Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/Ndw7HVDtjP0mKBQVp0z9A-CbAvY.roa
File: Ndw7HVDtjP0mKBQVp0z9A-CbAvY.roa (raw, json)
Hash identifier: Gvsu5qwW/HZfnE/HXNRfeWRnDFzMBicoBm7giJXuEbI=
Subject key identifier: 35:DC:3B:1D:50:ED:8C:FD:26:28:14:15:A7:4C:FD:03:E0:9B:02:F6
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 019424B3F6453AA4B7DF317F17264096CF00
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/Ndw7HVDtjP0mKBQVp0z9A-CbAvY.roa
Signing time: Thu 02 Jan 2025 01:49:21 +0000
ROA not before: Thu 02 Jan 2025 01:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 78.24.53.0/24 maxlen: 24
78.24.54.0/24 maxlen: 24
82.116.140.0/24 maxlen: 24
82.116.144.0/24 maxlen: 24
178.255.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f6:45:3a:a4:b7:df:31:7f:17:26:40:96:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Jan 2 01:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35dc3b1d50ed8cfd26281415a74cfd03e09b02f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:9b:8e:de:24:0d:fd:26:37:4b:bc:b4:c1:
4c:18:a5:b5:6e:5e:8d:c1:49:e8:44:2f:b6:f1:b9:
23:d2:1c:e8:52:58:20:8f:18:a7:99:fc:9c:ed:a3:
ae:16:05:78:12:83:96:b7:31:f3:b0:9a:26:83:4b:
62:ce:d1:d9:d3:f8:eb:99:27:bf:8c:a6:f3:b8:82:
37:e1:e5:1c:4b:09:0d:40:16:18:32:9b:e2:4c:6c:
84:4d:90:a8:53:85:d8:a6:39:74:7b:2f:8c:fb:78:
39:ca:a3:9d:34:20:2a:95:78:95:c9:52:1d:69:44:
a2:1c:16:de:25:34:b1:e0:97:68:5a:b4:3f:ac:17:
fc:21:29:05:36:bc:11:f5:de:37:2f:2e:bf:70:4f:
13:bc:19:3c:a2:da:a4:76:c5:fc:58:83:32:de:54:
f0:2c:44:a0:52:75:61:2b:b6:7c:7d:03:ef:26:ca:
8b:56:82:15:bc:4a:bc:63:c5:77:57:4d:c3:25:d8:
d2:9b:db:31:84:94:28:15:64:0c:75:d2:43:3a:fa:
e1:67:6c:78:18:78:f1:14:c4:b3:c8:47:f9:d9:2c:
7d:aa:ee:5a:6f:34:a7:53:12:3b:64:23:32:79:c0:
8e:e0:d0:2d:18:e0:67:1b:21:c9:9f:c0:1d:36:c5:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DC:3B:1D:50:ED:8C:FD:26:28:14:15:A7:4C:FD:03:E0:9B:02:F6
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/Ndw7HVDtjP0mKBQVp0z9A-CbAvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.53.0-78.24.54.255
82.116.140.0/24
82.116.144.0/24
178.255.10.0/24
Signature Algorithm: sha256WithRSAEncryption
50:fe:05:6d:76:48:0e:f7:15:5f:06:46:8e:39:81:31:ce:f8:
ed:60:4e:4b:4c:97:06:3e:a9:e1:73:15:26:50:62:7b:f5:f9:
9b:71:7a:a7:86:94:49:ce:cc:46:e8:71:0a:0d:c9:42:b3:b8:
ce:20:53:98:ef:09:58:6e:aa:f3:81:3d:8d:98:45:de:d6:b9:
b8:db:c6:5c:b6:5c:a8:fa:a5:39:49:cc:88:bf:03:8b:9c:48:
30:c7:7b:dc:91:db:b6:a0:f2:39:42:55:d6:d2:7d:ae:80:b6:
97:22:44:f8:00:2d:b5:ed:36:5b:fc:87:88:03:38:42:73:32:
eb:2b:74:2e:ad:7c:3d:30:0b:b0:a4:51:3f:34:1c:67:4b:5d:
0f:ab:bf:61:74:86:1f:c4:0d:77:8f:75:f2:09:e4:0d:cd:a0:
7a:0e:01:4a:04:82:e8:38:d6:00:a1:29:d2:ed:4e:f2:58:5f:
ec:df:82:71:2c:68:29:41:2a:55:c3:d1:93:d2:f3:9c:81:2b:
fd:8e:e3:cb:98:6d:a0:1f:16:d4:b6:90:22:ea:81:44:56:64:
c9:9a:42:00:2d:6c:47:d0:6d:49:45:1e:2a:ec:56:61:6e:7d:
73:f5:fc:85:44:8a:50:48:2e:4e:e3:a6:77:f2:09:83:f3:4e:
2d:7b:8d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:19:58 2025 by rpki-client