Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa
File: U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa (raw, json)
Hash identifier: hA3Tc0kWdN97ny1EHuTJ6/LUGMuF5PlrxnFA5mg1cTU=
Subject key identifier: 53:55:80:FD:EF:5B:BB:A8:F9:63:F9:0B:55:52:24:CF:61:92:6C:69
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 01941FFA41E9462852F33704A9E0595744E5
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.78.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:e9:46:28:52:f3:37:04:a9:e0:59:57:44:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=535580fdef5bbba8f963f90b555224cf61926c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:87:83:43:c4:8a:81:8d:b8:5a:e2:cf:79:
9d:31:40:75:5d:13:d9:11:6b:45:8a:db:66:49:fc:
b0:16:d4:7e:43:23:c8:c8:75:60:7c:d9:90:2c:6c:
c6:ba:54:69:c7:c2:d2:db:08:2d:76:cb:d2:87:3b:
61:bd:82:9f:49:00:46:6c:f1:97:57:68:68:14:7e:
e6:1c:5e:d2:79:e8:af:37:c2:9e:c1:5c:c4:63:f6:
78:ed:d0:81:60:6d:4e:26:04:00:4a:ce:32:4d:b5:
24:ac:bf:cc:90:68:7b:f2:96:3d:ac:ec:b7:06:a5:
5a:6f:89:e3:38:e0:9c:1c:f1:c2:8f:27:f0:63:40:
c1:8f:8d:19:a0:d9:d3:8d:c7:6f:ee:dc:70:c2:32:
85:ad:93:18:8c:a2:e8:38:d8:5b:8a:b8:c4:54:e4:
c2:57:c7:db:9d:d7:2c:30:d3:2a:6f:3c:50:29:67:
7a:07:a1:cb:84:13:28:d5:60:96:ae:83:cc:5b:62:
65:62:0c:c2:e6:27:8d:ed:1e:47:dc:25:09:85:14:
ce:c4:52:7c:6a:0a:25:d7:f3:8d:be:67:da:d8:03:
bb:7c:30:78:ae:e9:99:23:c1:e9:8f:08:c8:00:c9:
e2:56:fe:23:f9:04:d5:6c:40:b6:a5:ba:73:75:e1:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:55:80:FD:EF:5B:BB:A8:F9:63:F9:0B:55:52:24:CF:61:92:6C:69
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.200.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:b4:6c:88:2d:3d:6b:76:ee:8b:ba:17:c0:35:40:f6:a5:5f:
38:3f:c8:8a:9d:87:31:15:79:ed:8b:ee:d8:8c:cc:8a:f9:bc:
4a:77:ad:0f:28:e1:4c:55:1e:56:7f:22:af:9e:bc:92:ce:4c:
09:e6:b1:d3:44:ff:e0:87:94:af:73:40:7c:ae:23:b8:a9:f1:
4f:9b:af:fd:c2:cf:7c:84:6a:04:0f:ee:50:4e:93:e7:e7:99:
3f:50:ea:38:52:25:79:ea:ae:70:e2:ff:27:52:6d:67:e8:36:
89:11:91:ea:89:00:09:ee:b6:e0:d9:f2:52:9d:fa:6d:c5:f4:
da:89:7e:29:3c:79:82:d7:17:7d:db:34:43:0a:50:f3:e5:cf:
18:77:eb:a6:a4:24:1b:f8:81:94:4d:77:4b:50:4e:ae:4b:58:
00:31:f1:59:b8:2d:19:4b:71:c2:a3:15:60:5a:52:5f:67:4a:
d1:d5:60:73:61:a5:43:45:12:c7:25:a7:88:bc:0f:e5:fc:76:
14:06:d5:50:bf:2f:6b:19:d3:0b:35:f9:d9:a4:54:77:39:2d:
75:f3:49:2b:8e:3d:62:a4:d0:24:0e:ec:aa:82:4f:10:e5:22:
51:8a:6d:1c:c5:37:96:7b:cd:47:a9:b9:67:f6:20:0e:0b:6c:
1e:18:96:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:44 2025 by rpki-client