Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/odvTn0zqk4B3qapAg8YpPPYvMcg.roa
File: odvTn0zqk4B3qapAg8YpPPYvMcg.roa (raw, json)
Hash identifier: ZgeRC+L/JfFIG5nYdklAYiP1xmas3CLAGfY+Zco/GyU=
Subject key identifier: A1:DB:D3:9F:4C:EA:93:80:77:A9:AA:40:83:C6:29:3C:F6:2F:31:C8
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E8379F6F6CFDBCCF656D15251A4CBC
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/odvTn0zqk4B3qapAg8YpPPYvMcg.roa
Signing time: Mon 02 Jan 2023 14:34:59 +0000
ROA not before: Mon 02 Jan 2023 14:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57223
IP address blocks: 78.28.233.0/24 maxlen: 24
78.28.230.0/24 maxlen: 24
78.28.255.0/24 maxlen: 24
78.28.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:37:9f:6f:6c:fd:bc:cf:65:6d:15:25:1a:4c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1dbd39f4cea938077a9aa4083c6293cf62f31c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:f6:0c:6f:82:2b:d6:5d:b2:4f:e4:92:2f:
36:8d:62:83:4f:1c:2b:57:6b:30:b8:c8:2e:0b:14:
9f:b4:3d:8e:49:f3:27:32:7b:53:6c:79:dc:25:93:
a0:31:1f:e1:ca:12:6a:af:f2:77:65:d1:bc:0a:6d:
9a:32:a1:e7:a4:63:66:b7:fa:98:b8:64:0c:49:16:
bf:ca:0e:6e:b6:37:92:fd:13:0d:29:61:5c:90:9a:
5e:58:2c:54:8e:b4:51:e3:58:58:41:5d:5c:99:88:
90:ce:2b:51:67:ae:ac:4c:5f:e1:c1:8e:e7:b2:78:
e7:3a:78:f7:df:ce:46:66:27:45:72:77:45:ee:13:
45:c5:e1:5a:c5:4c:72:a9:04:b2:2b:3f:e3:49:94:
bb:48:c5:9e:5d:2f:fe:2e:2f:2e:dc:b5:a8:5d:c8:
5e:e7:c6:8b:5d:bc:9b:87:c4:5d:9c:9d:2c:2b:b6:
08:ba:c3:46:79:aa:36:d0:c5:91:50:54:3a:e5:ca:
22:73:bb:e6:56:e3:02:7b:4e:7f:92:e4:4c:5c:38:
e8:73:cc:3e:1c:d1:0b:12:25:99:9c:15:4e:f7:0c:
60:ef:78:d4:4b:cc:e8:a3:9c:39:fa:47:df:7d:e2:
ea:db:3c:31:80:60:51:56:94:28:8d:f5:2e:5f:79:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DB:D3:9F:4C:EA:93:80:77:A9:AA:40:83:C6:29:3C:F6:2F:31:C8
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/odvTn0zqk4B3qapAg8YpPPYvMcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.28.194.0/24
78.28.230.0/24
78.28.233.0/24
78.28.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:08:3f:62:95:b1:13:5f:ee:09:71:d7:9c:f4:e7:b2:01:d2:
02:7b:27:ec:93:40:a1:6d:d5:20:6a:30:90:02:38:ae:1f:89:
64:95:2a:b0:91:ba:03:29:34:d9:b6:1e:65:26:7d:83:7e:65:
9e:a6:92:18:7e:c9:2d:e9:f8:0c:57:92:65:08:b9:b0:4c:f7:
f5:f9:c1:8a:52:3f:a4:50:ad:fa:a8:1c:ef:f3:ea:76:8c:e0:
01:41:45:14:c9:68:c8:8a:f1:ea:a7:c0:53:f9:60:d5:86:c3:
36:58:a9:f5:87:fd:74:80:38:dd:3a:85:d8:2f:f7:f8:1e:d5:
25:30:28:df:8f:31:18:b2:a1:af:d3:7a:93:54:a7:52:a3:33:
95:25:cb:73:6a:3d:ed:a1:be:ec:fd:46:c7:53:21:55:93:6b:
d8:16:9b:64:49:8b:65:5e:ad:61:c4:06:c2:95:e9:9b:aa:d3:
58:f7:bd:66:ca:9d:ad:57:71:52:4f:a7:5f:ed:e5:49:a5:f6:
15:14:1a:d4:8d:b1:8b:6a:de:13:a5:42:e8:16:ea:b0:60:78:
63:cd:dd:88:05:2c:6b:1b:3d:31:4d:22:58:25:fb:b6:e0:24:
20:73:93:1e:f8:7e:1f:5d:0d:8c:f5:89:6d:81:17:d9:d9:12:
81:4e:2f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:46:13 2025 by rpki-client