Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/8O-RaOGY1U6E4F7g5RAP-Ux9YUU.roa
File: 8O-RaOGY1U6E4F7g5RAP-Ux9YUU.roa (raw, json)
Hash identifier: TsMtxXUlIxJjWKga21A9PUNlKdB+zSx7VCqzjFKQ8SA=
Subject key identifier: F0:EF:91:68:E1:98:D5:4E:84:E0:5E:E0:E5:10:0F:F9:4C:7D:61:45
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019428241CD28B0021444553F75C18F29D22
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/8O-RaOGY1U6E4F7g5RAP-Ux9YUU.roa
Signing time: Thu 02 Jan 2025 17:50:42 +0000
ROA not before: Thu 02 Jan 2025 17:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6597
IP address blocks: 78.142.0.0/24 maxlen: 24
78.142.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:1c:d2:8b:00:21:44:45:53:f7:5c:18:f2:9d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0ef9168e198d54e84e05ee0e5100ff94c7d6145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:34:c1:e7:31:8d:1e:06:4b:fd:aa:ab:d6:
59:e5:c2:43:33:89:09:bf:75:af:40:d6:42:51:61:
a8:89:d8:28:bd:93:97:9e:ab:b6:65:21:11:02:6d:
a8:82:ff:84:bb:22:06:7e:88:c9:97:c2:39:63:f1:
88:df:9c:71:ad:1f:04:99:32:b8:03:0e:eb:ff:f4:
1f:fc:81:0f:6f:ae:b1:54:9a:ad:2a:1a:63:66:80:
d9:a2:35:20:89:d1:a8:c2:21:ca:ad:e7:70:a6:2f:
60:31:e7:ab:bc:a0:df:de:aa:13:20:e9:59:2c:16:
d1:40:92:28:95:76:6d:56:e1:d2:02:60:a3:80:e2:
89:93:d0:f1:0a:b4:9a:23:39:1b:7f:32:b8:a7:a4:
40:a7:c2:62:38:fb:1a:48:5d:e9:8e:2f:5e:9a:56:
3e:37:bd:71:a6:28:bc:32:73:4f:f1:73:de:be:88:
dd:44:4d:91:b1:af:ce:4a:5d:a0:87:c2:f8:7a:33:
04:70:72:2b:04:f7:eb:dd:e1:99:73:68:64:13:8a:
d6:28:0d:eb:c0:7e:ed:9b:75:f1:1e:92:bd:5d:62:
b9:ee:00:1d:fb:1c:fc:32:18:71:0a:ff:0f:80:a7:
ae:8d:51:22:ff:16:39:01:e9:eb:37:ad:24:35:7b:
a4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:91:68:E1:98:D5:4E:84:E0:5E:E0:E5:10:0F:F9:4C:7D:61:45
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/8O-RaOGY1U6E4F7g5RAP-Ux9YUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.0.0/24
78.142.8.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b7:e3:a0:11:9d:e3:5e:41:69:ab:3b:02:45:d2:b1:e3:38:
90:af:e6:a9:4d:44:56:f3:cf:22:11:86:25:a0:28:10:69:b2:
9a:ea:25:93:b0:4a:b4:c2:58:09:d9:c0:c0:13:9f:5c:83:a5:
b4:05:cd:7f:51:21:3b:7d:e0:6a:a3:5c:45:1f:49:b5:7e:a6:
25:23:d3:cf:21:11:08:64:95:0b:1d:a3:ae:8e:9d:88:89:85:
9a:4c:ab:cb:72:a3:da:a5:28:de:34:79:52:db:d6:55:19:fd:
3e:dc:07:de:1c:c3:f0:7d:1b:a6:2a:24:06:99:a0:3b:64:b6:
93:b2:1e:5f:f8:17:13:44:3c:ae:a9:fb:69:5c:80:3b:20:f1:
52:ab:a5:f4:78:da:0c:6c:f1:f8:2f:1a:3b:4e:b2:ea:5b:8f:
ee:61:9a:9c:37:08:9d:9d:ad:1b:ad:5e:d3:0d:1f:15:d5:84:
15:f9:54:11:af:7a:51:7c:1b:ef:dc:f2:65:ec:3c:35:9c:44:
03:33:be:19:6f:63:c1:2c:2a:55:44:2e:50:f6:b0:b5:a2:1c:
87:d1:69:85:6c:17:91:04:42:b2:63:a9:46:10:f2:1a:e7:0e:
d6:a7:e7:83:3c:7a:96:1f:5c:a8:25:ec:3d:ad:11:ae:35:4e:
df:42:79:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:33 2025 by rpki-client