Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Yv_ZIKTI78-SZ73v9nhYtA6ECdU.roa
File: Yv_ZIKTI78-SZ73v9nhYtA6ECdU.roa (raw, json)
Hash identifier: W2t6HO+r740Eti1FW8nBZGqwbxPPpxIFiEWNlU0cARU=
Subject key identifier: 62:FF:D9:20:A4:C8:EF:CF:92:67:BD:EF:F6:78:58:B4:0E:84:09:D5
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019427469C0134AD98120C608BFEB51BDD7B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Yv_ZIKTI78-SZ73v9nhYtA6ECdU.roa
Signing time: Thu 02 Jan 2025 13:48:46 +0000
ROA not before: Thu 02 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47585
IP address blocks: 78.135.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:9c:01:34:ad:98:12:0c:60:8b:fe:b5:1b:dd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62ffd920a4c8efcf9267bdeff67858b40e8409d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:6f:58:e9:15:8b:27:39:f7:9b:2e:ea:e0:
7a:7d:c0:c5:b3:9e:70:b9:9d:b5:47:58:e3:4a:fd:
53:dd:55:ec:a6:04:47:a6:0b:d5:4f:78:5b:b2:7b:
59:bd:9b:b9:bb:59:b4:9e:84:e3:0c:c6:d9:29:98:
39:83:08:87:4d:29:33:0a:01:bf:87:7e:63:09:54:
07:63:f1:8c:76:55:53:c3:10:6a:04:45:1d:d9:b5:
d4:89:ff:12:b5:35:f3:2d:2e:86:76:de:ec:0e:ce:
66:ed:72:a2:79:e9:82:68:58:9d:6d:bc:4b:6c:07:
7f:e3:ee:20:6b:91:b3:f5:4b:15:04:de:56:ff:5e:
bb:59:fc:fa:8b:57:93:22:b7:2a:c3:36:a6:70:3b:
df:a7:ef:8e:77:b6:d6:43:87:42:37:c9:4a:01:0c:
7b:71:c9:21:1b:b5:9b:7b:36:be:17:63:1f:5f:05:
9c:be:fd:5a:e2:94:4c:8e:59:b8:91:20:67:ba:a3:
0e:ef:28:70:c9:43:0f:38:9d:0b:78:a5:af:64:0a:
bb:fa:a8:b7:0f:5a:98:f1:55:d1:8b:a2:f0:46:9c:
c2:b7:b5:23:e3:4d:53:f3:ed:e9:b7:94:c8:4d:47:
09:5d:d5:e9:69:1c:e4:7d:b8:6f:fe:e9:ba:86:eb:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:D9:20:A4:C8:EF:CF:92:67:BD:EF:F6:78:58:B4:0E:84:09:D5
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Yv_ZIKTI78-SZ73v9nhYtA6ECdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.111.0/24
Signature Algorithm: sha256WithRSAEncryption
04:14:06:3a:1c:1c:42:56:ad:df:91:11:fd:3d:a1:9c:d4:24:
e2:52:65:b2:1b:dd:f4:8e:63:b1:00:1a:f6:51:22:b6:6d:ed:
39:54:fe:9a:34:68:1a:7a:99:76:5c:74:1c:53:3b:45:a8:b9:
48:cd:c6:9d:18:f4:57:1d:6b:8d:ec:36:67:c2:04:fa:9c:8e:
ed:75:c0:44:63:c4:79:84:70:19:66:93:2e:36:28:c6:44:b5:
84:4a:0d:da:a2:ca:f9:e8:49:2a:3a:f5:2f:5c:f4:f1:67:fc:
ad:45:dc:bf:d9:da:df:68:8f:7f:bb:50:ce:80:a9:50:88:8c:
f5:a4:7a:55:5d:6e:98:c7:2f:d0:6a:83:03:cc:b0:27:33:b1:
46:d5:82:ca:94:08:75:28:ff:5f:ef:97:6e:d9:28:8e:2c:93:
0d:dd:31:07:45:9b:4c:6a:cd:2f:86:ab:39:e0:22:4a:1a:26:
9d:36:98:ae:9d:f7:4d:b4:37:b7:6f:05:51:5f:7e:cd:bc:8f:
3e:03:0c:7b:a3:8a:48:79:b8:3b:e8:00:34:73:90:f6:1b:92:
30:31:1f:21:f3:18:4e:0d:fa:32:06:f3:b3:8b:18:7f:3e:b3:
f5:a3:8a:9d:b8:df:60:5a:6f:46:5c:3a:50:bc:b8:2f:65:6f:
df:3b:d3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:17:20 2025 by rpki-client