Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/rhjaDneLYFbZ1WcEcFoqgJ4dKpA.roa
File: rhjaDneLYFbZ1WcEcFoqgJ4dKpA.roa (raw, json)
Hash identifier: D1Kd0kyUnppLyg+wew51xWMmstF20NlunmwZq6GjQUE=
Subject key identifier: AE:18:DA:0E:77:8B:60:56:D9:D5:67:04:70:5A:2A:80:9E:1D:2A:90
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428281EC9724B626769D3445BBAC0EC9F
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/rhjaDneLYFbZ1WcEcFoqgJ4dKpA.roa
Signing time: Thu 02 Jan 2025 17:55:05 +0000
ROA not before: Thu 02 Jan 2025 17:55:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56539
IP address blocks: 78.83.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:1e:c9:72:4b:62:67:69:d3:44:5b:ba:c0:ec:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae18da0e778b6056d9d56704705a2a809e1d2a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:b9:7c:12:00:00:bf:8c:30:9e:95:ee:8c:
52:16:84:be:01:81:a0:dc:65:d0:cb:aa:ce:0a:b8:
e3:9a:1c:9a:98:a6:a1:66:50:d4:0e:ad:92:e7:42:
a8:e4:69:52:06:b5:7e:cb:78:e1:5a:05:a2:05:0b:
94:56:bd:72:29:95:f7:90:a0:ca:62:32:4b:10:3b:
12:c5:b8:af:7e:5b:28:0c:c7:c6:16:6e:2b:c6:72:
62:70:f9:e2:4c:db:63:e0:59:b1:3e:15:2a:a0:82:
15:6e:86:2b:af:51:e8:33:4e:79:c0:51:11:03:3e:
6e:a5:5f:2a:1f:7f:0a:e0:fb:0f:42:df:0e:5b:a7:
0d:4b:2b:06:57:40:58:37:10:22:52:79:2a:bf:37:
e2:81:37:d2:21:13:62:86:79:2c:47:a3:98:9e:df:
bb:51:20:6e:cb:0b:eb:33:65:7f:49:ec:0f:ed:9e:
30:99:90:c6:47:ab:f9:89:5e:f5:90:93:a6:46:06:
ea:74:2a:b6:a5:9d:ef:b3:e8:d5:f3:ab:ca:c2:f9:
06:f3:4e:bc:87:1c:f1:6a:b5:7e:96:53:ab:33:66:
69:fd:bb:7f:ea:a7:ff:b2:d4:9b:e7:c2:6c:c3:ef:
c9:e9:12:47:eb:9d:69:a7:2b:6d:3d:79:9e:d4:8e:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:18:DA:0E:77:8B:60:56:D9:D5:67:04:70:5A:2A:80:9E:1D:2A:90
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/rhjaDneLYFbZ1WcEcFoqgJ4dKpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.236.0/24
Signature Algorithm: sha256WithRSAEncryption
94:79:3e:56:b1:bd:bc:64:7b:9d:fb:ac:73:dd:31:09:7a:f5:
bc:35:da:08:57:e2:75:e1:fd:f5:4c:bb:a8:c3:e2:f8:d4:a8:
c8:b4:bc:09:ea:9a:ae:63:04:3a:32:9c:18:63:2e:e1:f3:26:
88:54:c1:8f:66:09:63:d9:6d:91:ce:35:d4:ef:b3:07:05:7e:
69:67:d2:c2:27:b5:33:c0:a8:e8:98:22:63:05:2a:b3:ac:65:
36:bf:bb:7d:ab:89:6b:d1:82:01:78:83:2a:11:55:45:fb:c0:
23:61:d8:61:95:e5:3c:18:f9:7f:d0:c8:af:8f:f3:06:4c:fa:
7f:cc:42:b1:0e:40:82:3c:b8:f9:16:a4:18:8b:a6:37:9b:e3:
7e:bf:7f:9a:9c:f6:8d:e0:d2:91:d7:30:c6:11:b2:c9:4c:3b:
55:16:6a:c1:b2:d9:ee:e7:15:65:03:89:01:01:2d:3e:a3:42:
7e:0b:e0:d2:72:c8:5b:8a:b9:24:62:ec:3a:98:58:62:f4:db:
7b:de:f2:e2:c7:65:3b:b7:d2:4e:ba:72:dd:c9:98:6e:ec:40:
43:e7:de:b9:ef:16:02:2a:3a:88:99:85:db:48:77:7c:a3:11:
4f:8b:ab:76:a4:cf:4d:b6:21:cd:b7:7f:00:73:d0:fc:52:f8:
fe:d5:1f:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoKB7JcktiZ2nTRFu6wOyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjUwMTAyMTc1NTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTE4ZGEwZTc3OGI2MDU2ZDlkNTY3MDQ3MDVhMmE4MDllMWQyYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIu5fBIAAL+MMJ6V7oxSFoS+AYGg
3GXQy6rOCrjjmhyamKahZlDUDq2S50Ko5GlSBrV+y3jhWgWiBQuUVr1yKZX3kKDK
YjJLEDsSxbivflsoDMfGFm4rxnJicPniTNtj4FmxPhUqoIIVboYrr1HoM055wFER
Az5upV8qH38K4PsPQt8OW6cNSysGV0BYNxAiUnkqvzfigTfSIRNihnksR6OYnt+7
USBuywvrM2V/SewP7Z4wmZDGR6v5iV71kJOmRgbqdCq2pZ3vs+jV86vKwvkG8068
hxzxarV+llOrM2Zp/bt/6qf/stSb58Jsw+/J6RJH651ppyttPXme1I58PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK4Y2g53i2BW2dVnBHBaKoCeHSqQMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvcmhqYURuZUxZRmJaMVdjRWNGb3FnSjRkS3BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATlPsMA0G
CSqGSIb3DQEBCwUAA4IBAQCUeT5Wsb28ZHud+6xz3TEJevW8NdoIV+J14f31TLuo
w+L41KjItLwJ6pquYwQ6MpwYYy7h8yaIVMGPZglj2W2RzjXU77MHBX5pZ9LCJ7Uz
wKjomCJjBSqzrGU2v7t9q4lr0YIBeIMqEVVF+8AjYdhhleU8GPl/0Mivj/MGTPp/
zEKxDkCCPLj5FqQYi6Y3m+N+v3+anPaN4NKR1zDGEbLJTDtVFmrBstnu5xVlA4kB
AS0+o0J+C+DScshbirkkYuw6mFhi9Nt73vLix2U7t9JOunLdyZhu7EBD59657xYC
KjqImYXbSHd8oxFPi6t2pM9NtiHNt38Ac9D8Uvj+1R/D
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:13:57 2025 by rpki-client