Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/eJAfN54IVDM9zxmQ8ilO1hvAK9Y.roa
File: eJAfN54IVDM9zxmQ8ilO1hvAK9Y.roa (raw, json)
Hash identifier: vXrGP/zoPi072poUBvOCivcX7v6J3n6jY3oSSpibSQ0=
Subject key identifier: 78:90:1F:37:9E:08:54:33:3D:CF:19:90:F2:29:4E:D6:1B:C0:2B:D6
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01958B0315866195FD26B05FA16CB8E3C6BD
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/eJAfN54IVDM9zxmQ8ilO1hvAK9Y.roa
Signing time: Wed 12 Mar 2025 15:39:49 +0000
ROA not before: Wed 12 Mar 2025 15:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 178.253.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:03:15:86:61:95:fd:26:b0:5f:a1:6c:b8:e3:c6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Mar 12 15:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78901f379e0854333dcf1990f2294ed61bc02bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:6b:3b:1a:48:df:ca:4e:71:57:d2:b6:e6:
a5:ae:a2:00:e4:1c:5c:97:2d:98:98:3b:f6:4e:2c:
b8:df:53:1c:9a:70:dd:e4:e0:63:82:91:a0:9e:ed:
6b:24:43:93:88:98:ce:36:98:9b:ca:b1:d6:41:e7:
56:dd:bc:08:2a:8f:78:55:ad:00:a9:8b:ca:9b:59:
1f:9c:a0:7c:20:31:f6:8b:ef:fe:e0:e6:23:11:54:
e5:80:ec:6e:98:87:da:79:29:92:2b:57:7f:72:8c:
c2:bf:5a:fd:58:90:77:92:b1:05:c3:8c:28:2b:84:
40:95:3d:e7:ce:ae:98:b1:fa:d5:5b:f2:ad:2a:54:
81:d9:23:d9:fa:92:34:0d:ab:48:e3:09:f9:d7:d8:
46:cb:06:67:72:e6:e5:18:a9:b8:a8:21:40:f9:44:
63:94:b1:a2:af:89:ad:3d:e3:72:ac:41:92:0a:9b:
88:bc:d5:59:27:77:48:49:4a:57:4e:26:ce:0b:1a:
46:78:22:5f:54:80:53:de:a8:da:4c:c3:7c:52:6e:
db:36:7c:1c:53:01:31:27:19:25:e1:ab:aa:5c:72:
41:d5:3b:ca:fe:9c:78:71:48:06:d2:fb:f5:71:0c:
39:c1:f7:c7:be:f8:15:d2:9d:c9:03:fa:d2:9e:45:
f3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:90:1F:37:9E:08:54:33:3D:CF:19:90:F2:29:4E:D6:1B:C0:2B:D6
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/eJAfN54IVDM9zxmQ8ilO1hvAK9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.12.0/23
Signature Algorithm: sha256WithRSAEncryption
76:27:05:31:60:46:0f:42:60:85:53:c0:46:00:32:c4:db:fa:
c4:ba:ef:e2:39:e4:fc:ca:a9:27:15:67:c6:81:90:b6:98:be:
c3:30:f5:f9:7c:1c:da:d5:a9:8f:43:54:27:31:fc:00:e6:9c:
13:52:7e:69:96:1e:dd:6d:d7:0c:8e:1f:a8:a8:e9:b8:a4:25:
65:85:af:40:d3:6c:70:f8:d7:81:b4:fb:65:4f:77:d9:82:b0:
9c:0e:e5:db:0e:fa:19:e0:45:8a:30:38:20:84:be:0b:74:6d:
ff:e2:31:46:01:97:d8:6f:55:9c:91:63:fc:92:f2:10:88:a2:
ae:a3:75:ab:46:31:3d:ef:1b:54:06:c4:1a:02:19:a5:b6:1d:
b0:98:6f:dc:ef:29:91:ee:46:28:c2:e8:b8:8b:38:b4:a8:ba:
3b:13:e2:b8:45:ec:5f:31:9f:66:ab:8f:b3:38:e2:9b:b0:03:
f4:3a:7c:8c:1f:bd:d6:1f:ea:5e:69:f1:31:16:57:39:b4:97:
19:8f:d5:1d:9d:0c:55:86:63:75:8e:75:c2:16:53:70:a6:4a:
11:8a:96:2d:fb:3d:e1:44:1c:b4:c4:2c:0d:0d:a3:dc:c7:2c:
fe:d4:86:b9:02:c7:6b:0e:4f:bf:90:ba:af:1c:ce:6d:b9:d2:
dc:19:e1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:24:58 2025 by rpki-client