Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/713747-be61-4a56-95fa-74067f6d06f2/1/78uVUHK4Ge591K8AFdoAGmRKh04.roa
File: 78uVUHK4Ge591K8AFdoAGmRKh04.roa (raw, json)
Hash identifier: nFZfwmDqJOVTdKKDic3wQOiXKKnoiQQTfXnlqUVsC58=
Subject key identifier: EF:CB:95:50:72:B8:19:EE:7D:D4:AF:00:15:DA:00:1A:64:4A:87:4E
Certificate issuer: /CN=8f08e61a111b6eef527f9acc601e54500e434c6f
Certificate serial: 01856D8AE755BE9D88393CC606D90BD96ED6
Authority key identifier: 8F:08:E6:1A:11:1B:6E:EF:52:7F:9A:CC:60:1E:54:50:0E:43:4C:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwjmGhEbbu9Sf5rMYB5UUA5DTG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/713747-be61-4a56-95fa-74067f6d06f2/1/78uVUHK4Ge591K8AFdoAGmRKh04.roa
Signing time: Sun 01 Jan 2023 13:34:57 +0000
ROA not before: Sun 01 Jan 2023 13:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 195.64.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:e7:55:be:9d:88:39:3c:c6:06:d9:0b:d9:6e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f08e61a111b6eef527f9acc601e54500e434c6f
Validity
Not Before: Jan 1 13:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efcb955072b819ee7dd4af0015da001a644a874e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:52:17:4b:1d:34:c6:9c:a0:10:f2:f7:6f:34:
cd:62:c5:b5:9c:36:bf:46:16:94:08:0a:15:0c:c9:
c4:9e:17:41:56:0a:f0:56:17:dc:37:76:40:22:18:
c3:b7:2e:f7:d6:3e:f9:3e:27:73:3b:62:96:08:ed:
84:50:87:4d:51:89:17:4a:47:97:07:78:60:26:f0:
c4:fc:dc:b2:46:27:97:a8:66:55:91:85:db:cf:5c:
44:9b:90:9c:c5:cc:ee:ee:5e:67:06:4a:7f:5b:08:
02:4c:36:c8:f8:4e:a3:b2:8a:dc:f0:86:8d:d3:91:
c2:69:75:d2:59:9a:c8:87:b7:8c:dc:0a:88:d6:df:
3b:71:7c:87:39:ae:cf:1b:01:f5:37:92:ac:9c:b3:
e5:99:f5:2c:0d:dd:3a:e7:ff:50:09:12:d2:1d:53:
e2:66:81:07:b7:0a:fe:8b:62:d8:10:e0:93:e4:e7:
51:41:11:33:bd:1b:b9:6e:7a:62:87:d5:49:19:3f:
f7:3d:e5:54:94:7c:a1:7a:eb:1b:a5:7c:e5:82:aa:
30:f6:da:e8:b7:b6:de:7c:3c:4f:53:74:28:e8:ab:
86:71:08:66:4f:f8:9b:69:fd:34:0b:07:63:19:d2:
57:75:72:b8:14:2f:9a:48:88:2e:c9:4f:8c:ad:d6:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CB:95:50:72:B8:19:EE:7D:D4:AF:00:15:DA:00:1A:64:4A:87:4E
X509v3 Authority Key Identifier:
keyid:8F:08:E6:1A:11:1B:6E:EF:52:7F:9A:CC:60:1E:54:50:0E:43:4C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwjmGhEbbu9Sf5rMYB5UUA5DTG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/713747-be61-4a56-95fa-74067f6d06f2/1/78uVUHK4Ge591K8AFdoAGmRKh04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/713747-be61-4a56-95fa-74067f6d06f2/1/jwjmGhEbbu9Sf5rMYB5UUA5DTG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.113.0/24
Signature Algorithm: sha256WithRSAEncryption
64:eb:e4:26:43:aa:0e:fd:b7:6e:b6:5a:e2:44:f1:5f:29:a0:
52:2d:e2:5d:71:01:c8:0f:7f:b7:90:b7:c4:a6:2f:95:df:96:
2c:88:67:a4:92:53:96:22:95:3b:ba:a5:80:a2:2e:a0:92:ba:
d0:e5:2d:fb:e9:98:2f:47:1d:c9:33:68:a9:06:14:d6:5a:4e:
9d:6f:8c:ff:a5:57:3c:26:18:71:fd:17:93:74:ae:7d:7d:84:
67:db:cf:cc:ca:14:79:d7:25:91:fc:39:54:24:e4:43:47:2c:
9c:06:93:84:89:7f:79:2d:23:0e:7d:9a:fa:fa:cd:8e:1b:d5:
c2:df:54:c3:17:a0:8c:f6:35:a5:a4:86:56:3a:b5:9e:87:8d:
f1:57:0d:08:c8:11:ce:7a:a2:76:52:0c:f6:f4:a0:23:95:28:
81:b8:e0:46:e0:f5:e9:24:f5:7b:e1:47:e1:e5:bb:c7:99:cd:
e3:3d:c0:80:ba:16:85:e4:47:1c:24:d1:fe:06:89:4a:ad:ce:
c9:99:00:6f:b1:5e:a2:d3:05:4d:5c:16:b3:8f:74:5f:7e:8c:
54:b6:27:79:d8:63:c2:77:9c:2b:ab:01:bc:56:23:c0:33:83:
14:b9:1e:ee:bd:52:15:29:b9:fc:f9:39:ad:a2:92:4d:7d:a1:
19:50:76:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtiudVvp2IOTzGBtkL2W7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDhlNjFhMTExYjZlZWY1MjdmOWFjYzYwMWU1NDUwMGU0
MzRjNmYwHhcNMjMwMTAxMTMzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmNiOTU1MDcyYjgxOWVlN2RkNGFmMDAxNWRhMDAxYTY0NGE4NzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlIXSx00xpygEPL3bzTNYsW1nDa/
RhaUCAoVDMnEnhdBVgrwVhfcN3ZAIhjDty731j75PidzO2KWCO2EUIdNUYkXSkeX
B3hgJvDE/NyyRieXqGZVkYXbz1xEm5Ccxczu7l5nBkp/WwgCTDbI+E6jsorc8IaN
05HCaXXSWZrIh7eM3AqI1t87cXyHOa7PGwH1N5KsnLPlmfUsDd065/9QCRLSHVPi
ZoEHtwr+i2LYEOCT5OdRQREzvRu5bnpih9VJGT/3PeVUlHyheusbpXzlgqow9tro
t7befDxPU3Qo6KuGcQhmT/ibaf00CwdjGdJXdXK4FC+aSIguyU+MrdbAPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO/LlVByuBnufdSvABXaABpkSodOMB8GA1UdIwQY
MBaAFI8I5hoRG27vUn+azGAeVFAOQ0xvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandqbUdoRWJidTlTZjVyTVlCNVVVQTVEVEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83MTM3NDctYmU2MS00YTU2LTk1ZmEt
NzQwNjdmNmQwNmYyLzEvNzh1VlVISzRHZTU5MUs4QUZkb0FHbVJLaDA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS83MTM3NDctYmU2MS00YTU2LTk1ZmEtNzQwNjdmNmQwNmYy
LzEvandqbUdoRWJidTlTZjVyTVlCNVVVQTVEVEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0BxMA0G
CSqGSIb3DQEBCwUAA4IBAQBk6+QmQ6oO/bdutlriRPFfKaBSLeJdcQHID3+3kLfE
pi+V35YsiGekklOWIpU7uqWAoi6gkrrQ5S376ZgvRx3JM2ipBhTWWk6db4z/pVc8
Jhhx/ReTdK59fYRn28/MyhR51yWR/DlUJORDRyycBpOEiX95LSMOfZr6+s2OG9XC
31TDF6CM9jWlpIZWOrWeh43xVw0IyBHOeqJ2Ugz29KAjlSiBuOBG4PXpJPV74Ufh
5bvHmc3jPcCAuhaF5EccJNH+BolKrc7JmQBvsV6i0wVNXBazj3RffoxUtid52GPC
d5wrqwG8ViPAM4MUuR7uvVIVKbn8+TmtopJNfaEZUHZT
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:36:57 2025 by rpki-client