Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/kB78k7d7cNChEiOEdhutVluA5Eg.roa
File: kB78k7d7cNChEiOEdhutVluA5Eg.roa (raw, json)
Hash identifier: a/qillBjMak//HIfJthslOlVYybCavMHPJc8Tn/8qiM=
Subject key identifier: 90:1E:FC:93:B7:7B:70:D0:A1:12:23:84:76:1B:AD:56:5B:80:E4:48
Certificate issuer: /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial: 019445FCBF09CA9BBC8564081A4F39AFFD0E
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/kB78k7d7cNChEiOEdhutVluA5Eg.roa
Signing time: Wed 08 Jan 2025 12:56:19 +0000
ROA not before: Wed 08 Jan 2025 12:56:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 31.88.0.0/15 maxlen: 24
218.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:fc:bf:09:ca:9b:bc:85:64:08:1a:4f:39:af:fd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c672da72a34cc282adc40f282676de75117654
Validity
Not Before: Jan 8 12:56:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=901efc93b77b70d0a1122384761bad565b80e448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:0e:e0:64:12:84:9a:b5:8e:93:c2:c8:72:
5e:85:93:ff:e7:bb:f1:77:ef:85:c9:ca:c8:39:14:
cb:7b:81:cb:55:e6:de:63:32:df:2d:63:84:f1:bf:
22:6b:14:91:34:42:62:99:d3:34:ef:e0:2a:08:ae:
e8:c9:11:32:23:d9:16:d7:05:4f:e4:e3:12:c9:87:
c8:7b:1f:73:7e:2d:45:0f:d2:ac:46:3e:9b:76:a9:
f4:2b:5a:50:af:c7:83:cc:23:39:67:1f:10:1b:5a:
e5:bf:f1:ea:11:7b:e1:f4:10:5d:aa:43:37:13:a1:
48:6e:dc:6a:52:f1:19:38:6e:79:66:3f:52:61:9a:
4d:d1:dc:6d:f8:cb:f1:ce:f7:6d:39:65:3a:34:40:
f6:a3:71:0f:c7:d5:08:53:c9:5d:eb:92:b6:e4:56:
4d:1c:43:ed:0e:f0:d4:f9:d9:35:30:ec:b7:cb:09:
e0:15:cc:63:eb:53:77:54:74:04:b8:f7:50:ea:c3:
af:e5:fc:eb:15:5f:ae:ea:fe:de:a8:bc:60:19:20:
84:7a:9f:80:6b:b7:d7:96:e8:76:82:d3:1b:b9:f8:
b3:17:50:95:bf:26:bd:9c:e8:63:5f:56:b6:ad:eb:
73:2c:bc:e2:e3:a5:69:83:b7:73:7e:05:61:96:80:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1E:FC:93:B7:7B:70:D0:A1:12:23:84:76:1B:AD:56:5B:80:E4:48
X509v3 Authority Key Identifier:
keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/kB78k7d7cNChEiOEdhutVluA5Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.88.0.0/15
218.254.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:78:60:16:25:b9:32:74:b6:9c:13:74:f6:49:e7:4d:93:7f:
09:92:11:43:b1:39:bf:10:3d:ef:6e:04:0e:6c:ac:ca:a0:e0:
27:04:35:f1:70:1e:72:7b:07:52:bd:86:e1:22:c6:56:9f:f0:
59:2b:a5:73:78:d1:7f:2f:d9:fe:76:06:72:b1:2f:1a:93:9a:
00:88:47:22:50:6b:62:ae:44:a1:dc:16:5a:11:70:0e:ae:68:
45:1f:df:08:3a:3b:34:ea:ce:22:d4:bf:7b:27:9c:5b:92:10:
3c:ac:79:75:3c:3e:7d:42:99:3b:5f:20:01:5b:8a:84:c9:ac:
fe:1e:8f:16:94:a3:73:f2:dd:7a:a9:fe:49:69:a6:6e:ae:c1:
6e:d3:52:f8:69:9c:95:e2:55:0e:2e:68:29:af:58:5e:8e:f0:
1e:d5:fc:a5:cd:98:83:23:a1:a8:b9:3a:ab:e6:78:d2:8a:70:
bd:1e:98:98:81:2d:fb:ca:38:6c:85:88:56:55:73:05:a9:e3:
34:3e:81:b1:63:f1:f5:6d:53:88:1f:8e:29:2c:7b:d3:91:27:
ae:91:e8:b9:f2:ce:ef:66:04:5c:af:43:88:95:3e:0a:d5:14:
f1:e6:57:a5:db:47:dc:52:51:da:c8:d1:13:34:72:63:db:fc:
6a:cc:24:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:38 2025 by rpki-client