Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kq2RLEX3-8VC30v3dG79z-bLhFw.roa
File: kq2RLEX3-8VC30v3dG79z-bLhFw.roa (raw, json)
Hash identifier: R82gCGZxJ5oSCul5O5bDNVhP4TbBIKPvIgAURFSyfy8=
Subject key identifier: 92:AD:91:2C:45:F7:FB:C5:42:DF:4B:F7:74:6E:FD:CF:E6:CB:84:5C
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64B98580A266CF4EC0640E5D0C7294
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kq2RLEX3-8VC30v3dG79z-bLhFw.roa
Signing time: Thu 09 Jan 2025 09:28:22 +0000
ROA not before: Thu 09 Jan 2025 09:28:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199221
IP address blocks: 78.142.21.0/24 maxlen: 24
79.124.48.0/24 maxlen: 24
130.185.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:b9:85:80:a2:66:cf:4e:c0:64:0e:5d:0c:72:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92ad912c45f7fbc542df4bf7746efdcfe6cb845c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:21:23:1b:81:d2:f0:cd:45:fa:52:78:9c:
4c:95:80:d3:16:76:86:78:2b:53:64:9f:51:60:dc:
95:c6:ca:5c:d0:5b:2d:65:3a:aa:44:df:3e:61:6d:
d6:7f:26:bd:41:80:a1:1d:7a:1c:3a:73:7c:c5:bb:
cb:95:e9:6b:1c:af:72:b3:e0:cf:fc:fb:66:e5:53:
7b:d4:fd:5b:5d:37:8e:f9:c8:96:09:33:d3:c7:e2:
72:cc:16:7c:b6:e2:9c:8f:70:03:1f:57:75:2a:fa:
92:43:54:26:7f:4d:14:eb:14:92:cd:6e:10:02:d5:
2b:d3:50:42:05:d4:02:f9:65:b7:6b:26:98:7b:70:
b2:23:b3:c8:70:d4:f4:69:46:d6:40:6e:7e:46:7e:
1d:f1:3c:2f:84:2c:df:48:8e:b2:81:30:a7:3b:9b:
63:29:09:c2:49:25:ac:42:e5:4e:03:77:94:15:bf:
16:79:23:37:87:d7:43:35:f5:f9:86:f6:64:ef:c3:
e9:c1:1b:86:85:01:4b:46:bb:91:30:4e:4d:7c:f4:
13:ee:ca:7c:f9:60:aa:f3:05:11:e4:e7:e4:63:a1:
31:40:98:27:5d:69:90:f3:09:55:7c:75:b7:59:e9:
38:b7:be:6b:79:26:2d:14:72:69:fc:8e:55:15:24:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AD:91:2C:45:F7:FB:C5:42:DF:4B:F7:74:6E:FD:CF:E6:CB:84:5C
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kq2RLEX3-8VC30v3dG79z-bLhFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.21.0/24
79.124.48.0/24
130.185.228.0/24
Signature Algorithm: sha256WithRSAEncryption
42:50:8e:64:b8:57:c3:71:ca:b4:00:bf:32:2b:9f:d6:d8:b8:
54:96:b0:51:e5:e5:0a:5b:a1:19:65:17:c8:87:ec:5d:8e:69:
3a:06:b1:a1:a4:15:70:f9:08:96:b8:28:c8:3f:ed:68:6b:ca:
90:0d:21:c8:f8:90:a2:fd:e3:9d:81:43:2f:29:cc:6e:0f:e5:
f2:bd:8a:01:23:55:7f:25:75:23:3b:33:2f:ab:e9:d7:3a:a6:
3d:97:61:43:4e:94:be:ac:ad:30:97:58:31:d7:7e:fb:dd:0b:
50:3e:5d:c5:e8:79:94:c3:5f:37:4e:be:34:a6:11:f1:9d:dd:
f0:c5:bc:2a:80:06:21:80:ed:54:1b:f7:17:68:75:81:cf:7b:
57:60:04:93:71:d8:fc:07:1c:d9:68:bc:9f:ad:71:dc:6f:42:
94:e4:dc:90:83:2a:ea:1a:5f:03:6e:13:78:44:15:b7:6d:62:
c6:5f:4c:9c:a7:b9:5c:95:a8:49:2c:5f:f4:db:bc:f1:17:82:
d8:85:32:b5:ee:44:dd:e7:9c:ac:a0:05:19:f8:15:a5:b8:74:
51:85:39:25:21:01:0f:e6:69:96:4f:60:f2:f9:80:0f:ce:62:
76:9e:39:9d:6f:16:dc:14:ce:f6:59:24:5c:b7:af:dc:6f:ec:
69:50:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:54 2025 by rpki-client