Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/pLvgVT6IeQUm27JrHhkfsoOcZP0.roa
File: pLvgVT6IeQUm27JrHhkfsoOcZP0.roa (raw, json)
Hash identifier: rCZKn93lFI9RctHU0NgqG0K/5HBaYYrICcywm40wvwk=
Subject key identifier: A4:BB:E0:55:3E:88:79:05:26:DB:B2:6B:1E:19:1F:B2:83:9C:64:FD
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 092E236A
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/pLvgVT6IeQUm27JrHhkfsoOcZP0.roa
Signing time: Sat 01 Jan 2022 12:58:47 +0000
ROA not before: Sat 01 Jan 2022 12:58:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41403
IP address blocks: 78.136.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154018666 (0x92e236a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4bbe0553e88790526dbb26b1e191fb2839c64fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:9a:22:05:63:73:96:a4:97:03:91:d1:c5:
fb:cb:cf:b6:5c:97:ec:ab:35:7d:09:46:26:99:72:
f0:4f:15:8b:b8:82:53:45:b9:94:4d:a9:43:2d:fd:
ef:3d:4a:46:78:93:18:4c:7a:58:b2:2c:9a:b9:77:
7a:59:1a:16:cd:23:2e:77:c4:66:98:56:81:e6:de:
c3:35:25:c6:f8:da:1a:8f:37:07:09:5b:32:9c:02:
f3:a7:f3:28:b7:4a:38:a2:77:89:12:77:0d:e3:e3:
26:8e:2d:f7:44:58:7d:80:b0:cd:67:aa:6e:94:a2:
f2:42:ca:7a:97:28:83:cd:02:01:99:c9:da:d0:7e:
06:02:7c:4f:41:c8:84:80:6a:9d:ff:10:09:2b:fc:
cc:9f:a6:68:c9:3b:5b:ef:55:f9:98:89:b1:45:42:
60:d9:f5:44:98:0e:23:a9:61:f7:bd:3a:ad:1b:e2:
f7:8d:35:f2:3c:4c:de:92:da:2b:42:93:2d:17:b3:
51:97:df:56:bf:4e:a6:3f:86:86:5e:f0:9f:f0:66:
5a:8a:e8:b1:ac:2a:f2:d3:4f:de:72:ab:ea:5f:f5:
27:55:43:93:dc:c4:17:3e:4f:48:16:8e:78:b5:16:
44:18:78:48:cf:aa:bb:cd:29:dd:2b:7d:a9:0d:77:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BB:E0:55:3E:88:79:05:26:DB:B2:6B:1E:19:1F:B2:83:9C:64:FD
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/pLvgVT6IeQUm27JrHhkfsoOcZP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.232.0/21
Signature Algorithm: sha256WithRSAEncryption
c9:6d:35:09:82:ef:0a:46:62:de:7a:8d:66:1d:11:c4:fc:16:
5d:13:b1:18:fe:eb:36:3e:98:6f:1f:0c:c5:6b:73:1d:c8:a9:
2e:7c:8d:35:ce:22:fb:62:8a:26:89:7a:66:62:02:49:3c:23:
9b:48:e9:de:58:9e:63:b4:45:b8:f4:54:0f:de:1d:21:29:6f:
64:bf:15:4a:a9:e4:0f:e4:3f:ec:8c:78:e4:b7:06:04:1b:2d:
c5:64:76:97:4f:9b:54:28:54:5e:5a:ae:1d:aa:44:4f:a1:84:
18:98:cb:4b:49:52:9e:21:e4:82:c8:6a:e9:3b:47:b5:d3:88:
55:76:13:6f:0e:f3:06:6b:08:8d:8a:1e:ff:31:25:ea:60:03:
3f:a2:7b:5c:8e:a1:09:21:f5:04:5b:d1:6f:86:e3:56:38:0f:
20:72:57:c2:9a:b4:ef:5e:b8:4b:2f:83:62:1d:70:30:b5:2e:
93:c5:8e:cd:b0:c3:cd:59:09:f9:e4:e8:36:97:8f:26:e2:6e:
0b:2c:0f:59:dd:7c:3a:53:7c:9f:f2:12:ca:01:2c:4e:c1:40:
90:2d:f1:a1:f3:3d:58:b5:4f:b3:9b:1d:18:89:ae:d1:1c:74:
b4:b0:f4:32:dd:33:0b:49:ef:58:86:2c:96:b7:16:1b:ab:b8:
53:9f:ab:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:16 2025 by rpki-client