Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/eDadDtbUcIiPn7CugigIqO3K7qM.roa
File: eDadDtbUcIiPn7CugigIqO3K7qM.roa (raw, json)
Hash identifier: w3sLtjeva5BaNI3kpW8GFzEskEHaA90myFjWFqXhCVg=
Subject key identifier: 78:36:9D:0E:D6:D4:70:88:8F:9F:B0:AE:82:28:08:A8:ED:CA:EE:A3
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD50FFF3DB37F45569F567B0798187E
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/eDadDtbUcIiPn7CugigIqO3K7qM.roa
Signing time: Mon 02 Jan 2023 00:15:12 +0000
ROA not before: Mon 02 Jan 2023 00:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9050
IP address blocks: 94.176.164.0/23 maxlen: 24
94.177.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:0f:ff:3d:b3:7f:45:56:9f:56:7b:07:98:18:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78369d0ed6d470888f9fb0ae822808a8edcaeea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:79:55:64:bb:61:6c:60:77:e2:ee:e8:fb:
e3:81:43:4a:f5:21:c7:53:e4:e7:c9:4b:37:3c:cd:
00:6a:a1:5d:2e:c1:40:95:36:ba:f5:aa:54:b6:7e:
9c:38:eb:f1:e5:ef:ac:50:f3:05:33:9d:bc:95:51:
fb:6b:83:2c:3b:7e:d0:63:03:6e:aa:4b:f1:ff:cd:
08:31:d6:46:ac:e2:3e:43:38:5b:e6:4a:e1:ae:1a:
09:1a:88:55:8d:2c:e2:5c:83:a0:71:a7:fe:65:a7:
92:8e:ac:56:6e:55:10:5b:02:bb:6f:d5:39:14:87:
ac:09:9b:b5:46:a3:b0:a0:f7:02:4c:04:74:bb:36:
a6:bb:e6:6f:a6:6a:97:45:ee:5e:a4:12:99:61:93:
fb:98:9b:b2:08:e6:a8:d9:38:62:1c:5d:d0:47:5f:
8b:39:54:7f:d3:e1:bf:43:f1:ba:91:03:57:96:ca:
27:18:78:15:fd:fb:f7:6a:95:4c:83:43:24:90:2b:
65:4b:57:3f:f0:6e:98:d4:eb:89:8e:e5:df:41:f4:
0d:0f:0d:a9:fc:21:32:31:06:22:c0:4e:70:d3:9e:
18:20:80:0c:fa:43:ed:c0:33:30:de:15:45:24:bf:
b4:73:c2:d9:30:25:79:2e:d0:02:41:4c:66:c4:66:
c9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:36:9D:0E:D6:D4:70:88:8F:9F:B0:AE:82:28:08:A8:ED:CA:EE:A3
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/eDadDtbUcIiPn7CugigIqO3K7qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.164.0/23
94.177.107.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:94:a9:4d:42:c8:75:23:c4:83:df:3a:af:d5:4b:1f:57:f7:
84:30:68:67:b2:15:e7:52:ee:92:86:16:ab:c1:53:76:17:49:
bd:19:03:5a:e5:95:be:f8:2e:45:31:d7:36:3b:67:52:dc:13:
a5:16:9e:19:12:07:16:24:ab:2a:21:c6:54:cc:68:3f:85:fb:
27:86:fd:c9:b8:2f:4e:5b:24:9c:a3:54:1b:e1:0b:fa:93:e5:
b5:44:62:66:fd:3e:ac:8c:d7:61:d6:25:c9:a7:b9:92:5d:15:
7f:9c:0a:60:cc:13:46:23:77:8f:ef:72:46:59:e5:5c:71:ae:
52:14:7b:41:2c:0b:d6:f7:c9:ea:b7:87:31:0e:a0:ba:e8:b3:
8c:6f:bc:eb:29:43:95:4e:9f:c7:63:98:00:42:08:3e:e8:03:
55:94:15:b3:3a:e5:ee:42:c1:08:12:ca:b8:cc:a3:15:fc:7b:
41:ec:48:97:87:08:32:cf:c9:75:a0:16:e4:79:22:4e:f1:9e:
f0:69:4e:9e:d2:45:4f:da:6d:08:0e:e2:85:55:5e:32:1a:26:
34:59:71:d6:2b:3c:03:95:26:ea:1f:1b:63:7d:bd:e7:9c:ef:
1a:60:6f:fc:4e:7c:08:8d:bf:c3:13:2b:ae:d2:c0:74:2d:2d:
ba:3e:e5:7f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVv1Q//PbN/RVafVnsHmBh+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODM2OWQwZWQ2ZDQ3MDg4OGY5ZmIwYWU4MjI4MDhhOGVkY2FlZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfx5VWS7YWxgd+Lu6PvjgUNK9SHH
U+TnyUs3PM0AaqFdLsFAlTa69apUtn6cOOvx5e+sUPMFM528lVH7a4MsO37QYwNu
qkvx/80IMdZGrOI+Qzhb5krhrhoJGohVjSziXIOgcaf+ZaeSjqxWblUQWwK7b9U5
FIesCZu1RqOwoPcCTAR0uzamu+ZvpmqXRe5epBKZYZP7mJuyCOao2ThiHF3QR1+L
OVR/0+G/Q/G6kQNXlsonGHgV/fv3apVMg0MkkCtlS1c/8G6Y1OuJjuXfQfQNDw2p
/CEyMQYiwE5w054YIIAM+kPtwDMw3hVFJL+0c8LZMCV5LtACQUxmxGbJPwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHg2nQ7W1HCIj5+wroIoCKjtyu6jMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL2VEYWREdGJVY0lpUG43Q3VnaWdJcU8zSzdxTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAFesKQD
BABesWswDQYJKoZIhvcNAQELBQADggEBAMaUqU1CyHUjxIPfOq/VSx9X94QwaGey
FedS7pKGFqvBU3YXSb0ZA1rllb74LkUx1zY7Z1LcE6UWnhkSBxYkqyohxlTMaD+F
+yeG/cm4L05bJJyjVBvhC/qT5bVEYmb9PqyM12HWJcmnuZJdFX+cCmDME0Yjd4/v
ckZZ5VxxrlIUe0EsC9b3yeq3hzEOoLros4xvvOspQ5VOn8djmABCCD7oA1WUFbM6
5e5CwQgSyrjMoxX8e0HsSJeHCDLPyXWgFuR5Ik7xnvBpTp7SRU/abQgO4oVVXjIa
JjRZcdYrPAOVJuofG2N9veec7xpgb/xOfAiNv8MTK67SwHQtLbo+5X8=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:28 2025 by rpki-client