Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/65OBtTjCvSppmw7kLz43nf5_Bv0.roa
File: 65OBtTjCvSppmw7kLz43nf5_Bv0.roa (raw, json)
Hash identifier: gdoaQ1Q9gp77JEHF6QFUxphPMS2cWPxD6n6ohLQUaSY=
Subject key identifier: EB:93:81:B5:38:C2:BD:2A:69:9B:0E:E4:2F:3E:37:9D:FE:7F:06:FD
Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial: 0194228DB33FA6542DE507330F5EF246C840
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/65OBtTjCvSppmw7kLz43nf5_Bv0.roa
Signing time: Wed 01 Jan 2025 15:48:19 +0000
ROA not before: Wed 01 Jan 2025 15:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49824
IP address blocks: 185.167.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b3:3f:a6:54:2d:e5:07:33:0f:5e:f2:46:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Validity
Not Before: Jan 1 15:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb9381b538c2bd2a699b0ee42f3e379dfe7f06fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:b4:6f:64:a9:73:41:bc:d8:b6:aa:52:09:
45:e0:f2:f0:fb:6a:42:f7:31:5e:0a:b8:77:ef:de:
6f:72:80:c5:45:48:eb:bc:cb:b1:98:88:13:50:be:
86:07:15:3e:bf:d0:66:d8:9e:3e:b6:db:61:c2:d0:
a8:0b:3e:75:6e:93:0e:46:85:ed:74:94:a1:b2:ac:
97:07:b9:c4:89:1b:87:10:97:48:3d:36:20:5f:bb:
68:26:49:9c:c1:d5:61:a0:2a:90:0a:f0:a9:45:6f:
bf:72:00:12:49:c8:e9:45:ba:12:91:78:c7:ab:0b:
a8:44:bf:85:eb:06:44:45:4e:e3:30:0a:50:9d:81:
0f:60:33:a8:29:8b:46:69:80:57:15:0f:42:21:c5:
e8:ec:45:80:28:d5:6d:fd:41:ca:44:50:8d:fb:4d:
6d:28:aa:ce:fc:d7:11:41:6d:c8:c0:34:2b:bb:06:
dc:1c:cb:35:8f:91:10:e6:ae:b5:e6:9e:1b:90:0c:
40:8e:6f:35:42:19:73:18:41:3c:32:ce:e6:1d:b3:
e2:63:11:ad:9f:f1:c0:4c:73:d1:0d:8f:ad:5a:11:
b9:15:ef:b7:96:31:d9:8e:0b:23:6a:0f:c6:43:04:
11:76:02:c7:c5:c3:d3:7d:46:e9:90:60:38:58:af:
c5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:93:81:B5:38:C2:BD:2A:69:9B:0E:E4:2F:3E:37:9D:FE:7F:06:FD
X509v3 Authority Key Identifier:
keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/65OBtTjCvSppmw7kLz43nf5_Bv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.78.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b8:59:32:d8:e1:40:eb:00:18:2b:2a:a8:bf:11:65:39:5e:
89:c0:1d:36:ac:03:2e:83:0e:96:b8:21:41:92:18:fa:82:65:
e4:dc:60:b7:33:39:89:8b:2f:4f:26:b6:01:7e:8d:d6:11:08:
00:dd:ff:4a:2b:b1:ce:5d:7f:c9:2d:3b:69:73:ca:f7:a7:95:
f3:36:b3:ed:e2:23:f7:47:c0:2b:4b:e5:40:7d:ab:9c:5c:df:
f5:6e:49:e2:86:35:7a:9e:6a:73:9f:e1:10:35:72:35:a2:ab:
38:04:0f:31:5f:d1:9a:58:34:0a:6e:20:d4:c6:5c:dc:a0:a8:
d6:5a:7e:b4:8c:53:d8:9c:51:df:dc:f6:a4:91:04:e0:a8:4e:
7a:d5:f7:94:5b:d8:aa:1d:ed:3c:65:4e:53:7f:40:39:5d:8b:
92:b9:12:32:b6:3e:5b:02:ac:1c:ae:ea:a8:d0:14:9a:7a:2f:
8c:05:bd:4e:e2:3a:f9:b8:80:3f:57:91:7d:4a:2c:fc:9c:fe:
bf:de:6a:1f:ea:bb:18:c6:d7:ac:21:55:f3:32:b4:6a:2f:68:
8f:15:d2:d9:a7:a3:98:d5:ad:a4:81:54:14:c3:b7:af:3a:98:
ec:23:ae:42:e4:1b:62:67:e2:33:e5:69:66:ef:3c:7e:dc:b4:
f3:c2:ea:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijbM/plQt5QczD17yRshAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDZlNTYwYTNmNWNhYzdjNjRmZTBmMTNiZTY2M2Q5NGM4
NzE0NTMwHhcNMjUwMTAxMTU0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjkzODFiNTM4YzJiZDJhNjk5YjBlZTQyZjNlMzc5ZGZlN2YwNmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4+0b2Spc0G82LaqUglF4PLw+2pC
9zFeCrh3795vcoDFRUjrvMuxmIgTUL6GBxU+v9Bm2J4+ttthwtCoCz51bpMORoXt
dJShsqyXB7nEiRuHEJdIPTYgX7toJkmcwdVhoCqQCvCpRW+/cgASScjpRboSkXjH
qwuoRL+F6wZERU7jMApQnYEPYDOoKYtGaYBXFQ9CIcXo7EWAKNVt/UHKRFCN+01t
KKrO/NcRQW3IwDQruwbcHMs1j5EQ5q615p4bkAxAjm81QhlzGEE8Ms7mHbPiYxGt
n/HATHPRDY+tWhG5Fe+3ljHZjgsjag/GQwQRdgLHxcPTfUbpkGA4WK/FHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOuTgbU4wr0qaZsO5C8+N53+fwb9MB8GA1UdIwQY
MBaAFCFG5WCj9crHxk/g8TvmY9lMhxRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTkt
NWJlNDY3NGI0NjdjLzEvNjVPQnRUakN2U3BwbXc3a0x6NDNuZjVfQnYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTktNWJlNDY3NGI0Njdj
LzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuadOMA0G
CSqGSIb3DQEBCwUAA4IBAQCGuFky2OFA6wAYKyqovxFlOV6JwB02rAMugw6WuCFB
khj6gmXk3GC3MzmJiy9PJrYBfo3WEQgA3f9KK7HOXX/JLTtpc8r3p5XzNrPt4iP3
R8ArS+VAfaucXN/1bknihjV6nmpzn+EQNXI1oqs4BA8xX9GaWDQKbiDUxlzcoKjW
Wn60jFPYnFHf3PakkQTgqE561feUW9iqHe08ZU5Tf0A5XYuSuRIytj5bAqwcruqo
0BSaei+MBb1O4jr5uIA/V5F9Siz8nP6/3mof6rsYxtesIVXzMrRqL2iPFdLZp6OY
1a2kgVQUw7evOpjsI65C5BtiZ+Iz5Wlm7zx+3LTzwup1
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:42 2025 by rpki-client