Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/I5_G-9s_oVaNxLhCKWswnvQ0TMM.roa
File: I5_G-9s_oVaNxLhCKWswnvQ0TMM.roa (raw, json)
Hash identifier: ltQS9xzvLFRh2FTtqC5cdoW+novDvu7FCqL33TC4gbs=
Subject key identifier: 23:9F:C6:FB:DB:3F:A1:56:8D:C4:B8:42:29:6B:30:9E:F4:34:4C:C3
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 01942143E0007BBA30891E7761E2D8C6BB53
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/I5_G-9s_oVaNxLhCKWswnvQ0TMM.roa
Signing time: Wed 01 Jan 2025 09:48:03 +0000
ROA not before: Wed 01 Jan 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43586
IP address blocks: 78.24.72.0/24 maxlen: 24
78.24.75.0/24 maxlen: 24
78.24.76.0/24 maxlen: 24
78.24.77.0/24 maxlen: 24
78.24.78.0/24 maxlen: 24
2a00:1908::/35 maxlen: 35
2a00:1908:e47::/48 maxlen: 48
2a00:1908:2000::/35 maxlen: 35
2a00:1908:4000::/35 maxlen: 35
2a00:1908:6000::/35 maxlen: 35
2a00:1908:8000::/35 maxlen: 35
2a00:1908:a000::/35 maxlen: 35
2a00:1908:c000::/35 maxlen: 35
2a00:1908:c000::/36 maxlen: 36
2a00:1908:d000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e0:00:7b:ba:30:89:1e:77:61:e2:d8:c6:bb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jan 1 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=239fc6fbdb3fa1568dc4b842296b309ef4344cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:39:62:d8:bc:4f:7b:70:ce:47:25:16:0e:
13:9e:44:17:12:11:07:05:74:6d:9a:4a:54:6b:ac:
53:65:9c:fa:e2:9a:50:f8:99:5e:c7:d2:d5:aa:91:
29:01:57:d6:28:38:31:32:f9:58:19:65:26:21:1c:
ba:d6:c8:fc:06:fa:c0:be:b0:bd:15:78:46:ba:d2:
e3:08:e3:71:cf:7b:28:8b:b3:91:96:ec:ab:8d:59:
6c:ed:5a:96:24:50:fc:0a:6e:d2:48:d4:2c:56:fa:
60:57:50:90:c5:52:81:f9:02:07:48:9d:84:93:58:
ce:8a:4f:52:fa:10:c0:a4:58:91:50:c3:d2:59:94:
90:83:ef:5b:8d:20:45:e7:85:93:74:a8:5e:ef:7b:
89:27:f6:07:a4:f1:04:8f:cd:74:ec:5b:a5:cb:8e:
3c:41:9c:10:a9:67:46:47:73:a0:59:83:c5:61:9d:
8b:be:ce:71:59:b9:1f:ec:94:b0:44:76:0f:32:bc:
12:3b:cb:d2:97:3a:be:e1:41:aa:27:3c:37:c1:0f:
d6:8c:93:79:28:a4:b8:d3:65:96:13:f1:cb:c8:8d:
b5:f4:bf:e7:e8:69:d2:7f:2f:23:20:1b:6b:ce:08:
6c:27:37:30:e9:e6:58:f0:5c:05:5a:01:ee:c6:62:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9F:C6:FB:DB:3F:A1:56:8D:C4:B8:42:29:6B:30:9E:F4:34:4C:C3
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/I5_G-9s_oVaNxLhCKWswnvQ0TMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.72.0/24
78.24.75.0-78.24.78.255
IPv6:
2a00:1908::-2a00:1908:dfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2c:c2:2e:d8:44:36:a0:90:50:d6:2b:26:95:b3:0e:91:ae:01:
09:25:da:1f:59:46:32:94:5c:89:d1:30:bb:52:34:44:58:06:
3f:a2:0e:24:c3:1b:cc:43:d9:52:39:88:cf:73:c4:93:e7:1a:
62:e1:00:14:01:3f:f2:49:86:72:cc:37:1c:cb:1f:4a:ad:64:
b7:67:be:e9:3a:93:36:e5:39:c7:9f:15:d7:31:b6:8b:e9:09:
2b:5f:4c:1b:7d:28:ff:da:11:3e:2a:92:ff:e5:f1:af:01:6d:
ee:7e:9c:58:33:95:8d:81:ba:2e:1e:68:5d:41:14:ac:82:cf:
9b:37:01:12:ca:f3:32:4b:14:1f:c4:b3:3e:dd:38:dc:3c:e8:
cb:a2:b4:1a:d0:88:31:4e:e5:ba:96:11:18:26:1e:72:a8:21:
6a:55:3a:55:72:0e:f5:ed:5c:58:a6:25:a2:86:93:4e:a6:66:
c0:4c:39:27:2e:bb:56:d9:b0:be:cc:8a:08:d9:bd:cc:ec:81:
50:20:2a:f8:0a:13:c1:fb:c0:10:f0:b9:ff:7c:d5:6c:69:d3:
a4:5b:2f:b5:b0:fb:48:43:dc:08:ab:a6:f1:16:bc:c7:3f:6b:
f5:50:3d:78:94:2a:2a:1b:db:66:6c:72:00:0a:ec:22:aa:90:
e0:0e:88:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:16 2025 by rpki-client