Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/VEd7M4-_4Lkn35UWK8vOkduQc1o.roa
File: VEd7M4-_4Lkn35UWK8vOkduQc1o.roa (raw, json)
Hash identifier: stPBfeMUNGmJFA2t78sW0j5zf3v8suGf1jDqTYS7l/Y=
Subject key identifier: 54:47:7B:33:8F:BF:E0:B9:27:DF:95:16:2B:CB:CE:91:DB:90:73:5A
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 019427482A5B8272D4F0A910F0C11CB93C45
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/VEd7M4-_4Lkn35UWK8vOkduQc1o.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28738
IP address blocks: 78.153.128.0/24 maxlen: 24
78.153.129.0/24 maxlen: 24
78.153.132.0/23 maxlen: 23
78.153.134.0/24 maxlen: 24
78.153.141.0/24 maxlen: 24
78.153.142.0/24 maxlen: 24
78.153.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2a:5b:82:72:d4:f0:a9:10:f0:c1:1c:b9:3c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54477b338fbfe0b927df95162bcbce91db90735a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:a1:01:85:3c:77:02:0a:d9:38:9e:1d:f6:
24:1c:48:4f:46:2e:bc:8f:85:c2:ff:fb:5b:55:76:
0d:09:78:84:91:b4:3b:da:79:57:b1:1a:a2:8b:aa:
4c:bc:d2:0e:22:d0:ca:e2:0c:67:9c:98:a4:ec:9c:
32:d5:19:9c:f3:d2:e0:17:e7:3e:9d:ec:cb:0b:42:
c4:fe:c2:ec:27:5c:7b:ee:98:f6:fc:ec:18:7f:ea:
fb:ab:4c:e4:76:cd:4c:24:be:40:e7:b5:67:a4:12:
cb:3a:c3:ac:6f:ea:81:a1:f3:f8:0b:f4:dc:f9:37:
56:c4:52:06:50:cb:41:a9:db:af:77:3b:62:11:43:
9c:3e:c9:9b:d0:7a:7f:1c:94:1b:64:06:f9:66:46:
2e:dd:ec:28:d9:38:da:fc:99:ac:d6:ee:9c:64:5f:
f5:78:c4:47:52:49:c6:0d:24:f8:bb:17:79:85:c9:
bf:5e:a3:8c:0d:cb:9c:e1:b9:63:8c:4f:59:2a:75:
e0:22:75:71:01:20:9a:c1:ae:7e:73:db:60:df:df:
ce:8f:80:fc:c9:66:82:1d:a6:a6:11:82:be:a2:a5:
5a:a2:56:c9:b1:e9:6e:59:f7:62:c4:95:43:d2:52:
77:e8:4b:37:bf:a7:a9:34:93:3d:fa:75:32:ed:54:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:47:7B:33:8F:BF:E0:B9:27:DF:95:16:2B:CB:CE:91:DB:90:73:5A
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/VEd7M4-_4Lkn35UWK8vOkduQc1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.128.0/23
78.153.132.0-78.153.134.255
78.153.141.0-78.153.142.255
78.153.152.0/23
Signature Algorithm: sha256WithRSAEncryption
61:ca:32:1f:a1:db:da:49:f7:d0:50:ee:7a:c9:06:ea:e1:f0:
0e:5f:4b:37:6b:e8:d4:d0:81:c6:d7:fa:01:91:fd:67:cb:78:
1d:e0:da:1f:13:17:21:9f:33:01:1c:b1:dc:30:3e:27:00:fa:
45:cc:ae:fe:7e:bb:3e:c7:37:2b:07:9a:4b:f3:ea:42:38:a8:
ec:10:f1:60:ac:eb:b6:f8:c3:2f:0d:05:0a:14:c7:51:87:26:
72:ed:f0:d2:97:f1:fc:da:55:9f:b0:a6:4a:d0:c5:f2:64:a2:
1c:ed:0c:2b:51:f9:06:01:12:58:2b:9b:d7:de:e0:cc:6d:14:
d7:3b:cf:bd:ea:09:89:49:0d:00:1d:63:24:0b:d5:3f:c8:28:
fb:da:9d:2e:28:54:19:ea:bb:bc:c4:fa:d3:1f:7d:4b:18:5e:
9e:e6:c3:e4:21:a3:f5:1f:8f:8b:de:50:f7:f3:fe:42:6e:ab:
67:10:34:17:8a:47:11:15:6b:e2:3f:16:c7:0a:79:0f:87:cd:
8d:53:ac:e8:7c:10:72:ec:30:ba:4c:a0:d5:49:6e:00:ef:1c:
f3:65:b6:33:36:43:a3:bc:8e:9f:6f:8a:24:d5:d9:8e:32:d2:
16:28:4a:04:7c:32:05:0c:47:ca:92:bb:b8:59:36:80:24:2b:
66:32:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:47 2025 by rpki-client