Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/keSxStxBXkCO2gzYzQTjYIQYfQo.roa
File: keSxStxBXkCO2gzYzQTjYIQYfQo.roa (raw, json)
Hash identifier: 6TsOyWPENd8nDT4rtWjtGxksjx9Jr4gbOsApEE37ZkU=
Subject key identifier: 91:E4:B1:4A:DC:41:5E:40:8E:DA:0C:D8:CD:04:E3:60:84:18:7D:0A
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019503708CF85AC3160CAB81EDD660B24F39
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/keSxStxBXkCO2gzYzQTjYIQYfQo.roa
Signing time: Fri 14 Feb 2025 07:51:02 +0000
ROA not before: Fri 14 Feb 2025 07:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 78.159.131.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:70:8c:f8:5a:c3:16:0c:ab:81:ed:d6:60:b2:4f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Feb 14 07:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91e4b14adc415e408eda0cd8cd04e36084187d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:f6:62:cc:fc:55:64:c8:b1:2a:73:14:0a:
57:48:91:6f:19:49:bd:95:a6:34:f6:3e:6a:39:9b:
cb:bf:b8:bb:0e:12:87:3d:ad:63:56:02:a8:a9:5a:
df:bd:8e:93:e7:d3:75:92:72:55:37:5f:f7:1b:0b:
74:33:88:de:48:fe:c1:d6:45:01:98:53:af:66:a8:
44:a3:a1:37:a1:5d:83:32:e7:5c:dc:5c:37:f0:72:
ca:10:e4:fd:63:b7:6e:dd:3e:7f:a8:17:b7:0f:58:
ec:ee:75:e4:bf:26:c5:ec:b7:f4:f9:fe:30:58:d6:
a0:56:2b:d4:f7:32:fc:7b:b7:13:8a:ff:6f:ff:ba:
ba:e4:24:a0:cf:3c:56:95:63:5b:99:14:87:0e:57:
b7:e2:48:87:07:73:6e:08:28:50:73:a1:d2:12:09:
79:2e:b8:92:06:10:4f:41:a5:06:8e:8a:24:bc:6b:
af:1d:46:06:26:03:c8:b7:0b:da:4b:54:98:57:1f:
a9:ae:5f:b9:43:4d:eb:50:c7:5e:32:7d:9f:68:4b:
f2:0a:3b:05:8a:3e:11:08:a3:4f:64:08:4e:54:17:
f2:3a:25:93:0e:b2:33:70:52:c6:38:f0:d4:23:47:
20:71:e9:9f:92:53:4f:66:3a:b7:90:68:a5:89:50:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E4:B1:4A:DC:41:5E:40:8E:DA:0C:D8:CD:04:E3:60:84:18:7D:0A
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/keSxStxBXkCO2gzYzQTjYIQYfQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.131.0/24
93.152.207.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e3:6a:71:23:64:4a:13:82:fa:4c:3d:3f:b4:6b:f7:8c:bc:
cf:d8:6a:94:6c:dd:f8:d9:b8:be:60:83:8a:28:a3:e1:7a:74:
20:b9:03:e4:55:81:5a:5b:c7:f8:8a:77:7e:b1:87:eb:2b:e6:
4e:69:0e:9f:fa:40:68:c4:0b:a2:e1:60:2f:21:bc:41:4d:c5:
84:bd:ab:2a:04:5b:93:f0:86:c8:d5:8d:2d:d6:5a:e0:9a:75:
c9:de:49:87:96:4a:98:af:2f:8a:d6:80:ec:07:dd:7d:26:71:
81:4b:32:f7:83:f9:e5:b0:e0:e1:59:22:a1:c7:8a:19:d8:c6:
3a:1e:e5:48:26:e9:16:94:da:61:81:12:cd:2c:fc:52:12:19:
05:0b:ee:73:46:56:87:04:bc:12:b7:02:71:50:5a:d4:61:72:
63:62:cb:62:a8:0e:e3:ac:b9:d4:56:b6:a6:ed:dc:8d:05:d4:
af:15:40:3a:38:58:c1:96:ae:db:ce:21:33:da:2a:78:fb:40:
c9:87:77:a5:b6:41:63:55:32:f2:50:94:60:6b:5f:4a:67:5a:
49:22:24:1d:23:09:16:56:f5:65:25:53:bc:68:5b:04:af:ab:
cd:ec:fd:75:c3:0a:d4:4b:1d:57:67:6e:48:2c:7d:42:4b:90:
d2:72:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:38:49 2025 by rpki-client