Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa
File: QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa (raw, json)
Hash identifier: 9xya8h6lnbe7gVjWBZEopxxvdjqjl2fFO+ULpdjenyw=
Subject key identifier: 42:C1:CD:B6:18:1C:F4:BE:DF:27:FD:85:A3:F8:3E:0A:A5:08:AF:BE
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 019427479A3B32AF77F7A32005BB8E6D0918
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa
Signing time: Thu 02 Jan 2025 13:49:51 +0000
ROA not before: Thu 02 Jan 2025 13:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41685
IP address blocks: 78.25.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9a:3b:32:af:77:f7:a3:20:05:bb:8e:6d:09:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Jan 2 13:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42c1cdb6181cf4bedf27fd85a3f83e0aa508afbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:63:02:37:ad:7b:be:7b:7e:49:2c:f7:83:
80:03:43:ef:01:f9:bd:1d:35:0d:0d:49:7b:b4:ba:
b1:de:1a:c4:1b:c9:2e:ff:65:90:64:1c:41:81:51:
15:c2:66:d1:d1:17:3a:14:77:79:f9:b0:63:18:d9:
18:a7:f0:15:e8:c1:0d:66:a2:78:ba:dd:24:bd:87:
8c:97:b0:d2:e3:51:23:d9:cf:d2:18:20:7c:fe:48:
fc:4a:d8:c8:59:f0:dd:5e:52:d6:2f:fa:b0:db:8d:
74:09:69:16:8b:9c:c4:5b:95:a9:cc:ee:18:db:4f:
6c:9c:57:c1:d6:c8:0d:42:b2:84:d4:17:ee:e1:80:
11:9d:3a:97:20:54:67:44:38:c9:39:27:02:48:cb:
4e:6b:6a:78:d8:25:ef:7e:9d:92:05:1d:18:99:3d:
af:a1:9f:0f:76:28:b2:3b:dd:f5:6d:fb:09:b9:1c:
dc:dc:89:42:4d:b4:b7:52:7b:82:33:a5:4c:76:c8:
a4:7e:bc:cf:ca:ad:87:13:a8:97:d2:a3:7d:08:15:
36:78:bc:86:9d:a6:ef:08:f5:ff:66:1c:32:62:41:
36:a8:08:e2:f1:dc:50:05:2e:c2:bc:85:cf:0d:52:
7b:c1:ff:0b:0d:34:7a:b2:df:6b:1a:86:87:0f:dd:
94:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C1:CD:B6:18:1C:F4:BE:DF:27:FD:85:A3:F8:3E:0A:A5:08:AF:BE
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.25.1.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f1:81:19:87:89:6c:94:80:c4:2e:de:01:07:ae:82:d6:c9:
15:d4:9b:50:c1:d1:bc:37:ca:0b:34:00:3b:ff:e8:ca:f2:6c:
58:bc:cb:06:81:b4:4b:06:05:a4:39:ca:59:bf:10:6f:fa:ae:
be:e9:ed:d0:1d:f0:31:d9:f1:21:38:4a:04:74:64:e9:d7:6f:
86:88:53:96:d5:09:77:76:99:3d:21:c6:ca:e5:0a:57:8b:4c:
a7:64:75:72:51:b6:43:c5:b3:bd:44:de:98:99:32:ea:48:b2:
86:51:4e:13:5b:b0:f0:b2:20:1b:e9:0e:db:2b:82:db:b5:57:
0f:a9:db:22:f5:3b:22:78:dd:4f:81:ce:bc:5c:24:46:9a:80:
ba:78:c2:bb:5e:26:e1:03:76:a7:79:52:1b:7c:b0:22:21:77:
e4:b5:cb:52:fd:55:33:fb:f9:b1:03:47:2e:cb:80:73:65:24:
fd:06:af:ab:90:59:e5:4f:20:1c:db:6b:ef:16:15:a3:82:99:
32:66:77:e7:63:a8:be:f8:0f:9f:88:35:3a:a8:a7:7a:4c:cb:
25:78:09:b0:eb:c7:c6:78:ab:a8:d9:f9:7d:78:6a:76:c8:fa:
ce:e3:79:28:0d:76:df:bd:69:7d:f7:a1:69:3e:2d:75:8b:94:
70:06:f8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:29 2025 by rpki-client