Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LoGWdajWVkzXAomx3BiXVveHKPE.roa
File: LoGWdajWVkzXAomx3BiXVveHKPE.roa (raw, json)
Hash identifier: DQkDoapnHj0MLL/tsnzQzVTwMl16+a7poqF4DwlVKiA=
Subject key identifier: 2E:81:96:75:A8:D6:56:4C:D7:02:89:B1:DC:18:97:56:F7:87:28:F1
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01941FFA18A82DB558BA890654EB75FD9F19
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LoGWdajWVkzXAomx3BiXVveHKPE.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208737
IP address blocks: 78.159.130.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
91.92.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:18:a8:2d:b5:58:ba:89:06:54:eb:75:fd:9f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e819675a8d6564cd70289b1dc189756f78728f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:8b:f5:7d:7e:8d:f4:c7:97:71:b1:0d:3b:
6f:bf:9a:0e:aa:68:2d:61:84:04:3f:e3:15:0e:45:
e7:d3:47:e4:2b:52:84:f3:5e:3a:45:1f:44:3f:7e:
dc:48:59:9d:db:f3:75:79:16:dd:1e:07:d2:26:e9:
37:18:4a:05:77:41:fb:fe:71:64:a7:07:24:73:2c:
ca:b7:ff:19:e6:71:cd:b2:74:bc:1d:d1:f2:fb:fb:
2e:c0:41:a9:6f:6c:4b:aa:dc:62:04:27:8a:ca:c6:
1d:2d:da:94:9a:93:21:7a:5a:cb:59:b6:7c:96:46:
ee:90:29:1f:a5:a8:ab:02:79:18:af:2c:59:14:bf:
ba:94:19:6d:81:86:3b:ca:81:81:cb:d7:16:c5:0f:
c4:e1:00:46:08:5c:06:25:04:22:c9:7c:a6:27:ae:
df:5a:e8:c0:90:1d:c3:8f:c2:93:c1:3e:7a:47:ce:
4a:a8:9a:b5:ec:2e:5c:a7:0d:d0:27:86:4e:e0:4f:
c5:05:2c:80:c2:49:8e:24:ef:aa:49:5c:bc:0a:8c:
4e:ce:a9:33:ae:2c:e4:3a:81:67:cc:61:1d:89:6e:
89:e9:e0:92:0d:2b:27:72:1b:54:0b:c4:44:ec:3b:
73:6b:6d:62:a4:d5:95:91:1d:fb:95:5c:71:45:a1:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:81:96:75:A8:D6:56:4C:D7:02:89:B1:DC:18:97:56:F7:87:28:F1
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LoGWdajWVkzXAomx3BiXVveHKPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.130.0/24
78.159.156.0/24
91.92.54.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:32:91:57:da:a8:1b:bc:43:5a:5e:ab:15:e0:f9:9e:53:22:
a9:56:9d:01:b6:1f:ed:aa:5b:ae:4a:c1:53:ea:d0:49:26:a7:
51:f4:bf:2a:16:44:d7:76:1c:21:73:18:5f:27:d7:df:df:bf:
20:db:94:27:4f:6b:69:93:9c:d4:e6:41:79:06:cb:91:c0:21:
40:76:aa:39:4b:9d:27:86:8e:82:ca:36:4c:7e:8e:dc:3d:24:
10:ea:3e:f9:cc:9c:75:eb:8b:a9:57:37:33:33:c6:10:21:59:
7e:04:c5:b5:e6:8d:65:20:34:45:ab:03:c6:49:f9:d9:70:72:
02:75:2e:42:d2:50:f9:5a:e5:e0:dd:92:23:43:c5:46:32:7d:
c5:47:f2:da:8d:8b:e4:dd:44:e2:bb:91:2c:0b:c5:ea:08:1f:
7c:76:ba:2d:c9:97:8a:ae:ab:12:db:4b:56:96:8c:71:b7:c2:
f5:da:a4:a4:e9:f4:91:f4:20:9d:ff:cb:e5:1b:34:ca:44:08:
e8:cf:f8:e5:2b:46:6d:b9:27:76:cc:8e:53:a3:e5:99:1d:fd:
3a:24:9d:e4:f8:0f:46:af:bf:73:74:7f:93:b1:d3:dc:fd:51:
fd:77:18:4c:64:f2:fb:cf:9b:1d:47:08:26:30:f5:08:37:52:
7c:ee:d9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:37:07 2025 by rpki-client