Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/NcVlekWCiF1MqD0pMFbt8sBm4xk.roa
File: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (raw, json)
Hash identifier: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=
Subject key identifier: 35:C5:65:7A:45:82:88:5D:4C:A8:3D:29:30:56:ED:F2:C0:66:E3:19
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCD8E6516EA3FFF071DCF6FE0FBF4D
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/NcVlekWCiF1MqD0pMFbt8sBm4xk.roa
Signing time: Thu 02 Jan 2025 07:48:35 +0000
ROA not before: Thu 02 Jan 2025 07:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 147.78.204.0/24 maxlen: 24
185.161.191.0/24 maxlen: 24
185.208.155.0/24 maxlen: 24
185.253.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:d8:e6:51:6e:a3:ff:f0:71:dc:f6:fe:0f:bf:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35c5657a4582885d4ca83d293056edf2c066e319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:58:39:4a:1f:40:be:99:69:83:97:66:ce:44:
89:15:c7:72:a9:59:2c:57:f7:eb:5d:f5:af:34:9b:
4c:14:e6:a2:88:54:79:b5:0d:45:b6:99:f7:12:1d:
93:45:57:4c:7a:55:56:e9:1e:5c:f1:21:29:24:36:
86:d7:f5:42:d5:c1:26:1b:e3:ca:19:e0:e4:5b:98:
8a:de:cd:c7:98:24:11:6e:66:20:9c:05:b1:34:88:
b4:67:76:9b:9e:a3:5b:96:f4:4a:00:c6:2c:4e:0e:
e0:e6:11:b0:fa:0c:5f:54:26:9c:d8:a8:6c:a6:ae:
bb:86:f4:78:e0:57:18:52:1b:a3:a7:5c:7c:6d:19:
e4:42:d7:b0:b6:db:8a:bc:87:5b:dc:f1:45:72:db:
02:8a:13:65:f2:33:fa:75:45:fe:55:33:72:71:9d:
a7:cc:4c:4c:b7:70:ec:74:99:89:da:c3:ea:f4:8d:
a0:08:0c:bb:92:10:da:2c:99:c3:35:c7:ea:a4:a4:
08:14:cb:74:0b:68:64:46:40:22:23:8e:8c:b5:ef:
da:8a:d0:29:40:49:0f:0c:12:f3:14:db:f9:d3:9d:
b3:0c:90:1f:62:52:c8:a8:e3:c7:16:04:33:29:07:
2b:dc:0b:07:42:1f:a7:a6:b2:12:2f:1c:dd:38:0e:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C5:65:7A:45:82:88:5D:4C:A8:3D:29:30:56:ED:F2:C0:66:E3:19
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/NcVlekWCiF1MqD0pMFbt8sBm4xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.204.0/24
185.161.191.0/24
185.208.155.0/24
185.253.123.0/24
Signature Algorithm: sha256WithRSAEncryption
24:88:3e:79:df:f9:be:08:5d:d2:fa:3a:1d:9f:e1:df:87:2e:
99:d7:9b:e0:85:e6:9b:92:b9:0f:2e:f1:d6:cc:c7:6c:28:19:
76:d8:0d:ee:c6:54:a2:75:5a:35:2c:89:8e:46:3b:36:23:dc:
2d:4e:8a:a2:6f:bd:07:95:ed:d3:ff:7a:f7:5f:7d:9d:e2:91:
10:5f:6e:55:e7:30:81:7a:11:d9:65:8e:7a:53:0f:77:5b:1e:
23:95:60:85:bb:a9:2f:b2:4f:11:9f:cc:dd:08:8a:e2:e6:d0:
b0:58:a0:cb:c1:5c:54:04:56:74:bb:c3:42:31:20:85:71:6d:
86:d8:3e:a0:ae:65:d0:77:ae:b2:30:59:c1:b9:65:43:a0:20:
9c:c2:f7:b3:6e:ae:45:06:b4:7d:90:e1:cc:5d:5e:6d:e3:96:
1c:5c:a4:2c:04:f0:8a:e1:42:46:9a:f6:fe:3c:e0:3d:b1:5a:
ba:4f:a0:15:08:5a:c5:9c:63:65:f0:d6:d7:97:d5:0b:9d:a0:
b2:05:a7:0e:32:1f:36:4d:76:c4:ab:ed:c2:ef:9e:19:98:36:
b9:31:de:1b:fb:45:f7:a2:35:1b:d5:1f:92:7c:56:aa:84:4c:
39:33:66:5a:a9:e6:18:fd:e3:c2:16:aa:c8:5a:ae:3a:5a:e9:
e2:37:51:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:09 2025 by rpki-client