Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mVG0zdRpEHFurM2NuJYhzUpdZD0.roa
File: mVG0zdRpEHFurM2NuJYhzUpdZD0.roa (raw, json)
Hash identifier: GZ6RqP79lnmr2uWve9fq6ZS3u7ZSuyBq7dji/lSVgtw=
Subject key identifier: 99:51:B4:CD:D4:69:10:71:6E:AC:CD:8D:B8:96:21:CD:4A:5D:64:3D
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428281CAC58003DC826492DAC8C340E6E
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mVG0zdRpEHFurM2NuJYhzUpdZD0.roa
Signing time: Thu 02 Jan 2025 17:55:04 +0000
ROA not before: Thu 02 Jan 2025 17:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51581
IP address blocks: 78.83.208.0/24 maxlen: 24
212.36.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:1c:ac:58:00:3d:c8:26:49:2d:ac:8c:34:0e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9951b4cdd46910716eaccd8db89621cd4a5d643d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:c7:80:b4:76:01:a9:68:6f:f9:40:4a:d3:
57:64:93:5d:e3:cc:29:e6:60:9e:e8:24:2f:be:c0:
4a:99:0c:8d:54:d2:64:5e:87:11:07:27:b6:8a:4a:
32:9a:c4:44:47:e0:46:72:74:ed:32:b4:af:8f:1b:
1a:b0:af:3d:1c:8f:72:ee:f9:e8:7b:79:54:51:a6:
61:2a:d3:91:fa:97:b9:fd:b6:63:22:06:b6:00:1c:
b8:09:86:1b:4f:60:15:d6:40:3e:15:9f:50:eb:b0:
19:4f:f6:f6:f9:8f:8d:40:65:ce:d2:2e:a0:96:82:
e1:06:63:f9:fa:ea:bc:8b:41:8d:5a:bd:ef:ed:0c:
af:22:eb:c8:fb:56:3b:fd:28:4e:99:6a:b1:9f:ca:
af:66:48:b6:82:6c:a4:5b:9b:b8:bd:ab:63:83:7f:
38:50:68:96:37:af:5b:9b:f3:cd:1d:a4:4d:6d:a3:
82:af:df:ca:86:43:ad:c6:2a:0b:31:87:7c:23:fc:
2f:31:22:16:f3:c8:97:40:ad:e3:91:cd:a3:29:bc:
20:1a:58:40:a2:9e:29:ec:42:a4:93:43:24:64:b8:
be:af:7a:dd:49:e4:39:f6:5d:9a:5b:09:96:f0:04:
5f:37:00:78:ee:ae:40:7f:24:b4:d9:eb:1f:1f:cb:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:51:B4:CD:D4:69:10:71:6E:AC:CD:8D:B8:96:21:CD:4A:5D:64:3D
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mVG0zdRpEHFurM2NuJYhzUpdZD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.208.0/24
212.36.13.0/24
Signature Algorithm: sha256WithRSAEncryption
26:6f:c5:26:71:f6:43:f3:d8:d9:a2:84:36:f7:54:fe:39:87:
5f:39:17:ab:a2:15:44:37:b3:6b:ac:79:56:31:ed:3a:3f:a6:
92:10:51:f6:db:70:6f:54:57:33:87:13:e2:a2:c8:bd:62:2d:
b4:b0:15:8f:20:8c:be:96:d1:32:b2:ed:34:e0:9f:e2:d8:06:
ac:12:90:1f:be:2c:dc:11:2f:65:03:5d:f7:cd:d4:d3:4a:38:
54:a6:8b:ed:61:18:a5:78:67:15:ac:8f:f0:38:41:c5:40:f5:
35:ad:05:78:67:52:c3:87:d6:62:51:b2:5e:f6:a4:ff:ea:20:
15:78:8a:e8:c5:52:e0:05:73:d4:24:d9:ff:a0:79:24:ed:9c:
c3:9f:37:09:b7:22:f1:83:11:ac:41:5a:1e:bf:0b:d3:7e:4d:
ac:0d:f1:f4:26:45:f3:a0:a8:f2:9d:8c:7d:a8:8b:2b:85:ea:
0c:7d:a5:1b:53:81:6a:24:c8:68:ba:3e:d7:b1:a7:aa:d3:6b:
2d:88:b3:cd:7f:ae:82:4a:1f:81:10:51:d6:d0:ae:d1:6a:30:
54:58:25:43:9b:1a:dd:fa:e4:9f:40:4d:88:bc:2d:58:b4:46:
0b:93:39:2a:0a:94:0c:1e:d2:af:74:e1:23:eb:9a:13:f0:6c:
da:fc:9c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:32:53 2025 by rpki-client