Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/UroSMBJ-dWGGRFh5Y1mFEYghmuA.roa
File: UroSMBJ-dWGGRFh5Y1mFEYghmuA.roa (raw, json)
Hash identifier: m8pCii9ZrFUBgw1JUoFjV1fAPuVi2H0sk6feFoafD2M=
Subject key identifier: 52:BA:12:30:12:7E:75:61:86:44:58:79:63:59:85:11:88:21:9A:E0
Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial: 0194266BD8BD794CDE7E8170ADE14A407860
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/UroSMBJ-dWGGRFh5Y1mFEYghmuA.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43734
IP address blocks: 78.24.240.0/21 maxlen: 21
109.235.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d8:bd:79:4c:de:7e:81:70:ad:e1:4a:40:78:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52ba1230127e7561864458796359851188219ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:8d:4d:b2:1a:53:18:0c:77:80:49:9a:c0:
b2:5f:c6:7e:12:7e:31:c5:16:0f:98:11:f2:95:e5:
31:8c:bf:3c:74:6c:1a:26:bf:66:4b:2a:6e:ac:a4:
3c:c3:e9:19:3b:00:8c:1c:81:5f:51:f6:f5:0f:8b:
78:fb:ad:a6:4d:8a:13:b0:df:5d:77:b3:aa:eb:d7:
96:7b:ca:b5:35:9d:23:33:82:d1:f9:9d:07:85:c0:
f0:5c:32:05:d3:c6:cd:2b:f5:3a:2e:70:81:d0:6e:
42:dc:87:fa:75:2c:6c:fa:b3:c1:55:80:a3:f5:dd:
0f:ae:bc:09:c8:18:f2:41:d7:bd:db:f4:f5:c4:bb:
9a:96:53:bd:e4:5b:f9:f6:f9:14:0f:81:6a:b7:78:
29:d8:8a:97:6a:18:97:79:bc:1a:0a:26:84:09:bf:
9a:68:f0:8b:00:31:c4:40:ed:59:d1:e6:c0:d7:db:
c9:44:47:86:60:05:4f:c3:14:71:21:12:85:81:02:
b2:8b:e7:07:0f:e2:1a:1a:ae:1d:9e:4a:88:99:04:
01:d1:c9:a1:ba:4e:af:14:81:f4:76:c3:7b:85:26:
37:fb:5c:08:3c:fa:46:7b:92:d7:df:2d:0a:a3:4d:
15:48:19:79:e0:5b:0e:17:ee:63:e3:3d:b4:ba:48:
11:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BA:12:30:12:7E:75:61:86:44:58:79:63:59:85:11:88:21:9A:E0
X509v3 Authority Key Identifier:
keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/UroSMBJ-dWGGRFh5Y1mFEYghmuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.240.0/21
109.235.80.0/21
Signature Algorithm: sha256WithRSAEncryption
84:12:4e:7a:84:5a:52:76:9b:c9:16:61:ef:af:a1:c8:e1:6d:
e4:27:4e:00:6b:41:b9:fc:52:aa:c6:6e:27:10:5c:0f:79:3f:
a9:ba:34:37:ff:25:46:f2:07:93:42:e0:eb:2f:09:92:79:9a:
ef:a2:f9:d2:be:84:61:59:ff:ad:a4:dc:2e:ae:48:29:9d:41:
3c:ff:bd:7b:74:a2:43:7b:c3:9b:15:37:2a:b0:c8:16:9b:aa:
02:17:c0:59:c4:81:bc:d0:ba:78:07:a2:98:09:56:d6:1a:2b:
51:31:63:03:a5:18:0f:91:35:31:aa:1e:4c:7d:e5:cf:79:75:
e8:43:cb:34:d6:ad:4c:27:8b:af:d2:4f:65:d8:18:4a:cc:c7:
80:37:bf:6f:0b:da:50:25:23:46:c7:b5:57:bb:74:2a:80:7a:
84:78:3e:ff:6d:a9:36:f7:e6:e7:b0:2c:31:52:bc:41:f0:cc:
18:02:3e:07:3f:49:1d:e5:94:88:58:90:36:ba:2d:f9:c1:32:
44:48:5f:f6:3d:a6:9a:52:84:47:95:f1:21:22:a1:ed:45:80:
59:88:24:07:4e:c1:42:56:f2:1c:77:e2:57:14:67:30:4c:a1:
c6:e4:3d:13:df:06:b5:b1:cd:d1:29:44:6d:1a:36:92:c9:fe:
77:aa:42:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:47:32 2025 by rpki-client