Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/2CQTLj6fuGjOR9JqoMEFFGGMUVs.roa
File: 2CQTLj6fuGjOR9JqoMEFFGGMUVs.roa (raw, json)
Hash identifier: yLn6kJw+CqbZW1dUkXz+GBQNhC9c3L10tkD4MEgQTUE=
Subject key identifier: D8:24:13:2E:3E:9F:B8:68:CE:47:D2:6A:A0:C1:05:14:61:8C:51:5B
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01958AF2999E669FD848C4DAC6139C7061AF
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/2CQTLj6fuGjOR9JqoMEFFGGMUVs.roa
Signing time: Wed 12 Mar 2025 15:21:49 +0000
ROA not before: Wed 12 Mar 2025 15:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197788
IP address blocks: 185.78.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:f2:99:9e:66:9f:d8:48:c4:da:c6:13:9c:70:61:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Mar 12 15:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d824132e3e9fb868ce47d26aa0c10514618c515b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:9b:8a:b0:3a:ae:2d:fc:6f:58:7c:d8:15:
75:f5:c5:fe:44:60:11:1b:c3:4d:77:bc:05:cd:35:
54:80:f6:29:8e:e6:9f:98:14:22:cd:06:7c:40:3e:
99:62:e4:31:1b:2d:61:9f:06:58:ab:28:25:d7:d4:
4b:16:b2:8e:48:72:88:51:68:79:88:5a:9f:d1:e0:
59:0c:3d:e3:4c:99:f9:2c:98:a2:78:24:73:78:8c:
aa:8a:26:63:8d:f2:3c:1e:0e:79:ba:4a:e9:51:75:
3d:9a:b5:bf:a8:d2:3e:20:95:12:27:f3:ba:06:48:
b3:f9:84:51:13:ff:3d:e3:85:81:1f:d5:80:a2:59:
11:25:fc:c3:8a:54:58:36:53:95:7b:a8:54:00:c3:
d4:b6:59:7f:1e:13:57:78:af:b9:e9:18:ec:65:bd:
a8:41:ed:9e:1b:3a:71:36:fa:bc:d7:26:8f:41:63:
54:d3:9f:11:54:bc:da:b6:7d:68:cb:1f:cf:d6:f4:
70:47:f9:b8:f4:54:7a:4b:37:52:9e:c2:e2:99:47:
07:5d:8d:2d:19:b4:fd:9a:6d:0f:4e:b4:47:1c:7d:
6b:b0:b4:e7:6f:ff:5d:a9:1e:d2:c4:9b:09:72:d0:
95:94:73:ee:a1:cb:9a:d9:3c:e8:c5:e8:b2:42:16:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:24:13:2E:3E:9F:B8:68:CE:47:D2:6A:A0:C1:05:14:61:8C:51:5B
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/2CQTLj6fuGjOR9JqoMEFFGGMUVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.157.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:96:ec:8b:01:08:5e:ed:63:6a:ae:07:15:f6:7a:fc:5a:b2:
1c:41:19:c3:99:8b:b2:17:84:fd:2e:42:4a:83:46:a3:41:e7:
f9:58:bc:3d:0a:7b:c7:11:8b:12:12:e0:ad:13:2b:07:ea:fa:
07:3c:f6:56:6c:be:1b:ba:74:de:34:37:68:51:24:48:0e:ed:
13:dd:04:ef:11:4e:02:76:fb:bb:75:3a:dd:1e:cb:c5:13:0a:
cf:0f:42:9d:86:a6:d8:b9:9d:3a:07:5f:01:61:ed:22:ed:bb:
12:97:3a:05:ae:ac:68:c4:19:22:66:ce:e5:23:13:3e:bd:ae:
91:cb:89:9f:61:a8:66:7b:f2:4b:a1:95:c4:e3:ca:c2:f1:ac:
3c:c7:09:36:69:fa:b8:72:4c:57:9d:7a:57:05:5e:df:9a:a6:
34:f9:f1:08:fa:39:73:36:d8:da:ca:5d:15:c1:0d:bc:ff:47:
fc:26:84:c4:ba:42:45:50:31:41:a0:79:87:d4:c3:db:7c:a1:
40:16:a1:fa:52:a9:b2:fe:54:bd:c9:f8:92:8f:58:b9:aa:20:
4b:1f:ee:0d:d8:b4:68:f0:82:31:87:f4:cd:8e:a5:df:18:43:
dd:87:ee:3e:e4:3a:57:26:fa:ed:57:cb:23:f7:f6:14:de:28:
87:56:14:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:55:02 2025 by rpki-client