Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/ps9OaKoUmcnfWid2Etoohh1VgE0.roa
File: ps9OaKoUmcnfWid2Etoohh1VgE0.roa (raw, json)
Hash identifier: orTaKZuu0EryVgQlb0cnhWVSu/x0iSnIMs5aC/hbYQM=
Subject key identifier: A6:CF:4E:68:AA:14:99:C9:DF:5A:27:76:12:DA:28:86:1D:55:80:4D
Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial: 018ABD6748984E3D2AA42DF6A9609B68F5CC
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/ps9OaKoUmcnfWid2Etoohh1VgE0.roa
Signing time: Fri 22 Sep 2023 14:59:37 +0000
ROA not before: Fri 22 Sep 2023 14:59:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 78.135.112.0/24 maxlen: 24
212.68.47.0/24 maxlen: 24
95.214.72.0/22 maxlen: 22
31.210.62.0/23 maxlen: 24
2a09:da81::/32 maxlen: 32
2a09:da80::/29 maxlen: 29
2a09:da80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bd:67:48:98:4e:3d:2a:a4:2d:f6:a9:60:9b:68:f5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Validity
Not Before: Sep 22 14:59:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6cf4e68aa1499c9df5a277612da28861d55804d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:34:d0:c8:30:47:a2:c1:b5:c3:67:ee:fb:
4b:5a:19:04:b9:c4:33:4b:c2:2b:9d:43:10:55:73:
c4:92:a4:71:42:3f:66:ca:62:aa:96:78:d8:6e:48:
8b:a9:bf:f0:1a:04:c9:12:08:2a:38:1e:4e:6b:8a:
50:ce:34:1d:0b:fd:47:dd:70:67:55:d7:dd:a1:55:
d1:39:c5:95:f5:49:bb:ce:49:93:20:f0:7a:7c:30:
52:8e:53:f6:fa:55:39:71:46:04:18:51:2c:3d:02:
c3:9d:6f:d9:16:16:7f:9e:fa:79:e1:2c:85:1f:80:
82:73:92:a1:f2:56:76:8b:c5:e2:18:1d:aa:93:dc:
ca:5d:94:8d:ab:27:7c:63:d1:f5:53:e6:98:17:95:
6a:bb:96:b3:9c:31:c4:fa:6b:b8:f9:10:92:88:6a:
e4:d5:1f:d3:6d:32:04:51:08:1f:6d:ce:32:ce:6c:
9c:83:14:ca:5c:ce:1d:44:23:86:f5:45:88:b2:ab:
7f:49:cd:e9:b4:1f:e0:d9:82:f4:81:1e:4d:df:aa:
4a:cb:08:1b:e5:3a:fc:18:11:f9:77:c0:17:f6:1d:
31:2d:d1:5d:6c:c0:e3:37:24:e2:ca:e3:72:3a:4e:
a2:9e:b9:58:4a:58:77:86:c5:91:52:07:7d:0d:4a:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CF:4E:68:AA:14:99:C9:DF:5A:27:76:12:DA:28:86:1D:55:80:4D
X509v3 Authority Key Identifier:
keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/ps9OaKoUmcnfWid2Etoohh1VgE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.62.0/23
78.135.112.0/24
95.214.72.0/22
212.68.47.0/24
IPv6:
2a09:da80::/29
Signature Algorithm: sha256WithRSAEncryption
15:0e:de:c2:cb:1a:8d:9f:3e:94:70:ee:71:0a:1c:ad:32:99:
97:49:95:fa:ac:b6:a7:c4:ba:bd:ce:44:3b:26:3a:60:e7:4d:
67:33:18:07:98:47:fb:d1:0b:be:a0:a4:47:97:ef:6a:31:7a:
e8:6b:4a:8d:60:dc:7e:57:18:68:06:c3:c5:d0:e9:a3:9c:c2:
e9:f2:7d:c8:33:3c:1c:a2:d4:e4:93:85:f3:fa:64:c7:e7:aa:
ae:14:9d:9b:1c:dc:7f:08:07:e7:5e:a8:12:45:30:df:f1:0a:
4f:bd:36:cb:3f:2b:ca:42:87:bc:8c:14:a0:5f:d2:1f:1f:af:
ee:79:d2:12:66:7a:91:3f:80:f4:0b:95:99:a5:5d:92:de:90:
15:bb:59:c1:03:71:d7:ee:88:20:10:6a:82:aa:ac:80:1f:df:
5d:a3:1e:7c:65:64:cf:39:7f:34:5e:7b:4f:76:aa:7a:0b:be:
7d:8b:f8:12:61:ab:6c:36:6c:0c:52:03:26:82:f0:9a:8e:ef:
df:d8:92:21:30:a3:3f:1a:ca:23:51:2d:8d:ae:bc:b4:3a:9d:
77:14:4a:d0:57:c5:44:7a:13:80:81:5d:db:ae:b7:c2:19:ae:
4e:b2:d2:00:af:2a:d1:ca:f4:10:d8:be:ee:59:6b:79:c6:7f:
d2:b5:f7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:23 2025 by rpki-client