Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/f-WBLlvCqU3gT2U4k2jp9nRYULc.roa
File: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (raw, json)
Hash identifier: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=
Subject key identifier: 7F:E5:81:2E:5B:C2:A9:4D:E0:4F:65:38:93:68:E9:F6:74:58:50:B7
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0194266B8D2E7D0D128556EA013A419D4BB4
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/f-WBLlvCqU3gT2U4k2jp9nRYULc.roa
Signing time: Thu 02 Jan 2025 09:49:29 +0000
ROA not before: Thu 02 Jan 2025 09:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 78.142.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8d:2e:7d:0d:12:85:56:ea:01:3a:41:9d:4b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 2 09:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fe5812e5bc2a94de04f65389368e9f6745850b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:54:5a:f6:ef:23:d4:68:b5:3d:0f:29:aa:
3f:a2:14:f4:be:86:06:d9:a0:94:19:3b:47:fe:96:
1f:34:c1:f8:f2:d7:e0:e3:54:e7:d3:d2:a8:52:76:
81:b0:d5:38:09:95:8a:df:15:95:96:68:fc:ec:bf:
22:54:cb:56:9d:07:aa:e0:86:c1:72:a9:2e:60:86:
ab:eb:45:21:43:42:63:ad:64:51:29:a8:0b:27:07:
85:81:0f:af:f3:c1:a8:fe:48:b6:55:eb:11:ec:59:
42:71:c6:e3:8a:31:91:d0:2f:5b:da:ad:73:b6:bf:
39:2f:ff:6a:7c:ae:dc:97:d6:d7:d1:a4:ed:11:18:
17:9a:41:e8:97:c6:4c:b9:8c:15:65:48:57:41:b7:
43:ee:e6:30:00:fa:60:51:1f:9b:f3:61:98:66:e5:
40:ae:4b:1e:38:dd:05:8d:57:88:50:88:a9:1a:4c:
29:d7:a6:5a:a4:86:3c:ef:f0:45:21:65:f2:3c:2e:
55:9b:ac:9a:fc:e9:49:d0:89:b1:91:94:96:23:bd:
cd:9f:38:3c:f9:7c:8b:01:90:87:6e:1f:72:7e:81:
1e:09:7d:a2:14:26:cd:fb:9d:86:5a:fe:ea:ea:ba:
4a:59:f2:16:36:2f:f3:e9:77:3e:78:91:32:12:b8:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E5:81:2E:5B:C2:A9:4D:E0:4F:65:38:93:68:E9:F6:74:58:50:B7
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/f-WBLlvCqU3gT2U4k2jp9nRYULc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.216.0/24
Signature Algorithm: sha256WithRSAEncryption
73:0f:58:51:b2:02:b4:7a:19:e2:7f:5e:2f:9c:31:a4:97:be:
ae:3d:73:18:3f:e7:e4:9c:a3:d8:9a:93:49:41:ac:02:39:b1:
69:21:3a:33:fb:26:25:2a:8d:f5:a6:79:b6:cd:06:74:14:99:
a8:91:5a:f5:ed:30:6a:14:81:34:3f:c0:e9:56:33:84:04:ab:
9e:40:81:51:8d:5e:62:21:76:9a:75:47:69:8d:bc:16:58:1c:
fc:a7:36:9e:02:b8:33:bc:d6:d0:2e:34:06:13:8d:b2:a1:22:
0c:7b:3e:c7:59:a0:6d:7c:08:8c:94:27:44:ae:e3:fb:31:bd:
1c:60:3f:c6:25:e8:09:b1:fe:da:6b:e2:96:38:ab:9c:0f:b7:
80:14:dc:bf:19:e7:c3:ca:b7:4c:41:37:68:0b:7d:b4:01:6e:
97:94:ce:97:9f:d2:61:bf:8c:0b:4c:f2:30:75:14:4d:40:91:
b1:1b:75:46:77:62:b1:79:5d:42:b4:c0:4a:36:47:e4:d5:eb:
ef:62:bb:75:41:26:90:e3:1d:7f:5c:6b:ae:f6:4c:b7:34:76:
80:77:76:57:14:2a:04:5c:de:c4:27:79:2d:f6:f6:85:fe:7a:
c6:dd:a5:b2:d8:30:45:43:44:ee:7f:45:33:31:4a:2a:98:d1:
58:e0:8e:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma40ufQ0ShVbqATpBnUu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2
OGIxZTEwHhcNMjUwMTAyMDk0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmU1ODEyZTViYzJhOTRkZTA0ZjY1Mzg5MzY4ZTlmNjc0NTg1MGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6NUWvbvI9RotT0PKao/ohT0voYG
2aCUGTtH/pYfNMH48tfg41Tn09KoUnaBsNU4CZWK3xWVlmj87L8iVMtWnQeq4IbB
cqkuYIar60UhQ0JjrWRRKagLJweFgQ+v88Go/ki2VesR7FlCccbjijGR0C9b2q1z
tr85L/9qfK7cl9bX0aTtERgXmkHol8ZMuYwVZUhXQbdD7uYwAPpgUR+b82GYZuVA
rkseON0FjVeIUIipGkwp16ZapIY87/BFIWXyPC5Vm6ya/OlJ0ImxkZSWI73Nnzg8
+XyLAZCHbh9yfoEeCX2iFCbN+52GWv7q6rpKWfIWNi/z6Xc+eJEyErg+8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH/lgS5bwqlN4E9lOJNo6fZ0WFC3MB8GA1UdIwQY
MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut
ZGNlOTQ3ZTI5NGI2LzEvZi1XQkxsdkNxVTNnVDJVNGsyanA5blJZVUxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2
LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATo7YMA0G
CSqGSIb3DQEBCwUAA4IBAQBzD1hRsgK0ehnif14vnDGkl76uPXMYP+fknKPYmpNJ
QawCObFpIToz+yYlKo31pnm2zQZ0FJmokVr17TBqFIE0P8DpVjOEBKueQIFRjV5i
IXaadUdpjbwWWBz8pzaeArgzvNbQLjQGE42yoSIMez7HWaBtfAiMlCdEruP7Mb0c
YD/GJegJsf7aa+KWOKucD7eAFNy/GefDyrdMQTdoC320AW6XlM6Xn9Jhv4wLTPIw
dRRNQJGxG3VGd2KxeV1CtMBKNkfk1evvYrt1QSaQ4x1/XGuu9ky3NHaAd3ZXFCoE
XN7EJ3kt9vaF/nrG3aWy2DBFQ0Tuf0UzMUoqmNFY4I4E
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:07 2025 by rpki-client