Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/mmjcJ5mRHHvtoWGmfCfndX-I0nE.roa
File: mmjcJ5mRHHvtoWGmfCfndX-I0nE.roa (raw, json)
Hash identifier: XJ8W6auBJZmG59tDkBVeAttPeBBOTBWVE2NfyT5YHGc=
Subject key identifier: 9A:68:DC:27:99:91:1C:7B:ED:A1:61:A6:7C:27:E7:75:7F:88:D2:71
Certificate issuer: /CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Certificate serial: 01942445490BC5682E9674056C7D98BD10FA
Authority key identifier: 87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/mmjcJ5mRHHvtoWGmfCfndX-I0nE.roa
Signing time: Wed 01 Jan 2025 23:48:27 +0000
ROA not before: Wed 01 Jan 2025 23:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16815
IP address blocks: 78.108.116.0/24 maxlen: 24
78.108.117.0/24 maxlen: 24
78.108.118.0/24 maxlen: 24
78.108.119.0/24 maxlen: 24
78.108.120.0/24 maxlen: 24
78.108.121.0/24 maxlen: 24
78.108.124.0/23 maxlen: 23
78.108.126.0/24 maxlen: 24
78.108.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:49:0b:c5:68:2e:96:74:05:6c:7d:98:bd:10:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Validity
Not Before: Jan 1 23:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a68dc2799911c7beda161a67c27e7757f88d271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:f6:ab:6b:f5:a7:3e:c0:41:cf:23:07:39:
08:c2:11:b9:c3:71:d6:c7:df:09:c3:51:12:c0:b9:
92:b2:85:08:14:c9:62:95:62:2a:6b:73:3e:ea:b3:
d7:7e:78:2b:fe:68:a1:cb:a7:bf:ab:bb:00:cb:a0:
f2:42:99:5c:db:2e:a1:8f:88:45:ec:47:3f:ca:e4:
3a:67:7b:0e:0a:48:e3:9e:b9:0d:b3:24:c7:c4:c7:
ea:30:0c:f6:b6:f8:75:bc:d3:d8:32:3b:02:7d:91:
f7:d9:96:a1:99:4f:8d:3f:ae:7d:ac:96:9e:ce:e5:
b2:fb:c7:df:cc:30:6e:41:64:8c:7d:89:24:c4:bf:
ce:5a:7f:f9:3a:b9:a3:92:89:c8:82:61:ce:22:12:
34:29:a4:2f:56:1d:3d:79:f8:86:6e:ce:73:08:f2:
2d:93:3e:e1:5f:d3:34:c3:93:76:ae:f4:f0:a8:33:
94:da:2d:c4:d4:a4:92:0b:7c:a5:32:c4:fa:f0:10:
8b:80:1a:5c:7d:55:fb:3d:80:02:2b:0a:ec:e7:e3:
06:f6:7a:d2:da:f4:6d:f3:06:03:84:07:42:01:cd:
85:47:c7:24:00:9b:bc:8b:8b:0c:42:ab:9b:b7:ae:
fd:d5:8c:83:0b:6c:53:2c:96:55:33:2c:64:ca:af:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:68:DC:27:99:91:1C:7B:ED:A1:61:A6:7C:27:E7:75:7F:88:D2:71
X509v3 Authority Key Identifier:
keyid:87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/mmjcJ5mRHHvtoWGmfCfndX-I0nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.116.0-78.108.121.255
78.108.124.0/22
Signature Algorithm: sha256WithRSAEncryption
20:74:56:62:48:0a:50:0a:c7:9a:2e:f2:0b:91:bf:dc:0e:14:
a6:a7:4b:25:d7:7c:89:b2:ec:bd:8b:23:0d:e0:b5:78:fd:85:
15:b9:b6:85:f2:56:c0:bf:78:ce:8a:35:48:3e:d4:af:ac:dd:
0b:ef:cc:f7:be:4a:95:1a:0f:85:92:73:a3:d7:a7:25:2f:97:
0d:11:a8:7a:1f:a4:64:13:c5:75:94:d7:0b:5c:db:be:db:8e:
ac:b7:62:c0:20:23:b0:d3:e5:d4:79:29:83:e3:aa:5f:52:a9:
79:fe:d6:b1:6f:e2:60:5a:11:fe:29:21:02:0b:aa:00:df:0e:
83:0b:d6:b0:d4:4b:2a:1a:68:a8:d5:c4:a9:d6:39:c4:70:85:
b7:35:23:ba:fc:18:17:00:4c:34:46:7e:2e:85:69:07:60:2f:
3c:dc:a1:6a:5a:ed:76:c8:00:89:35:4f:16:a8:38:c2:32:84:
11:29:c7:27:57:a8:4f:98:32:e3:48:3f:d1:fc:06:04:5a:1a:
c4:fa:ed:0b:7c:80:5f:d7:2e:aa:c5:91:ae:2e:55:f2:2b:d1:
09:cc:9f:60:39:5f:24:3e:26:e3:d3:3a:06:8f:f9:44:a9:a4:
07:6c:f8:61:a6:79:f7:72:41:48:18:21:2d:0e:b0:ef:42:ea:
80:35:7e:d9
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQkRUkLxWgulnQFbH2YvRD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YWUwYWYyODJkZDRlOWJjMWI4MjE5NGFlZDNiMTk2OTNk
ODcyOTgwHhcNMjUwMTAxMjM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTY4ZGMyNzk5OTExYzdiZWRhMTYxYTY3YzI3ZTc3NTdmODhkMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nz2q2v1pz7AQc8jBzkIwhG5w3HW
x98Jw1ESwLmSsoUIFMlilWIqa3M+6rPXfngr/mihy6e/q7sAy6DyQplc2y6hj4hF
7Ec/yuQ6Z3sOCkjjnrkNsyTHxMfqMAz2tvh1vNPYMjsCfZH32ZahmU+NP659rJae
zuWy+8ffzDBuQWSMfYkkxL/OWn/5OrmjkonIgmHOIhI0KaQvVh09efiGbs5zCPIt
kz7hX9M0w5N2rvTwqDOU2i3E1KSSC3ylMsT68BCLgBpcfVX7PYACKwrs5+MG9nrS
2vRt8wYDhAdCAc2FR8ckAJu8i4sMQqubt6791YyDC2xTLJZVMyxkyq87cQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJpo3CeZkRx77aFhpnwn53V/iNJxMB8GA1UdIwQY
MBaAFIeuCvKC3U6bwbghlK7TsZaT2HKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDY0SzhvTGRUcHZCdUNHVXJ0T3hscFBZY3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81Y2ZjNDctMjIxMC00NzM5LWE5NjQt
Y2VmMDEzNjJjNGE4LzEvbW1qY0o1bVJISHZ0b1dHbWZDZm5kWC1JMG5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81Y2ZjNDctMjIxMC00NzM5LWE5NjQtY2VmMDEzNjJjNGE4
LzEvaDY0SzhvTGRUcHZCdUNHVXJ0T3hscFBZY3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJObHQD
BAFObHgDBAJObHwwDQYJKoZIhvcNAQELBQADggEBACB0VmJIClAKx5ou8guRv9wO
FKanSyXXfImy7L2LIw3gtXj9hRW5toXyVsC/eM6KNUg+1K+s3QvvzPe+SpUaD4WS
c6PXpyUvlw0RqHofpGQTxXWU1wtc277bjqy3YsAgI7DT5dR5KYPjql9SqXn+1rFv
4mBaEf4pIQILqgDfDoML1rDUSyoaaKjVxKnWOcRwhbc1I7r8GBcATDRGfi6FaQdg
LzzcoWpa7XbIAIk1TxaoOMIyhBEpxydXqE+YMuNIP9H8BgRaGsT67Qt8gF/XLqrF
ka4uVfIr0QnMn2A5XyQ+JuPTOgaP+USppAds+GGmefdyQUgYIS0OsO9C6oA1ftk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:27:38 2025 by rpki-client