Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/P_vAM1TtxxEKHE7BF9R9AzptCjk.roa
File: P_vAM1TtxxEKHE7BF9R9AzptCjk.roa (raw, json)
Hash identifier: TGVEt29rvZpXzI/PwZzE5NY9z1H5j5T7TAqs3zLgyUU=
Subject key identifier: 3F:FB:C0:33:54:ED:C7:11:0A:1C:4E:C1:17:D4:7D:03:3A:6D:0A:39
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64BA8AA2126229D16B9DDEBADEE79A
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/P_vAM1TtxxEKHE7BF9R9AzptCjk.roa
Signing time: Thu 09 Jan 2025 09:28:22 +0000
ROA not before: Thu 09 Jan 2025 09:28:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200469
IP address blocks: 78.142.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:ba:8a:a2:12:62:29:d1:6b:9d:de:ba:de:e7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ffbc03354edc7110a1c4ec117d47d033a6d0a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:56:e9:e5:4a:37:a7:9a:6f:96:5b:4e:6c:
c3:d8:b5:42:77:c6:ad:aa:50:80:ad:c3:0d:19:56:
bb:84:a6:f3:17:bf:0d:0a:bb:b5:e0:0e:98:da:9d:
3b:a5:cd:78:3c:4b:93:c0:f5:72:b5:0e:79:46:d2:
0e:18:d8:00:65:dd:e1:65:27:ba:38:d8:e2:79:54:
63:99:59:f3:a9:21:f3:13:4d:81:7a:2d:27:9e:80:
87:c6:1e:cc:d5:65:15:0f:40:47:aa:36:cd:29:89:
81:a5:6c:06:96:7f:45:63:c6:68:f9:9d:5b:c8:02:
60:d7:64:7e:81:95:89:9d:d2:90:62:28:06:4d:f2:
12:69:91:87:5d:c3:44:0b:a9:de:db:e3:f9:0c:b4:
e6:bf:91:eb:f2:90:49:87:07:a9:b3:a6:e0:56:c7:
4c:d2:dd:87:a6:31:6d:64:02:55:c4:d7:e0:48:2f:
e7:c9:08:74:c8:d2:45:1d:5e:f7:f1:5b:dc:9f:d1:
4c:63:4f:c3:0e:66:41:bf:f6:9e:92:32:8f:a6:8f:
45:dc:0f:15:81:01:09:94:a7:9d:4c:34:bc:49:9c:
4a:b9:2f:73:a3:2b:38:c5:f7:b7:36:9e:4c:67:d9:
19:9b:9c:9f:c0:5f:92:bf:7a:1d:f2:e7:00:5c:a5:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FB:C0:33:54:ED:C7:11:0A:1C:4E:C1:17:D4:7D:03:3A:6D:0A:39
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/P_vAM1TtxxEKHE7BF9R9AzptCjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.2.0/24
Signature Algorithm: sha256WithRSAEncryption
31:30:d3:05:16:88:2e:42:44:54:26:cc:c8:6e:fe:30:2e:fc:
da:1f:a7:1d:ad:3b:f1:fe:91:2b:9d:16:fd:3e:90:be:8b:bd:
9b:4d:d1:c3:fc:ab:58:62:3a:0c:08:23:f9:91:a8:87:be:ab:
20:08:b1:7b:fb:03:25:0a:6c:4b:a5:f5:c3:a5:e9:84:d9:2a:
7b:df:6b:3d:38:15:cf:e8:59:a7:b7:4f:bc:e3:08:c4:47:ea:
2e:b7:9b:47:1a:e8:d5:27:2f:2e:89:09:2d:a1:24:99:5e:74:
96:b7:56:f4:56:ce:cc:19:5c:9c:d1:c8:75:3f:18:22:f3:95:
f8:a3:aa:c7:07:cf:19:8c:e2:7a:f2:64:75:d7:67:01:69:a9:
92:ac:dc:0c:5b:a4:3b:49:23:30:7f:8a:e3:45:72:c1:ea:2c:
de:8c:7b:9e:76:23:fc:08:00:be:2e:1d:71:d5:dc:37:45:99:
a3:03:00:2e:67:8a:5d:8c:7d:cc:fe:84:83:ae:fe:53:cc:d7:
05:8f:41:60:c5:69:3f:36:d0:84:84:3f:06:98:8a:bc:40:f9:
bc:e4:0d:d6:b7:03:d4:5f:33:ea:1e:7f:b6:b1:f9:5b:9e:30:
d5:38:1d:0a:07:69:29:22:9e:e5:82:9c:b4:5a:be:1a:8c:37:
e2:e5:a1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:29 2025 by rpki-client