Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/qssVYILZOfcKPrERwHJsdcAEAxo.roa
File: qssVYILZOfcKPrERwHJsdcAEAxo.roa (raw, json)
Hash identifier: aypJMXGc5TZRVeKZ406H5SBLHoHdQ4adjaagv1AJ5es=
Subject key identifier: AA:CB:15:60:82:D9:39:F7:0A:3E:B1:11:C0:72:6C:75:C0:04:03:1A
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E8388D35BA8CC4E84FED87DAB4C6F7
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/qssVYILZOfcKPrERwHJsdcAEAxo.roa
Signing time: Mon 02 Jan 2023 14:34:59 +0000
ROA not before: Mon 02 Jan 2023 14:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59615
IP address blocks: 78.28.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:38:8d:35:ba:8c:c4:e8:4f:ed:87:da:b4:c6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aacb156082d939f70a3eb111c0726c75c004031a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:c0:e2:80:74:25:cc:95:13:e3:a3:77:65:
fb:b6:35:31:1a:6a:f6:cf:15:fe:8e:6c:dd:a6:55:
e1:50:a6:55:4f:8b:d9:b2:07:48:7f:59:b1:df:83:
20:5b:ef:fb:48:1c:e2:56:7c:f6:da:4a:6c:08:34:
e6:0e:f1:3e:6e:29:2a:a4:b9:2f:aa:21:7b:64:8b:
b9:58:b1:d5:e2:82:ca:6b:0d:40:9f:50:7d:ff:4c:
72:51:ff:85:95:f5:d5:75:97:57:ce:c2:ec:2d:d2:
28:8f:62:ac:31:9e:d9:d0:b4:4a:83:63:8d:49:56:
cb:f9:61:44:36:4e:da:68:29:ef:0f:93:25:90:b8:
b8:18:62:5e:77:af:69:42:cf:30:c2:99:e2:9a:3c:
32:3b:7c:28:47:95:2d:6d:4b:0e:c8:88:b7:8c:78:
f2:75:41:6b:23:56:f2:f2:34:9b:c2:fa:cc:73:6d:
3f:55:b3:a1:a1:57:2f:ba:01:7f:19:50:28:8e:b1:
32:fb:13:6c:42:61:dd:d0:cc:aa:b1:5f:80:87:b3:
1e:b5:0c:c3:5a:97:bf:f3:56:4b:f5:50:f8:78:de:
88:8e:b0:9e:f3:04:97:6c:26:be:85:15:2a:0f:c0:
79:63:aa:68:72:86:05:74:3b:2b:0c:83:48:f4:a4:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CB:15:60:82:D9:39:F7:0A:3E:B1:11:C0:72:6C:75:C0:04:03:1A
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/qssVYILZOfcKPrERwHJsdcAEAxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.28.234.0/24
Signature Algorithm: sha256WithRSAEncryption
26:82:44:2e:67:fa:55:0e:35:6e:48:70:dd:e3:5b:fe:79:77:
54:87:f9:84:72:70:46:0b:f9:a6:8c:3d:e3:de:d4:ae:09:9b:
19:e8:81:f9:6e:86:50:35:c2:99:33:a6:75:9b:e1:19:d4:a4:
49:ee:7f:ad:d8:7e:06:45:ef:31:ae:f9:a2:50:d0:6d:e3:08:
c7:43:1f:13:b6:b0:42:1a:da:12:12:68:de:71:c7:35:b8:76:
f2:c6:07:99:7d:8a:eb:ee:53:90:25:49:66:ad:b3:28:09:76:
5d:eb:79:e8:f3:67:c4:c1:89:f9:9d:b3:d0:80:89:19:6e:29:
8c:f3:61:8e:a4:e8:94:fe:7e:82:3b:67:38:eb:ce:b4:b0:38:
ce:86:5e:ed:96:4c:e3:b6:8b:b8:83:de:04:c2:45:0f:95:b3:
ac:b4:c3:93:cf:1e:1a:37:1c:6f:a8:fe:3d:f2:ae:da:d4:ae:
e5:10:14:ed:b9:d6:65:7e:5e:2d:fe:77:fa:21:eb:8a:cc:0e:
5c:4c:f7:05:c9:e2:40:b3:4d:ae:7a:15:bf:9a:2c:92:ba:0d:
0e:8a:14:b9:1f:30:05:1a:f7:72:7a:48:e8:c3:a6:c8:dc:33:
c4:f0:1e:8f:6f:4e:c1:05:f4:02:87:89:73:b2:b5:97:35:d9:
1a:72:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:17:10 2025 by rpki-client