Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/lCgmr_XGKmVFxjrMNQZfz_gK7D4.roa
File: lCgmr_XGKmVFxjrMNQZfz_gK7D4.roa (raw, json)
Hash identifier: mLbnmSbQ6vGnKj69SLVqu+Yh8gagKvZ4GHe9rwR2Lj0=
Subject key identifier: 94:28:26:AF:F5:C6:2A:65:45:C6:3A:CC:35:06:5F:CF:F8:0A:EC:3E
Certificate issuer: /CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Certificate serial: 0194244548657221960D576CAF9F003023C9
Authority key identifier: 87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/lCgmr_XGKmVFxjrMNQZfz_gK7D4.roa
Signing time: Wed 01 Jan 2025 23:48:27 +0000
ROA not before: Wed 01 Jan 2025 23:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 78.108.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:48:65:72:21:96:0d:57:6c:af:9f:00:30:23:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Validity
Not Before: Jan 1 23:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=942826aff5c62a6545c63acc35065fcff80aec3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:96:de:1a:3c:52:79:75:fb:07:64:26:9c:
79:60:f1:88:85:90:0d:13:19:14:d2:f6:cb:54:20:
a3:bb:86:f2:72:71:3f:8d:95:94:9b:fd:8d:09:d1:
6a:87:4d:15:52:7d:c6:23:7c:5f:b7:23:29:62:ff:
74:21:e9:54:d4:f5:ff:d1:00:89:e9:a7:47:99:1e:
44:dd:1a:57:e4:5c:cd:dc:46:ca:ce:40:7a:b3:8a:
b2:08:db:63:1e:98:c5:18:1e:b3:e9:5d:8c:25:ae:
9d:13:6f:f5:99:ef:2b:30:3f:48:73:8e:8c:0d:3d:
ed:d1:01:4d:84:fc:69:32:62:e6:07:c8:cc:dd:76:
2b:89:01:aa:57:10:32:5b:e0:6b:3e:b0:d0:7b:ea:
87:f8:88:96:d8:af:17:38:f8:fb:10:cb:00:21:aa:
f3:26:08:a0:df:ee:a3:9c:f8:ce:a9:f1:1b:e2:e9:
58:bb:38:44:39:5c:03:f5:f2:c4:e3:6a:a9:88:7d:
df:0e:4c:69:2e:0f:b5:4b:d3:2d:31:75:46:8d:62:
92:16:66:28:a9:be:c6:c0:c6:13:6a:bd:22:f4:2d:
a8:73:89:93:ec:3b:55:26:62:b5:e7:fe:3c:f4:78:
9e:fe:09:78:45:6e:63:88:c2:a8:f1:19:93:23:b0:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:28:26:AF:F5:C6:2A:65:45:C6:3A:CC:35:06:5F:CF:F8:0A:EC:3E
X509v3 Authority Key Identifier:
keyid:87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/lCgmr_XGKmVFxjrMNQZfz_gK7D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.124.0/23
Signature Algorithm: sha256WithRSAEncryption
00:31:4d:8b:2c:55:de:c7:5b:ef:6a:26:8d:30:3f:93:7c:21:
02:92:6b:80:b1:27:f7:9d:20:2d:ff:e5:4d:12:e3:69:ad:7c:
35:53:8a:91:60:19:f0:bb:bd:40:67:13:ac:d5:d8:15:b9:67:
a8:15:a2:33:54:59:ee:54:e7:af:d4:75:74:a0:bf:c7:92:72:
4a:7c:a3:11:66:cb:bf:9a:75:c3:fd:25:4d:1c:2e:33:d0:d7:
c4:65:5c:9d:46:ae:65:8e:46:3f:d1:4e:13:97:00:ab:a2:0d:
3c:7a:a2:1d:83:05:07:49:ed:2f:d7:4e:86:a4:01:60:1d:9e:
6f:65:92:ef:58:fb:82:51:d2:1c:ca:10:b1:27:c0:b5:08:66:
5a:de:a2:fd:f6:14:62:54:85:ad:db:6a:4b:63:0f:0e:bc:75:
7d:2b:62:de:1c:e8:cc:a1:f3:01:6e:92:76:c1:4f:be:91:76:
a2:ff:44:d5:38:cc:73:1a:4b:cf:49:2d:a0:b7:46:61:13:9c:
6e:c3:db:eb:e6:e8:41:2f:69:fa:66:a6:b8:2f:76:05:f7:2b:
1b:8d:77:21:e0:83:cd:16:39:33:c0:22:2d:f2:3c:de:b8:d8:
f1:8a:44:76:21:f5:e0:f4:71:49:a3:f7:bc:51:50:d5:fc:72:
39:00:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:46:20 2025 by rpki-client