Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/VPkDGWl3g5nESmOAgeVgF-czak8.roa
File: VPkDGWl3g5nESmOAgeVgF-czak8.roa (raw, json)
Hash identifier: baoZ4zFkzzb+dvaMYLLu3MJIRKRlqELmz8Lt0peQRaQ=
Subject key identifier: 54:F9:03:19:69:77:83:99:C4:4A:63:80:81:E5:60:17:E7:33:6A:4F
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019428241E04D9EF95BAFD5BF2FFA48EB15A
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/VPkDGWl3g5nESmOAgeVgF-czak8.roa
Signing time: Thu 02 Jan 2025 17:50:43 +0000
ROA not before: Thu 02 Jan 2025 17:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8866
IP address blocks: 78.142.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:1e:04:d9:ef:95:ba:fd:5b:f2:ff:a4:8e:b1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54f9031969778399c44a638081e56017e7336a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:5d:76:ba:ce:63:ff:a1:b7:f4:da:31:49:
36:c1:35:8c:61:5b:0f:85:44:39:cd:0a:32:8d:e3:
8a:7b:03:30:cb:e6:ee:e8:4c:d8:54:8e:01:94:12:
bc:e2:60:da:d9:ba:ad:47:f7:a6:aa:5e:ec:76:24:
a1:ee:28:95:4e:7f:f5:b3:88:16:4c:6b:cc:79:87:
d4:e7:02:e9:9b:ef:03:ec:d3:e4:b7:d5:60:be:e0:
e4:b7:08:4d:8d:08:50:f8:e3:50:f5:4b:61:d9:12:
55:69:53:1a:6c:e5:f4:35:1e:04:3c:3d:2d:54:a0:
8b:f8:3b:0f:05:95:d7:a1:d9:5f:09:77:04:ad:b5:
9d:3c:9a:f5:8c:ee:d8:90:eb:e3:ee:a3:e5:1c:a8:
af:f8:62:6a:5e:4a:83:10:7a:35:db:aa:ef:1a:fd:
80:82:8e:55:ef:15:16:f9:d3:c5:62:4a:c2:6e:51:
44:9f:b2:75:b3:74:25:26:fd:a4:07:0c:fb:11:06:
59:4b:b1:47:17:94:a3:64:29:ea:02:4a:8f:0c:0c:
7c:d5:97:01:a2:61:2c:be:d7:f8:08:60:76:d3:0a:
f5:14:7b:bc:38:ba:17:bc:f2:ff:09:14:a6:c6:2d:
e5:dd:3a:44:b9:96:dc:e6:70:f6:9e:ce:b7:b2:ec:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F9:03:19:69:77:83:99:C4:4A:63:80:81:E5:60:17:E7:33:6A:4F
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/VPkDGWl3g5nESmOAgeVgF-czak8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.44.0/23
Signature Algorithm: sha256WithRSAEncryption
88:77:cb:71:0f:d6:da:27:c4:dd:15:44:37:ac:72:6f:72:d6:
07:ad:ab:12:8f:f8:b3:87:0b:4e:0a:ea:1d:f8:a7:f7:83:ef:
5e:62:09:a3:78:55:fc:6e:6b:09:01:ac:5d:8d:4c:bf:d6:94:
fd:dc:50:1c:13:22:6f:fc:33:9a:6a:46:a2:06:ec:58:3a:6f:
43:ed:87:25:ac:c5:66:c6:ea:97:fa:30:63:60:c3:6a:c8:e3:
59:83:8c:bb:32:7f:6e:03:82:b8:b9:01:e6:8f:98:ba:6a:82:
88:df:aa:30:0b:1e:54:0e:36:cd:bf:35:34:1f:61:94:ca:25:
ec:e0:ac:52:9e:91:d2:e4:d3:e0:e2:b9:c1:2e:d2:d5:63:d1:
2c:c9:1c:c7:01:7d:7b:ca:43:8c:c1:e7:ee:19:2b:6f:f2:1f:
2e:3c:91:56:a8:69:31:4a:5b:93:03:fe:47:ab:b5:bb:2b:2d:
7e:42:9b:d9:7d:5c:c6:5d:f4:f8:ad:70:86:23:d7:02:6d:74:
73:b3:da:39:35:c2:04:53:0b:90:c2:18:50:8f:86:6b:ac:6e:
73:be:48:c6:b0:d9:6e:aa:8f:c6:fa:56:06:ee:ff:4b:41:5b:
26:03:ba:5a:ee:cb:6a:9f:c9:74:84:bc:5d:2c:14:82:02:b1:
ad:5d:a5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:32:56 2025 by rpki-client