Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/Dn1x9nqC0rA_VncF-BuvaeIn_Yc.roa
File: Dn1x9nqC0rA_VncF-BuvaeIn_Yc.roa (raw, json)
Hash identifier: HSjxAg+X+QFqjbXeKMYZbr1j8n6ewv+Jo99Iqhyk6hE=
Subject key identifier: 0E:7D:71:F6:7A:82:D2:B0:3F:56:77:05:F8:1B:AF:69:E2:27:FD:87
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 019422203A82BFF3B63A9816D1FEAFD9AA01
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/Dn1x9nqC0rA_VncF-BuvaeIn_Yc.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213301
IP address blocks: 185.78.84.0/24 maxlen: 24
185.78.85.0/24 maxlen: 24
185.174.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3a:82:bf:f3:b6:3a:98:16:d1:fe:af:d9:aa:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e7d71f67a82d2b03f567705f81baf69e227fd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:19:58:7f:fc:2b:60:02:5a:ee:46:de:14:
b7:20:c8:0f:35:63:35:6a:ee:e1:cb:91:e7:f3:74:
64:2a:35:ef:e8:41:bc:f9:ff:a0:bf:61:be:18:af:
bc:cf:54:fe:79:92:12:da:a2:57:26:21:4b:76:ff:
d7:19:8e:60:a2:a3:f5:9f:34:95:3a:2e:8e:41:cc:
8e:fe:4c:9a:d4:6a:57:0d:b6:52:b3:be:49:8a:fa:
bd:b6:39:48:87:0a:a6:77:f3:b5:2f:f0:99:d9:e6:
c0:25:91:dc:11:b5:3c:2f:80:ce:e5:1a:45:a7:69:
ea:c4:56:c7:86:65:94:0b:fe:35:57:22:ad:b3:1b:
ea:cf:ba:21:c9:90:dc:2f:e6:fc:09:83:5f:ea:bc:
3b:9d:b3:ee:d6:37:b0:96:4a:bf:19:e9:44:a4:88:
86:c4:65:9c:1e:99:e4:16:bc:3f:c7:3d:f0:f9:c7:
b9:bb:c3:52:ca:06:e9:61:a0:8f:ef:bb:e1:7f:fc:
f3:da:08:cb:15:7f:13:58:03:92:11:31:3a:c5:25:
e4:b9:d3:cc:a4:0e:f1:a4:3b:fd:bc:5f:a8:1e:e4:
6c:c6:f1:0f:72:f1:53:b4:13:13:fd:57:05:3b:3b:
c5:58:cf:63:2e:07:b3:d5:2a:17:c2:02:2f:94:c1:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:71:F6:7A:82:D2:B0:3F:56:77:05:F8:1B:AF:69:E2:27:FD:87
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/Dn1x9nqC0rA_VncF-BuvaeIn_Yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.84.0/23
185.174.68.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5e:f9:6e:47:a2:b1:17:0e:b0:a0:18:6f:80:a6:69:70:96:
08:2f:2a:71:ed:a1:5b:d0:f5:11:4f:b9:56:be:d0:f2:7c:4f:
98:36:2d:85:91:77:da:9c:40:fd:de:d2:64:1c:53:a5:ed:06:
12:a7:06:a9:69:81:37:c2:61:aa:86:af:df:fe:4d:59:dd:99:
93:c2:f6:29:7f:cd:dc:77:15:66:eb:c3:d9:4e:4e:74:d0:df:
d7:5e:c1:a9:3c:64:87:fd:88:e6:f7:84:6a:7f:f5:a5:76:32:
90:b1:67:ea:b3:09:57:ec:f1:66:fd:0a:ab:e7:ca:1d:5c:e7:
36:cf:aa:86:4a:5f:25:14:24:bf:71:9a:2e:53:96:4d:35:db:
6a:55:95:2b:4f:e9:b5:c1:8f:ed:cc:65:79:10:f4:30:09:d5:
d5:74:b0:88:d7:53:f5:dc:77:d0:6e:71:d8:c9:0e:8c:30:5e:
0a:f4:9f:f1:45:c7:e1:9e:09:33:a1:44:d4:fd:7c:07:3d:22:
d1:d6:14:21:37:17:4f:5f:f2:1d:a9:3a:36:0b:06:d6:66:d7:
8a:e4:57:b3:d8:d7:5c:21:61:37:22:c7:8b:88:ac:53:e1:b1:
1e:ab:b6:5a:2b:17:f5:d9:53:fc:73:be:73:a6:f4:5c:56:b9:
4b:ff:90:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:47:43 2025 by rpki-client