Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/buCdsjxTtB6AeOWQVzGldWlH7i4.roa
File: buCdsjxTtB6AeOWQVzGldWlH7i4.roa (raw, json)
Hash identifier: srnlzkPYp8wZGQ4GvMnqpdjN8iuk0CouxqBvpL97LoQ=
Subject key identifier: 6E:E0:9D:B2:3C:53:B4:1E:80:78:E5:90:57:31:A5:75:69:47:EE:2E
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64BD059A150CC1B54E00273332648B
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/buCdsjxTtB6AeOWQVzGldWlH7i4.roa
Signing time: Thu 09 Jan 2025 09:28:23 +0000
ROA not before: Thu 09 Jan 2025 09:28:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201133
IP address blocks: 78.142.29.0/24 maxlen: 24
79.124.78.0/24 maxlen: 24
82.118.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:bd:05:9a:15:0c:c1:b5:4e:00:27:33:32:64:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ee09db23c53b41e8078e5905731a5756947ee2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:c3:bd:9a:55:dc:1c:e1:6a:9c:54:26:90:
5e:03:f9:23:c3:ad:72:01:6b:17:c8:f8:2f:b8:ed:
08:37:8d:f6:76:1a:f9:76:9f:91:4a:70:0b:46:be:
e5:0e:ac:71:e1:6d:c7:3d:5e:57:af:1f:cb:69:2e:
d1:04:4a:b6:07:ae:19:6d:dd:50:f1:eb:88:ba:9d:
13:59:66:8f:33:ef:ba:7c:5b:7f:e7:e3:b6:bb:c1:
ef:c2:0d:16:b7:ff:72:6d:d3:7d:24:52:8c:10:e1:
da:39:bb:99:46:1a:e5:6c:25:2b:e1:ae:2a:95:1c:
47:38:4c:e7:d6:2a:44:fc:4e:6d:8f:10:46:4b:36:
dd:d8:1f:f7:fe:5c:ea:54:c6:ae:1f:99:a0:1f:92:
e0:c9:9e:d5:de:df:c1:c1:87:36:28:18:e1:15:d7:
ac:4d:c2:0d:4e:42:83:de:b3:37:8f:aa:ee:49:94:
f3:1a:27:30:5d:30:1a:ef:c2:01:62:5a:0d:f0:bf:
5c:5d:32:22:44:48:6a:46:af:47:9b:ff:76:6d:0e:
b0:55:2a:f0:2f:2e:0c:95:bb:62:24:b6:8a:59:0c:
70:7e:ff:a1:14:79:59:0f:64:b2:d7:43:5b:df:1d:
11:ab:ae:c9:fb:d8:84:29:69:cc:7f:eb:a3:29:8f:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E0:9D:B2:3C:53:B4:1E:80:78:E5:90:57:31:A5:75:69:47:EE:2E
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/buCdsjxTtB6AeOWQVzGldWlH7i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.29.0/24
79.124.78.0/24
82.118.242.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:e9:2b:c0:73:95:2e:6f:72:8f:37:52:44:19:19:41:18:77:
c5:15:ac:e4:2c:38:a8:18:de:69:2e:05:be:7c:5c:16:32:a4:
6d:be:eb:18:d6:9f:3d:2e:22:89:e8:a4:21:8b:85:5e:19:25:
13:bf:49:36:90:5a:7c:a2:1e:80:f9:b5:65:ee:e7:56:30:5e:
d8:c8:7a:ea:b4:eb:73:96:bd:c2:71:40:a8:68:f6:18:9b:9a:
4b:8a:5f:06:61:b3:83:d7:df:65:3d:4d:eb:2c:37:13:9f:21:
2e:d6:fb:08:61:a1:22:cc:f6:05:06:a3:f4:c9:19:f6:69:eb:
5e:1d:8f:4a:80:19:86:fd:b4:47:4e:8e:f2:8c:76:19:53:f4:
5a:ad:64:35:2b:87:4e:6d:d2:fa:b2:98:e8:6f:6a:5a:08:3a:
d9:bf:02:fe:69:73:bc:68:e8:a5:40:40:b5:ff:2f:88:4f:bd:
1a:94:0b:2f:01:76:d8:1a:63:99:ab:77:9d:1e:51:b2:22:f0:
76:87:8c:1a:19:3a:98:a9:3a:53:9a:44:d3:ae:fc:95:3a:0b:
dc:fd:6d:68:5b:1a:ff:13:68:ba:c2:c9:08:fb:a6:3d:18:75:
2f:b2:a3:6c:c7:83:47:71:6a:94:2a:f8:96:c9:dc:ef:5f:d7:
2c:d9:3e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:10:22 2025 by rpki-client