Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3cFQEoU-MuW1oXEFSSZd1InijeI.roa
File: 3cFQEoU-MuW1oXEFSSZd1InijeI.roa (raw, json)
Hash identifier: oE8ykSyIM9xK2e0Qczp0gZVRMD8T9pRnEIiqmi7WyJc=
Subject key identifier: DD:C1:50:12:85:3E:32:E5:B5:A1:71:05:49:26:5D:D4:89:E2:8D:E2
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019513D58D33C96EF307236CBFD709A897BE
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3cFQEoU-MuW1oXEFSSZd1InijeI.roa
Signing time: Mon 17 Feb 2025 12:15:17 +0000
ROA not before: Mon 17 Feb 2025 12:15:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214588
IP address blocks: 78.135.96.0/24 maxlen: 24
2a10:9440:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:d5:8d:33:c9:6e:f3:07:23:6c:bf:d7:09:a8:97:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 17 12:15:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddc15012853e32e5b5a1710549265dd489e28de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:8b:ce:bf:16:57:b7:bb:e4:e2:bb:c0:c1:
2a:32:68:cd:b3:bf:c3:2c:31:3d:7c:ac:b1:07:0f:
4a:fe:e2:ec:11:16:8d:d4:3e:eb:1c:f7:f3:d8:55:
eb:fa:0b:31:51:78:24:db:d8:78:d9:ba:fc:04:83:
af:a3:85:a3:b3:d5:b9:06:e7:13:02:19:41:8c:72:
38:f3:7b:ff:14:b1:53:71:db:e7:4b:62:64:cf:59:
78:67:15:08:da:53:35:8d:35:af:df:e5:23:59:59:
d9:88:e3:14:5f:d7:2a:9f:22:2f:65:b1:d4:e7:ca:
2d:65:32:82:cb:f9:3a:57:b8:c5:fc:c0:72:be:f8:
b3:16:4d:88:0c:79:0d:fb:55:63:3b:ff:b2:37:ce:
43:e9:70:c7:e0:53:b1:28:ca:24:6d:1c:61:83:84:
50:71:25:07:3a:84:a9:2e:4c:df:53:76:88:61:21:
5f:bf:6f:1e:00:6f:11:a4:c3:91:22:32:55:d3:3f:
74:81:27:c1:88:b2:9f:07:29:ba:29:9c:3a:34:75:
14:cb:ef:0d:e6:04:b0:4f:09:2b:d2:66:3b:a6:14:
59:96:ae:70:45:2d:ab:b7:c2:fc:27:98:99:a3:30:
54:b0:50:03:b5:07:97:0a:27:b0:06:16:d8:38:0b:
8c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:50:12:85:3E:32:E5:B5:A1:71:05:49:26:5D:D4:89:E2:8D:E2
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3cFQEoU-MuW1oXEFSSZd1InijeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.96.0/24
IPv6:
2a10:9440:2::/48
Signature Algorithm: sha256WithRSAEncryption
89:92:df:91:1d:1b:78:17:c4:b5:6e:7a:1c:3c:8f:65:6c:5c:
29:5d:47:0b:02:e3:a5:76:f2:a2:f4:f2:bf:a3:a4:ef:1f:e2:
92:e3:a1:a7:2c:5f:67:8e:55:92:94:91:18:48:33:eb:12:8f:
5d:d4:18:01:c9:dc:56:e0:3a:f4:b7:22:45:28:72:bf:06:dd:
4a:db:43:83:77:46:39:92:94:9e:e7:9f:3b:09:46:96:23:b0:
50:ae:f3:78:41:41:97:fa:4b:df:77:d6:d2:4a:8a:3a:ad:5f:
a7:81:f9:05:53:40:82:21:59:83:f9:a5:33:4a:11:59:b1:a9:
b7:f6:37:15:6a:9b:fd:d9:93:e6:0c:47:75:b7:f1:72:ef:47:
0d:39:c1:8d:44:e4:ae:91:3e:df:3d:7a:42:69:21:92:ad:b4:
46:28:dc:15:7e:55:6e:20:9a:58:0a:83:a7:1b:26:ef:10:1b:
fd:02:7c:6e:e1:47:16:9a:f3:25:7f:b3:20:34:d8:a8:24:b1:
35:3f:18:eb:81:7f:a1:7d:0a:6b:6a:5e:fc:e6:59:9a:32:86:
f4:f1:9e:7e:9f:5e:97:7e:a0:10:f2:54:8c:da:5d:43:7c:6b:
ac:24:39:6c:b2:8c:db:8e:c9:ea:ba:29:5d:1d:cd:95:7c:16:
20:52:a0:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZUT1Y0zyW7zByNsv9cJqJe+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwMjE3MTIxNTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGMxNTAxMjg1M2UzMmU1YjVhMTcxMDU0OTI2NWRkNDg5ZTI4ZGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3CLzr8WV7e75OK7wMEqMmjNs7/D
LDE9fKyxBw9K/uLsERaN1D7rHPfz2FXr+gsxUXgk29h42br8BIOvo4Wjs9W5BucT
AhlBjHI483v/FLFTcdvnS2Jkz1l4ZxUI2lM1jTWv3+UjWVnZiOMUX9cqnyIvZbHU
58otZTKCy/k6V7jF/MByvvizFk2IDHkN+1VjO/+yN85D6XDH4FOxKMokbRxhg4RQ
cSUHOoSpLkzfU3aIYSFfv28eAG8RpMORIjJV0z90gSfBiLKfBym6KZw6NHUUy+8N
5gSwTwkr0mY7phRZlq5wRS2rt8L8J5iZozBUsFADtQeXCiewBhbYOAuMbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN3BUBKFPjLltaFxBUkmXdSJ4o3iMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvM2NGUUVvVS1NdVcxb1hFRlNTWmQxSW5pamVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQATodgMA8E
AgACMAkDBwAqEJRAAAIwDQYJKoZIhvcNAQELBQADggEBAImS35EdG3gXxLVuehw8
j2VsXCldRwsC46V28qL08r+jpO8f4pLjoacsX2eOVZKUkRhIM+sSj13UGAHJ3Fbg
OvS3IkUocr8G3UrbQ4N3RjmSlJ7nnzsJRpYjsFCu83hBQZf6S9931tJKijqtX6eB
+QVTQIIhWYP5pTNKEVmxqbf2NxVqm/3Zk+YMR3W38XLvRw05wY1E5K6RPt89ekJp
IZKttEYo3BV+VW4gmlgKg6cbJu8QG/0CfG7hRxaa8yV/syA02KgksTU/GOuBf6F9
CmtqXvzmWZoyhvTxnn6fXpd+oBDyVIzaXUN8a6wkOWyyjNuOyeq6KV0dzZV8FiBS
oCw=
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:11:16 2025 by rpki-client