Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/apVg1r-Sx72_NMGqvMKxn2vdJDQ.roa
File: apVg1r-Sx72_NMGqvMKxn2vdJDQ.roa (raw, json)
Hash identifier: eiAcbT0fLJMlRd3CH8DqaWbbz8qsMXCsRaindFQXqHs=
Subject key identifier: 6A:95:60:D6:BF:92:C7:BD:BF:34:C1:AA:BC:C2:B1:9F:6B:DD:24:34
Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial: 07F99217
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/apVg1r-Sx72_NMGqvMKxn2vdJDQ.roa
Signing time: Sat 01 Jan 2022 10:56:16 +0000
ROA not before: Sat 01 Jan 2022 10:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20940
IP address blocks: 78.135.124.0/23 maxlen: 23
78.135.122.0/24 maxlen: 24
78.135.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133796375 (0x7f99217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Validity
Not Before: Jan 1 10:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a9560d6bf92c7bdbf34c1aabcc2b19f6bdd2434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:30:ea:f4:e7:61:a0:00:ac:0f:44:08:ae:
16:d7:f5:90:99:03:b1:b8:1b:27:a0:ca:8e:d8:89:
41:36:2f:94:98:5e:a5:3e:51:bd:e0:49:8b:5d:89:
7e:20:fb:c9:7b:bc:5a:f9:a0:fa:07:1c:bc:6b:4f:
d5:7b:4a:95:89:77:0c:21:23:51:4a:6f:ad:2e:22:
0d:e9:36:f6:ed:be:f2:43:cb:fe:20:98:3a:fa:11:
e2:f3:23:2c:72:0e:64:25:e0:8d:66:76:33:85:a0:
9c:27:29:65:47:74:7b:f9:bc:3a:6e:ff:63:b3:da:
1c:db:0d:6e:fa:76:b9:2d:83:77:c7:ba:b5:f5:0d:
1c:29:c5:85:80:8c:79:7a:dc:48:fd:03:43:6e:ee:
31:2a:cd:bf:92:96:be:f3:85:63:24:58:ce:a8:88:
01:28:12:24:1d:0e:af:ee:f1:2e:1f:90:99:2b:16:
b3:d7:71:42:56:c3:a2:de:67:e8:ea:09:03:b3:74:
57:d5:66:33:99:d0:bd:95:37:67:8f:49:98:9c:0c:
bc:f0:94:59:63:61:7a:6c:0c:d5:dc:9c:83:2e:6e:
eb:de:08:95:fa:ba:5f:1a:44:7b:7d:04:f6:45:ee:
8b:bb:63:d6:29:6f:6a:a1:af:1e:34:e0:84:89:5b:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:95:60:D6:BF:92:C7:BD:BF:34:C1:AA:BC:C2:B1:9F:6B:DD:24:34
X509v3 Authority Key Identifier:
keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/apVg1r-Sx72_NMGqvMKxn2vdJDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.122.0/24
78.135.124.0/22
Signature Algorithm: sha256WithRSAEncryption
18:d7:07:52:f4:12:a0:6d:05:7c:20:da:94:50:b7:d0:52:82:
0a:cb:0a:42:95:14:b8:af:8c:8d:64:4c:61:58:55:05:f3:81:
20:1a:bc:32:a6:dc:75:c3:e3:80:57:c2:82:62:92:e2:07:cb:
5e:03:64:99:31:07:df:fb:ca:ef:00:1b:76:1f:eb:74:1c:09:
d1:ba:6b:18:a0:9f:b9:0b:6f:54:8d:95:a7:b1:67:9d:80:a9:
05:38:a4:f9:ec:17:56:ce:7c:63:1f:de:4b:e8:00:ae:1b:fb:
99:5b:8c:92:0b:38:19:47:89:4d:22:58:b2:b1:be:7c:8d:2d:
3b:95:e7:9c:cf:d3:29:3b:8d:11:1d:34:5a:30:dc:3b:10:97:
86:d1:48:e1:db:d8:fc:95:ef:29:05:db:5e:da:06:38:6f:8c:
66:5a:bb:04:da:19:31:84:5f:7d:fa:c4:85:6d:b8:40:52:30:
73:6c:7c:ad:ed:ec:88:51:ee:43:ff:18:3f:52:f9:eb:0d:27:
e3:67:1b:63:47:39:fd:5d:ff:a4:ce:26:64:2a:e5:70:7d:b0:
2d:d9:ac:27:c2:be:20:36:c9:4e:16:19:57:d5:12:e4:4d:84:
0b:12:8f:5f:1d:48:27:fb:d7:7a:cf:43:73:c4:42:a9:19:11:
03:ab:a0:43
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEB/mSFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NjczZmE2ODQyOTczZWRmNjJkNTc5YjRlZmVjMmZhNjRmZGJmOGM4MB4XDTIyMDEw
MTEwNTYxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmE5NTYwZDZiZjky
YzdiZGJmMzRjMWFhYmNjMmIxOWY2YmRkMjQzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMtOMOr052GgAKwPRAiuFtf1kJkDsbgbJ6DKjtiJQTYvlJhe
pT5RveBJi12JfiD7yXu8Wvmg+gccvGtP1XtKlYl3DCEjUUpvrS4iDek29u2+8kPL
/iCYOvoR4vMjLHIOZCXgjWZ2M4WgnCcpZUd0e/m8Om7/Y7PaHNsNbvp2uS2Dd8e6
tfUNHCnFhYCMeXrcSP0DQ27uMSrNv5KWvvOFYyRYzqiIASgSJB0Or+7xLh+QmSsW
s9dxQlbDot5n6OoJA7N0V9VmM5nQvZU3Z49JmJwMvPCUWWNhemwM1dycgy5u694I
lfq6XxpEe30E9kXui7tj1ilvaqGvHjTghIlbJbsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRqlWDWv5LHvb80waq8wrGfa90kNDAfBgNVHSMEGDAWgBRWc/poQpc+32LV
ebTv7C+mT9v4yDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZuUDZhRUtYUHQ5aTFYbTA3LXd2cGtfYi1NZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzcvNzhlNWViLWMyYWYtNDQ2Mi1iODU5LTg5ODk5NmM4NjFkZi8x
L2FwVmcxci1TeDcyX05NR3F2TUt4bjJ2ZEpEUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcv
NzhlNWViLWMyYWYtNDQ2Mi1iODU5LTg5ODk5NmM4NjFkZi8xL1ZuUDZhRUtYUHQ5
aTFYbTA3LXd2cGtfYi1NZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAE6HegMEAk6HfDANBgkqhkiG9w0B
AQsFAAOCAQEAGNcHUvQSoG0FfCDalFC30FKCCssKQpUUuK+MjWRMYVhVBfOBIBq8
MqbcdcPjgFfCgmKS4gfLXgNkmTEH3/vK7wAbdh/rdBwJ0bprGKCfuQtvVI2Vp7Fn
nYCpBTik+ewXVs58Yx/eS+gArhv7mVuMkgs4GUeJTSJYsrG+fI0tO5XnnM/TKTuN
ER00WjDcOxCXhtFI4dvY/JXvKQXbXtoGOG+MZlq7BNoZMYRfffrEhW24QFIwc2x8
re3siFHuQ/8YP1L56w0n42cbY0c5/V3/pM4mZCrlcH2wLdmsJ8K+IDbJThYZV9US
5E2ECxKPXx1IJ/vXes9Dc8RCqRkRA6ugQw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:54 2025 by rpki-client