Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Qgiwvi8lSaeXRgLzCmLGE3VC76U.roa
File: Qgiwvi8lSaeXRgLzCmLGE3VC76U.roa (raw, json)
Hash identifier: pTh7eRdsrceH2ekWelyYA8kU9tA/3zKMBq/nWNBmD2I=
Subject key identifier: 42:08:B0:BE:2F:25:49:A7:97:46:02:F3:0A:62:C6:13:75:42:EF:A5
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428282E7F1A0DC5B3BFC90190C6100D20
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Qgiwvi8lSaeXRgLzCmLGE3VC76U.roa
Signing time: Thu 02 Jan 2025 17:55:09 +0000
ROA not before: Thu 02 Jan 2025 17:55:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206410
IP address blocks: 78.83.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:2e:7f:1a:0d:c5:b3:bf:c9:01:90:c6:10:0d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4208b0be2f2549a7974602f30a62c6137542efa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:de:94:4a:ab:4e:f6:ab:f2:7b:bc:95:bc:
ac:fa:05:9c:90:b0:0c:41:2e:b0:cf:37:4d:82:ee:
71:6c:c9:b3:88:3d:c3:53:a2:03:fe:29:d0:9a:fe:
f1:3e:c7:f9:78:66:67:85:ac:8b:af:6d:8c:7d:22:
62:9b:8c:0b:e4:8a:35:cc:98:96:15:7a:47:6c:7a:
8a:76:47:a3:3d:8b:ca:99:a7:e8:80:ba:01:06:e3:
18:f9:92:a2:87:e5:ce:84:b4:86:97:73:cc:ee:b1:
da:e1:51:0b:98:ef:7d:8e:84:7a:72:ce:6a:06:02:
e6:86:16:29:88:ea:d1:f5:17:74:47:ac:1e:10:73:
e5:3b:4a:1c:26:1b:51:18:a2:14:05:a2:2f:78:f1:
bf:f3:dc:ee:5b:8f:dd:0b:c7:0b:20:ff:93:30:06:
f9:5d:74:16:e1:62:70:dc:3f:9d:12:1b:56:a8:60:
b3:27:33:8e:7a:00:70:ed:f4:04:ac:87:01:1d:64:
bd:b6:81:3c:54:9a:26:93:78:fa:3b:6c:2b:f2:f7:
23:fa:70:b1:cb:43:24:57:4e:68:85:40:e9:14:11:
e0:70:75:2e:d0:e1:94:9b:45:45:88:50:3f:a9:34:
62:07:f7:b8:ea:68:5e:ef:e0:46:8f:11:c1:2c:de:
62:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:08:B0:BE:2F:25:49:A7:97:46:02:F3:0A:62:C6:13:75:42:EF:A5
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/Qgiwvi8lSaeXRgLzCmLGE3VC76U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.164.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9a:a5:8f:6f:54:62:7b:d1:ce:66:63:e1:91:d3:36:ca:1f:
3a:6d:63:6b:8f:62:4a:3d:d7:e9:90:a5:c1:fb:7d:e6:01:de:
9e:74:5a:09:2f:34:e5:95:e0:ea:ac:0e:cd:5a:2e:5e:83:19:
c6:f5:c0:bb:14:ca:6f:ee:34:ac:c0:6c:e0:19:47:7a:f5:00:
9c:9c:9e:2c:f9:6b:7b:7e:ed:e7:15:da:75:93:1e:1d:3d:66:
e1:cb:70:05:4c:cb:b9:83:04:a6:20:4c:8d:c2:88:5f:2d:cb:
4b:30:45:63:a2:42:14:7a:f6:58:8c:f5:90:81:08:dd:65:66:
4f:3c:51:aa:77:4f:a6:21:bb:82:3c:89:61:b7:5f:14:f0:77:
7e:d0:d8:a7:3c:9f:8e:e1:7a:39:e8:33:78:f9:72:3f:5b:cf:
03:92:53:3c:03:89:62:84:6f:b4:e2:17:44:b3:46:b1:0c:3c:
fe:c3:bd:1f:f3:d7:d9:98:32:41:8e:22:25:a5:04:7d:50:22:
58:4e:b9:c2:03:ac:6a:ad:0b:76:af:8c:fa:d5:ba:f3:ee:4e:
7a:67:39:c8:ca:ce:f2:5b:9c:59:a1:24:b9:27:ac:6f:dc:3e:
4c:e3:8a:49:11:84:27:b8:63:f5:21:d6:0c:c7:f8:1c:b0:68:
1c:8e:19:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:43:37 2025 by rpki-client