Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/m4devMUt7o-lTrS5g1yfsLvLfR4.roa
File: m4devMUt7o-lTrS5g1yfsLvLfR4.roa (raw, json)
Hash identifier: 6BffaE4ODhF5ST2c2ry8IBAVEB0SilhEVflyDyx/aY4=
Subject key identifier: 9B:87:5E:BC:C5:2D:EE:8F:A5:4E:B4:B9:83:5C:9F:B0:BB:CB:7D:1E
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 019427482BA817CB4B2FAF343C80DDB5839E
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/m4devMUt7o-lTrS5g1yfsLvLfR4.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209759
IP address blocks: 78.153.146.0/24 maxlen: 24
78.153.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2b:a8:17:cb:4b:2f:af:34:3c:80:dd:b5:83:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b875ebcc52dee8fa54eb4b9835c9fb0bbcb7d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:6a:f1:40:3a:96:28:b8:bd:1e:c2:5f:29:
e7:33:98:73:9e:ba:df:de:9e:ee:ab:6a:c7:ec:75:
43:67:6d:d1:4c:e9:ef:c9:57:50:d4:03:cb:c9:32:
83:bf:37:96:49:b8:c5:68:d2:86:fd:58:77:fd:f1:
83:bf:a8:01:4f:7c:83:04:64:c4:58:2f:e6:a5:62:
8a:e8:0f:fd:4b:05:2c:b9:cb:0d:6c:7f:2e:ab:75:
b5:24:00:72:06:85:6e:7e:48:60:ac:32:2a:b4:01:
c9:bf:4b:48:8b:da:25:07:c2:6c:8e:b2:92:8a:a1:
72:e1:cb:2f:22:51:06:1c:f9:a2:ca:b0:0e:5b:b1:
68:a2:31:cc:1b:f3:b7:d4:a5:e7:ae:d0:fc:dd:c2:
b5:88:a2:0f:b7:3a:be:68:be:a3:af:8b:ba:b2:21:
31:58:dd:4c:c1:41:96:23:87:46:ef:6c:c8:a6:90:
26:b5:b8:c4:b6:1e:89:25:66:1c:c6:a1:81:dd:b1:
87:64:d8:60:17:43:2f:ab:ca:b1:d7:cb:6f:a4:38:
0b:61:1f:a7:37:71:f9:c0:fc:b9:0a:40:90:50:61:
db:c9:fa:26:91:f2:68:ed:82:6e:d6:6e:ca:c8:96:
5c:75:05:91:99:e9:1a:45:52:ee:92:e4:ed:ec:17:
59:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:5E:BC:C5:2D:EE:8F:A5:4E:B4:B9:83:5C:9F:B0:BB:CB:7D:1E
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/m4devMUt7o-lTrS5g1yfsLvLfR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.146.0/24
78.153.156.0/22
Signature Algorithm: sha256WithRSAEncryption
49:17:fd:82:63:55:9c:b8:35:55:5d:ec:8f:e3:2c:0a:69:06:
e2:25:7d:b2:b9:af:4e:6e:b8:26:7c:14:b5:59:50:b3:8e:51:
34:14:c3:3d:18:54:ba:d6:cb:57:23:80:16:41:3e:69:49:f3:
49:12:1f:f3:81:59:9c:52:bc:18:71:21:ca:c7:6b:6a:d7:af:
0d:b8:bc:20:f0:44:30:b5:89:53:6c:20:e9:d1:e4:e9:7a:f3:
63:1d:b5:66:c9:1d:a0:59:3b:0f:2a:0b:e0:c3:b6:d5:97:48:
d6:b9:3a:cf:34:4e:bb:12:fa:fd:d6:fb:f4:ff:42:db:ef:71:
25:d7:0e:39:67:64:f5:10:a4:3b:7e:e8:8d:44:e1:26:e6:2e:
31:c4:4a:a2:34:4b:df:34:92:8b:02:50:75:75:0d:34:e0:49:
5f:c8:0a:7e:a9:2f:a8:d7:05:8d:26:88:ed:07:1a:e0:74:c7:
56:37:9f:57:24:e3:1b:82:d2:e2:8c:f8:a8:17:16:63:08:21:
6b:60:84:6b:4b:3c:2a:b6:3e:5a:72:c4:aa:13:f9:9c:3f:f4:
dd:ee:b0:ab:d5:f1:7a:6b:e1:d8:e0:3e:c8:5e:30:c0:6d:97:
75:0d:ef:f9:d2:75:27:cd:38:18:0e:b6:e1:39:9b:61:e2:ee:
91:68:75:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:17 2025 by rpki-client