Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/VEfTp3uiL_gRJgCjG1rBq-ysd9M.roa
File: VEfTp3uiL_gRJgCjG1rBq-ysd9M.roa (raw, json)
Hash identifier: LnprnPFvk2u38QNOkunB++Y+CMfNbx9Bz2YMWhyh8og=
Subject key identifier: 54:47:D3:A7:7B:A2:2F:F8:11:26:00:A3:1B:5A:C1:AB:EC:AC:77:D3
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64C3ADD468260C1A7D29D0F3444063
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/VEfTp3uiL_gRJgCjG1rBq-ysd9M.roa
Signing time: Thu 09 Jan 2025 09:28:25 +0000
ROA not before: Thu 09 Jan 2025 09:28:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207812
IP address blocks: 79.124.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:c3:ad:d4:68:26:0c:1a:7d:29:d0:f3:44:40:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5447d3a77ba22ff8112600a31b5ac1abecac77d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:9e:07:65:9d:8a:e0:fb:4a:cc:4c:30:5c:
96:8c:ad:4d:46:fd:9d:fd:f8:77:67:db:fc:9c:e4:
87:df:27:5b:92:93:b1:2a:a4:1e:3f:81:72:82:e1:
f2:5a:ce:2d:16:f4:c7:9c:b7:97:58:46:0b:1e:98:
c2:d3:13:7d:f2:02:97:0e:c6:1c:b6:4b:bc:0a:3e:
4a:b2:20:88:e4:d6:82:aa:91:e9:a3:f3:9a:7c:46:
bd:17:87:2e:6f:d2:cf:ee:9f:f5:53:3c:3c:b6:08:
39:51:1f:87:3f:02:f5:26:64:8a:eb:81:82:94:8c:
0f:24:ec:ff:27:49:4c:29:69:4f:f3:0d:51:0b:82:
1c:f3:ec:2e:a5:50:98:05:9f:cd:8a:5f:e8:b7:5f:
89:a2:10:3e:98:19:d6:2d:a3:0d:37:af:f5:c5:de:
3f:45:9b:b2:f1:12:51:52:03:c6:d3:26:56:7e:1f:
a1:e1:1f:f4:dd:49:b1:d8:cb:48:c5:0c:d8:ec:5e:
f4:da:3e:79:8a:0c:7a:7d:b5:73:f9:b0:0d:52:b2:
03:e2:f9:c2:bb:81:91:e0:cc:78:32:85:f3:08:ec:
be:82:0a:19:be:eb:0b:c9:33:b4:1e:2d:5e:73:db:
7f:a2:18:ed:a4:64:95:65:1e:61:ea:31:c5:e5:29:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:47:D3:A7:7B:A2:2F:F8:11:26:00:A3:1B:5A:C1:AB:EC:AC:77:D3
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/VEfTp3uiL_gRJgCjG1rBq-ysd9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.124.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:5e:98:b9:43:f7:a8:ce:dc:60:f1:1f:fd:08:4b:88:56:13:
e0:45:73:86:73:db:2b:bc:3a:76:86:9c:93:b0:72:f0:96:e4:
38:cc:e8:90:b5:25:ec:cf:0e:f4:9d:29:9b:9e:ce:b5:3f:15:
20:4f:7e:70:75:cd:d4:dd:40:9c:f3:3b:8c:6b:80:23:18:fa:
a8:ab:24:18:44:26:2d:71:88:d3:76:7d:bc:fd:cb:fd:90:4e:
96:7a:74:0e:c0:d5:50:2b:cb:92:43:0b:af:d2:92:dd:13:64:
7e:2a:af:39:64:77:f3:58:f6:34:ce:25:74:ba:aa:0e:12:e9:
83:38:4b:be:ee:38:2c:92:8e:da:e4:08:25:cd:e6:fb:4e:58:
06:42:92:64:10:90:4a:af:f9:1c:24:a0:c8:d3:fd:2e:06:c4:
2a:3f:45:5d:a9:a7:29:ca:8e:e4:0b:aa:66:8a:bd:5f:c6:54:
f9:a8:c4:ed:5b:aa:1c:58:51:ad:75:87:2a:4b:c3:34:02:6d:
62:4b:d8:da:ad:ef:b2:3c:fb:34:9a:71:37:42:d3:fa:25:e3:
04:9a:cd:82:c7:b2:76:0a:d1:09:5d:11:40:f2:c5:98:7c:8b:
cb:2f:b5:84:2d:d5:f6:0a:b2:12:bd:84:0a:cf:e2:b3:5c:6a:
c5:80:40:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:45 2025 by rpki-client