Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/WuJkI4lNpW-xk5gvlBx9EdJA37I.roa
File: WuJkI4lNpW-xk5gvlBx9EdJA37I.roa (raw, json)
Hash identifier: szGCTg+TZirh2wKvzUU+S6/8P9i4aEhd9e97pgXJM+g=
Subject key identifier: 5A:E2:64:23:89:4D:A5:6F:B1:93:98:2F:94:1C:7D:11:D2:40:DF:B2
Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial: 01856F6FFA15BC5927A4373A82D9ACE8DAE9
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/WuJkI4lNpW-xk5gvlBx9EdJA37I.roa
Signing time: Sun 01 Jan 2023 22:24:47 +0000
ROA not before: Sun 01 Jan 2023 22:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20940
IP address blocks: 78.135.124.0/23 maxlen: 23
78.135.122.0/24 maxlen: 24
78.135.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:fa:15:bc:59:27:a4:37:3a:82:d9:ac:e8:da:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Validity
Not Before: Jan 1 22:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ae26423894da56fb193982f941c7d11d240dfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:92:f4:17:4d:d4:30:ba:7b:e6:12:25:8f:08:
c1:66:aa:b7:77:58:34:f8:f8:bd:76:02:9b:11:02:
35:f3:2e:3d:1f:96:cd:42:ec:8b:cd:bb:3c:cb:60:
68:e8:d8:76:cd:1b:0e:0a:92:5c:74:70:40:b6:7c:
ec:8d:33:40:21:c9:f1:4c:ab:7f:b0:21:19:28:17:
46:1b:1b:f2:a7:ce:cf:81:90:59:f0:5e:37:05:a2:
e7:44:8c:e2:07:6e:94:ea:6a:0e:fe:b3:0a:d1:7b:
0f:55:48:0c:dc:e6:a5:89:d2:1f:e4:cd:73:3e:db:
3d:a4:c8:98:48:f5:2a:21:31:de:6e:1c:13:8e:af:
d0:40:d1:ce:22:fb:b6:7d:69:25:30:da:29:3a:93:
21:35:13:4b:17:05:20:9f:fe:85:cd:94:0d:c1:63:
5d:3a:5c:7e:37:c2:70:f7:c8:e6:54:02:07:f5:48:
15:5e:bc:c4:e6:d3:bb:c9:14:0c:88:6e:62:22:94:
26:be:89:4b:52:d5:13:eb:f0:a8:61:ec:54:fe:4b:
b5:e3:f1:be:dd:a4:4f:f5:53:ae:00:88:f8:4c:d1:
a7:82:85:c6:c0:5a:7c:85:10:d9:dc:97:55:2b:da:
2b:f6:69:f6:95:b8:1b:38:9e:44:24:8a:20:2d:d0:
39:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:64:23:89:4D:A5:6F:B1:93:98:2F:94:1C:7D:11:D2:40:DF:B2
X509v3 Authority Key Identifier:
keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/WuJkI4lNpW-xk5gvlBx9EdJA37I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.122.0/24
78.135.124.0/22
Signature Algorithm: sha256WithRSAEncryption
26:cb:67:79:bf:f0:7d:4a:01:95:96:e2:b2:8a:ad:9d:4d:f6:
59:ee:92:97:2e:d2:b9:e1:d1:b1:57:e4:9d:8f:e8:e6:74:1b:
c7:0c:52:23:d1:8b:a5:a5:7a:76:81:31:db:26:76:67:f1:ba:
70:87:bf:c8:64:e4:de:ff:5b:bc:90:8e:79:8b:fd:36:fd:59:
48:05:63:08:42:ea:d8:c0:a4:f6:d6:68:ce:56:26:70:37:3a:
94:8d:2b:75:2d:dc:26:0e:00:74:57:16:88:62:fe:8a:28:1e:
62:50:0c:e9:6b:ee:b6:48:ea:07:29:9c:53:98:58:33:82:90:
27:7a:cb:34:53:7d:b0:d1:a8:99:14:fa:8d:46:2e:02:d3:33:
6d:e0:82:ee:fb:ed:a0:4e:b6:8a:a7:39:80:a0:85:d7:90:07:
a2:81:76:c8:03:cd:f3:40:30:9f:71:dc:47:75:fe:f4:3f:2d:
ba:e6:ab:7d:e1:d0:e9:e5:c0:a7:3b:55:ba:05:41:9c:44:fc:
d3:c8:d0:c4:ea:b9:6d:c0:e5:1a:76:b1:8d:71:e4:69:4c:63:
b6:8b:20:96:44:6e:67:af:4b:54:a9:03:f4:1e:c5:86:0d:0d:
df:98:5f:b8:3f:04:89:f1:2c:68:33:5e:fc:7b:f7:57:65:44:
4f:a4:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:42 2025 by rpki-client