, json)
Hash identifier: +0zvTEwHefpPwKIlXzluctvPA6N07xoDs0XGNzJmEeQ=
Subject key identifier: E7:A8:2E:EA:56:B4:94:96:1C:EC:07:62:44:81:C5:F0:FB:06:61:63
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 01856D01CC7BC61F176AF3386DEE51304181
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/56gu6la0lJYc7AdiRIHF8PsGYWM.roa
Signing time: Sun 01 Jan 2023 11:05:12 +0000
ROA not before: Sun 01 Jan 2023 11:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203671
IP address blocks: 147.78.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:cc:7b:c6:1f:17:6a:f3:38:6d:ee:51:30:41:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 11:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7a82eea56b494961cec07624481c5f0fb066163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:ac:f3:33:ee:c3:ca:de:3f:b4:7d:e8:90:
36:54:30:76:6e:84:09:37:a4:26:ab:cd:ea:8f:6d:
ae:ae:3c:66:d2:3f:f0:38:6d:c5:26:de:60:ca:d5:
74:a2:1d:bf:46:ef:e1:37:e0:e4:27:d1:49:7d:8a:
94:40:e6:41:81:d3:59:e7:cc:08:ac:b7:47:0d:13:
d8:2e:62:28:f5:6b:de:00:e3:52:d0:25:e6:71:54:
99:8e:a6:85:ec:61:21:82:79:81:82:99:e5:08:85:
98:aa:7c:71:5a:86:43:2d:09:aa:a6:4a:4b:9f:ef:
c7:fb:ad:72:56:e7:5b:38:68:27:89:e3:51:20:88:
a7:fd:3c:15:78:9c:8e:5d:8f:cb:d8:cc:e2:5d:9e:
67:3b:61:50:87:9b:7f:c1:05:9f:96:fd:d3:f5:d4:
0a:8d:f5:2b:f4:42:2a:62:22:1e:30:25:34:52:df:
a4:4f:87:03:96:90:bb:43:cf:19:c0:c9:2e:5b:4e:
b9:aa:55:8b:16:61:81:82:4b:6a:ce:b9:8a:88:70:
88:16:fc:1d:f4:f4:49:b2:72:d1:13:9a:ec:42:02:
04:53:49:b6:ef:fe:2b:70:59:63:fe:f7:b4:88:b3:
ed:ac:7d:f6:f6:6e:73:82:d0:bf:c9:51:c8:c7:90:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A8:2E:EA:56:B4:94:96:1C:EC:07:62:44:81:C5:F0:FB:06:61:63
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/56gu6la0lJYc7AdiRIHF8PsGYWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.216.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f3:2d:5f:61:c5:79:9f:43:c2:79:e6:44:a0:cc:f7:39:cc:
cf:73:97:e8:92:ec:9f:56:1f:b4:e0:1a:66:37:8b:18:94:ca:
fa:df:c4:52:af:cf:41:12:ea:d6:4e:ba:7b:b7:01:d0:bf:d4:
25:a5:71:ce:47:db:a0:96:6c:d2:f5:8f:17:4a:45:7a:b0:e6:
9e:47:f5:fd:48:cb:5a:bd:0d:dd:d7:23:48:76:65:32:ec:0e:
7c:8a:d0:22:4a:4e:b4:0d:5a:59:e9:b5:bc:f9:82:4d:9d:62:
4f:bc:0b:2f:f1:33:c9:10:eb:3f:b0:90:21:9b:60:23:63:03:
a4:b5:5b:79:2e:be:89:a7:c3:fc:58:1c:5c:1d:24:c6:72:63:
17:2e:43:6c:24:c4:86:cc:c9:26:4b:4c:a0:71:b4:8e:32:91:
51:f8:eb:21:f8:16:2c:a7:03:0d:d0:db:5d:38:ee:69:46:b7:
e8:36:9a:d6:cc:01:c3:7e:40:2c:15:5c:4a:b3:ea:f0:5d:62:
ad:91:99:6c:4a:24:a9:e8:8b:55:d8:9c:69:47:49:d6:05:92:
89:24:38:2b:b2:cc:01:fd:86:ec:01:f5:7e:f1:d2:cf:15:29:
a7:c8:5e:54:68:d8:f0:df:c7:e6:6e:08:51:c4:33:70:dc:47:
d5:5d:06:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtAcx7xh8XavM4be5RMEGBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi
Y2RkZmYwHhcNMjMwMTAxMTEwNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2E4MmVlYTU2YjQ5NDk2MWNlYzA3NjI0NDgxYzVmMGZiMDY2MTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzms8zPuw8reP7R96JA2VDB2boQJ
N6Qmq83qj22urjxm0j/wOG3FJt5gytV0oh2/Ru/hN+DkJ9FJfYqUQOZBgdNZ58wI
rLdHDRPYLmIo9WveAONS0CXmcVSZjqaF7GEhgnmBgpnlCIWYqnxxWoZDLQmqpkpL
n+/H+61yVudbOGgnieNRIIin/TwVeJyOXY/L2MziXZ5nO2FQh5t/wQWflv3T9dQK
jfUr9EIqYiIeMCU0Ut+kT4cDlpC7Q88ZwMkuW065qlWLFmGBgktqzrmKiHCIFvwd
9PRJsnLRE5rsQgIEU0m27/4rcFlj/ve0iLPtrH329m5zgtC/yVHIx5BrzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOeoLupWtJSWHOwHYkSBxfD7BmFjMB8GA1UdIwQY
MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt
MjRmZGRjNmQxNDdiLzEvNTZndTZsYTBsSlljN0FkaVJJSEY4UHNHWVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi
LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk07YMA0G
CSqGSIb3DQEBCwUAA4IBAQAE8y1fYcV5n0PCeeZEoMz3OczPc5fokuyfVh+04Bpm
N4sYlMr638RSr89BEurWTrp7twHQv9QlpXHOR9uglmzS9Y8XSkV6sOaeR/X9SMta
vQ3d1yNIdmUy7A58itAiSk60DVpZ6bW8+YJNnWJPvAsv8TPJEOs/sJAhm2AjYwOk
tVt5Lr6Jp8P8WBxcHSTGcmMXLkNsJMSGzMkmS0ygcbSOMpFR+Osh+BYspwMN0Ntd
OO5pRrfoNprWzAHDfkAsFVxKs+rwXWKtkZlsSiSp6ItV2JxpR0nWBZKJJDgrsswB
/YbsAfV+8dLPFSmnyF5UaNjw38fmbghRxDNw3EfVXQZg
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:39:08 2025 by rpki-client