Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/fnO2D2QJ7ciavmuOC1sCI2AhH24.roa
File: fnO2D2QJ7ciavmuOC1sCI2AhH24.roa (raw, json)
Hash identifier: okXe9AY1lTG+QTYYb1gCZCjJChVqoGpP8KO1/3JyCXI=
Subject key identifier: 7E:73:B6:0F:64:09:ED:C8:9A:BE:6B:8E:0B:5B:02:23:60:21:1F:6E
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64C44F5AC3EA74059E96CE7BAB17FB
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/fnO2D2QJ7ciavmuOC1sCI2AhH24.roa
Signing time: Thu 09 Jan 2025 09:28:25 +0000
ROA not before: Thu 09 Jan 2025 09:28:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208046
IP address blocks: 78.142.18.0/24 maxlen: 24
79.124.8.0/24 maxlen: 24
82.118.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:c4:4f:5a:c3:ea:74:05:9e:96:ce:7b:ab:17:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e73b60f6409edc89abe6b8e0b5b022360211f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:0e:c6:d5:3e:0f:de:66:ea:3d:67:35:8b:
bc:d3:1c:c2:7a:44:31:cc:8c:eb:ac:65:63:85:0b:
e3:b8:05:d4:60:aa:48:3f:b2:40:51:1e:13:79:27:
fa:b4:f0:13:39:74:67:a8:fc:aa:f9:38:53:89:3c:
34:01:25:1b:a1:d2:1a:5a:e6:6a:6a:af:86:56:19:
a8:43:bd:93:64:1a:18:c6:4f:4f:12:b8:6d:f3:6a:
ac:eb:4b:dd:06:d0:7c:6d:c4:1c:56:96:d7:3c:93:
9a:58:0b:fe:8c:36:a2:53:67:3f:11:0d:5b:96:65:
f1:6f:4b:87:26:82:82:81:71:72:04:f5:69:71:31:
c1:71:7c:9c:59:a1:76:f7:0d:5e:cd:81:5e:df:6a:
7d:3b:82:c3:a5:b2:68:df:1b:99:ea:fc:19:4f:c7:
c7:1d:82:5b:5b:bd:b8:6c:e3:bc:2f:49:bf:1b:b7:
e2:b9:af:c4:13:71:2e:93:60:4d:ce:13:c0:e1:8a:
d6:17:7e:3c:1f:fd:e5:ce:08:f0:f4:cc:0b:c2:10:
2a:81:6a:b5:64:49:8a:cd:84:1a:62:75:3b:bf:00:
40:bb:e1:69:bf:04:52:c7:0c:db:a5:f7:bf:54:d4:
83:0c:d2:22:fe:9c:f1:6f:a4:da:56:52:43:9d:8f:
d5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:73:B6:0F:64:09:ED:C8:9A:BE:6B:8E:0B:5B:02:23:60:21:1F:6E
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/fnO2D2QJ7ciavmuOC1sCI2AhH24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.18.0/24
79.124.8.0/24
82.118.230.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e9:6b:5a:04:7f:f1:9f:25:fc:d0:1a:25:6e:c1:ea:57:34:
c5:79:b8:37:a5:0b:e6:43:c7:65:da:80:c8:f5:71:2a:00:22:
83:19:89:56:12:1d:da:18:98:8b:e3:a1:83:06:63:5c:a6:47:
77:a1:46:ed:ec:4b:28:34:27:c5:ca:c2:a6:70:d0:ec:1e:4b:
6a:55:e1:d1:2d:95:3b:fd:0e:ec:cc:c9:d2:5b:b0:a4:ce:55:
5a:28:22:a2:12:2e:55:9c:a1:b8:7d:ab:3c:8b:06:fa:bd:a7:
0b:b0:d8:81:a3:ea:fc:0d:37:48:69:09:c4:6b:a5:0a:10:1d:
40:49:05:da:cb:9c:2d:94:25:d6:40:e6:46:4f:33:03:12:cd:
9b:ff:4f:4d:40:12:96:33:1e:c1:d7:03:eb:3d:02:de:b4:45:
ea:f6:5f:83:31:ef:07:27:b1:e4:95:1b:3a:4c:10:fc:e2:49:
ff:cb:b1:00:56:0e:41:44:29:6f:96:ae:5b:84:2d:e1:52:9f:
8f:73:89:24:e4:f6:b9:6e:0f:db:a8:7d:7a:02:20:ce:bd:6b:
6b:72:d6:3a:b8:f0:e5:82:82:fb:f0:d9:76:42:95:5f:e1:f4:
a2:4b:ac:05:e1:91:f3:c9:c2:8b:5c:37:36:67:5a:90:b0:61:
7c:fd:4d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:23:10 2025 by rpki-client