Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/XSbgubujJJ9FZpTPfifgq3AkiU8.roa
File: XSbgubujJJ9FZpTPfifgq3AkiU8.roa (raw, json)
Hash identifier: QttXfkZolFdSxkPkwsYt6vSDl8DXa766XeZMDQS4Mtw=
Subject key identifier: 5D:26:E0:B9:BB:A3:24:9F:45:66:94:CF:7E:27:E0:AB:70:24:89:4F
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D4773A8332C10F0C302A59ABC264A
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/XSbgubujJJ9FZpTPfifgq3AkiU8.roa
Signing time: Wed 01 Jan 2025 15:47:51 +0000
ROA not before: Wed 01 Jan 2025 15:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209241
IP address blocks: 80.78.134.0/24 maxlen: 24
2a0d:2146:8050::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:47:73:a8:33:2c:10:f0:c3:02:a5:9a:bc:26:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d26e0b9bba3249f456694cf7e27e0ab7024894f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:35:97:9c:9c:82:19:2e:64:6f:92:73:0f:
a3:8b:bd:24:2a:ee:f0:bf:fc:cd:0c:47:e0:38:a6:
33:c7:00:2b:01:e0:52:ed:fb:40:cc:9a:47:8b:6f:
1c:ed:c6:12:ff:da:d7:1e:f6:fc:3f:ec:36:88:36:
73:8b:fa:69:6b:1a:a8:98:c7:ea:4d:d5:3f:10:ef:
58:d6:47:0b:a7:b4:8a:f2:fe:d9:0e:46:d3:3d:ff:
a3:f0:d5:83:de:95:33:7a:79:32:19:db:22:52:74:
49:6c:12:e5:9e:44:2b:f3:ce:9c:e2:ab:38:e8:1c:
d1:6b:82:86:6c:25:59:23:40:3c:74:88:e6:69:86:
71:5c:c3:be:96:e9:25:8e:67:97:ad:48:97:27:22:
22:49:5a:12:1a:48:c3:84:73:fc:8e:3e:4e:b8:3b:
da:70:d6:e8:2b:c2:97:c7:85:e8:1d:02:5c:7c:bb:
c6:ba:c1:d7:5d:8a:17:d2:db:89:da:cd:12:07:a5:
28:25:e4:73:04:2c:3c:19:d4:f7:ed:87:2b:b3:70:
db:5a:22:79:e6:77:45:9e:d8:ed:6a:61:f1:81:07:
a6:bc:51:69:d4:e7:77:c6:da:c4:d3:18:8e:a0:2a:
55:e0:04:bf:95:3a:df:10:5a:21:f6:9f:e0:52:12:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:26:E0:B9:BB:A3:24:9F:45:66:94:CF:7E:27:E0:AB:70:24:89:4F
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/XSbgubujJJ9FZpTPfifgq3AkiU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.134.0/24
IPv6:
2a0d:2146:8050::/44
Signature Algorithm: sha256WithRSAEncryption
1d:c2:67:9f:01:89:3a:ed:bb:ab:d9:3a:d5:18:e3:f9:7b:31:
1d:1e:66:b6:b8:c4:c7:76:c4:94:55:4e:36:6e:de:56:b7:54:
a8:a6:32:07:83:00:71:28:e2:25:f9:b3:f1:74:26:b5:b0:c8:
de:cb:20:47:71:e5:ce:9d:77:c8:64:27:e9:40:6b:d7:f2:ed:
1a:d8:7d:3b:bc:7c:94:f3:7b:b2:01:69:22:1a:dd:7c:37:2c:
37:75:b2:76:3b:c2:93:12:c4:9c:7a:43:48:7b:e5:71:22:29:
45:ed:7c:c7:77:7e:ec:f0:a1:14:bb:a2:68:c7:ab:c5:78:23:
46:19:29:d5:33:f0:ae:60:3e:82:51:51:6e:35:97:5d:1e:df:
1e:8a:73:04:74:ff:b4:ee:78:18:89:34:ab:c4:fb:0b:0f:ca:
ff:9d:4b:2f:0c:0a:cd:25:34:e6:68:39:1d:3a:f5:b8:1d:cb:
90:5d:1d:96:84:1e:71:b1:58:19:4c:46:0e:fb:08:05:8e:e2:
0b:74:56:22:4f:7c:c7:b0:1b:78:b7:ed:7d:3e:74:3e:e9:69:
eb:55:74:09:fd:3a:d5:3f:e1:2f:41:cc:d0:ab:48:5d:7e:7e:
b4:69:3a:fd:4f:72:fa:db:9e:cf:3d:e7:a2:8b:b5:1e:52:ed:
64:72:b5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:00 2025 by rpki-client