Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/78KScp2LVWw2hOVmr_h_Gkcv34A.roa
File: 78KScp2LVWw2hOVmr_h_Gkcv34A.roa (raw, json)
Hash identifier: Ptq/z1pA4OnP8t08S5vn7Az3pzr/nZN/5vkEHzVtW1s=
Subject key identifier: EF:C2:92:72:9D:8B:55:6C:36:84:E5:66:AF:F8:7F:1A:47:2F:DF:80
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 0194221FA4B3E5E2EF01436625F420F2D04E
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/78KScp2LVWw2hOVmr_h_Gkcv34A.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 45.149.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a4:b3:e5:e2:ef:01:43:66:25:f4:20:f2:d0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efc292729d8b556c3684e566aff87f1a472fdf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:f2:04:ab:f7:64:8a:b7:c7:45:b4:29:37:
91:86:72:cd:6c:ff:1f:e5:0b:dc:51:1c:a6:9d:d6:
dc:80:f9:60:7a:cd:8a:7f:59:f6:44:7f:89:4e:15:
a4:11:b9:99:47:9e:65:1b:f4:bd:66:c5:e2:5d:d2:
1b:9c:54:e7:22:ce:1c:55:5b:3d:f0:fc:1d:34:f4:
0b:d2:9c:bf:19:84:52:11:bc:d1:a0:c3:87:fc:04:
5e:e3:50:0f:88:20:ea:ad:d8:a9:38:65:1a:15:c8:
02:3e:8b:0e:b8:85:cf:47:34:1a:90:3d:f9:b4:5f:
78:bb:c5:e6:97:9c:48:6d:be:17:f0:27:59:d9:3c:
dd:21:c5:4f:e5:e5:e1:2f:66:53:58:79:05:31:97:
34:88:65:1e:f6:78:00:88:d2:c2:38:91:ed:7c:9c:
9c:71:63:05:ee:b3:ab:58:30:7e:cb:50:73:d6:54:
39:e4:3f:91:ea:a6:48:d9:29:26:2b:ee:a0:6e:6e:
7f:6e:7b:a6:bb:d7:59:e3:1d:aa:a5:fa:38:e8:b5:
a2:1a:f3:d1:d2:c5:d5:73:f1:e5:7e:e6:ea:77:27:
5e:d3:e8:54:f5:a5:21:65:98:84:28:12:fc:57:8a:
e1:53:64:8f:5f:11:c0:f0:c9:d1:9b:d1:5d:98:87:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C2:92:72:9D:8B:55:6C:36:84:E5:66:AF:F8:7F:1A:47:2F:DF:80
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/78KScp2LVWw2hOVmr_h_Gkcv34A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ec:3d:b9:f5:a6:6e:b3:1a:5a:7d:7c:cc:34:be:35:f0:60:
9c:22:5f:62:a9:a5:a7:fa:31:ad:c4:02:26:42:da:7d:97:1d:
77:87:26:86:85:6a:80:82:b9:7e:95:8a:ac:30:07:bf:1b:4b:
09:69:2b:a7:ac:21:fe:94:1e:5a:a3:01:e0:30:f5:99:d9:cd:
65:b4:fa:b8:6a:de:68:a8:c1:00:74:f2:1f:71:23:56:9f:ac:
b3:df:62:e3:61:6e:4c:17:e4:2f:ae:d8:9f:16:84:35:36:57:
56:6c:73:d0:57:06:14:15:50:00:7c:a3:1a:b4:5f:b3:bf:bf:
60:0d:5c:1c:67:aa:bc:37:61:5b:39:a9:a8:87:6c:ee:da:c0:
59:46:69:7e:00:74:5b:d4:88:28:90:59:fc:16:f9:a2:dc:04:
fa:68:b1:1a:35:37:6f:45:b9:05:f5:b1:d3:10:7b:fb:e0:f8:
cc:2e:eb:e7:13:b4:26:5f:3e:35:51:b1:26:d4:b2:ad:32:bb:
eb:32:8a:11:85:4d:41:d0:6c:46:51:f3:4f:d3:c5:aa:91:59:
e4:fe:c7:0f:e2:97:65:3f:b0:6b:fe:c0:ec:cc:ee:45:ab:8c:
1f:a3:62:de:16:8d:5b:c4:13:1b:2c:cf:fa:a2:d5:e1:53:fb:
c7:b3:2e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:33:02 2025 by rpki-client