Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/J4QErx_pJH-c8lf03n-XO2SYntE.roa
File: J4QErx_pJH-c8lf03n-XO2SYntE.roa (raw, json)
Hash identifier: YNpZR71EzVm4Z5/sNWkYvfRxsrgVociqcX6A/snrahU=
Subject key identifier: 27:84:04:AF:1F:E9:24:7F:9C:F2:57:F4:DE:7F:97:3B:64:98:9E:D1
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 01944FD168DC4918F901D554E550299E73A0
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/J4QErx_pJH-c8lf03n-XO2SYntE.roa
Signing time: Fri 10 Jan 2025 10:45:11 +0000
ROA not before: Fri 10 Jan 2025 10:45:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42956
IP address blocks: 147.78.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:d1:68:dc:49:18:f9:01:d5:54:e5:50:29:9e:73:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Jan 10 10:45:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=278404af1fe9247f9cf257f4de7f973b64989ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:17:6c:9c:17:33:97:2d:82:cf:77:fa:5e:
54:0f:b6:92:48:8b:72:f8:02:16:a3:36:32:4b:b3:
7e:a6:b6:00:f3:b3:a9:7f:af:70:fe:78:82:09:59:
49:ed:ac:40:19:af:f4:52:63:fc:5a:11:7e:a8:4d:
4a:29:be:49:31:f1:68:c5:a1:4e:0a:55:68:0c:de:
92:b1:2f:b3:4c:eb:ec:cb:05:01:5b:f1:71:56:db:
ef:ea:79:c0:4c:4f:1a:90:17:02:b6:85:f3:17:97:
33:cf:2f:01:ab:65:10:b5:e9:74:d7:be:4a:ea:f1:
a3:3f:f2:c8:5a:de:1e:fa:2a:f4:06:12:1b:17:f9:
c6:e6:16:c0:c1:24:ac:1c:5c:d2:f5:36:56:eb:49:
e3:c4:68:55:e7:71:d5:1b:31:01:47:2d:53:8f:da:
81:72:95:a4:71:3a:80:db:13:6f:a4:fc:a0:84:e1:
6a:12:d1:5d:fa:6d:e5:05:01:2c:fb:97:cd:95:33:
a3:2a:85:3c:e3:8e:91:f4:3a:bf:5b:75:1d:3b:8d:
8e:c9:d3:a6:e2:51:27:cf:19:cf:cf:58:6f:63:54:
70:73:d3:93:dd:92:32:57:e1:bb:ec:25:ad:52:28:
5e:80:5f:18:ec:06:4d:ec:c2:72:21:44:77:d1:58:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:84:04:AF:1F:E9:24:7F:9C:F2:57:F4:DE:7F:97:3B:64:98:9E:D1
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/J4QErx_pJH-c8lf03n-XO2SYntE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.143.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ac:7b:35:21:7e:30:6f:64:40:d4:74:b2:d6:eb:5d:40:11:
fb:28:41:72:ee:f3:b8:55:a8:31:9f:2a:2c:d0:4d:5c:a2:63:
64:22:65:5d:83:e1:4d:25:2f:15:3e:4b:02:e8:91:88:90:b1:
20:49:9b:c2:f0:42:f2:27:d6:ea:25:55:1e:be:9c:f3:8e:59:
ce:f0:44:5b:13:70:80:ec:1f:0e:a9:3e:16:5b:66:f7:8b:80:
63:53:c5:b8:b2:7b:5f:ba:a7:c0:41:3d:4f:5a:08:eb:37:42:
50:e2:aa:55:f6:d4:69:6e:e2:9d:9f:42:db:d9:f4:a9:1a:25:
b5:f7:97:5c:20:5b:26:38:74:f0:e9:c8:c5:a3:2c:25:e5:a2:
24:24:0c:e8:38:cd:ac:86:67:ae:ef:f8:a8:0f:78:93:41:1c:
f5:2a:f7:fc:44:7c:04:6f:1f:bf:54:59:c6:18:b0:a5:0a:06:
91:bf:ba:26:bf:c4:4a:00:67:31:fe:8c:16:ef:11:ad:76:b9:
06:fb:52:3c:b6:3a:f9:27:b4:25:33:0e:79:95:d7:56:82:1e:
df:62:bb:94:e4:8b:87:14:fd:e0:e6:5d:4d:37:34:c8:99:f3:
d4:6f:2d:3d:48:76:bb:37:9d:15:8b:58:35:53:6e:2a:4b:d3:
43:59:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:21 2025 by rpki-client