Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/wjT5KqK2qsN2ZpBkVaeAc7uLZdI.roa
File: wjT5KqK2qsN2ZpBkVaeAc7uLZdI.roa (raw, json)
Hash identifier: Fan3WbewEC2StpbKQkBe0buOZw2QS1aWcf4mNkJr634=
Subject key identifier: C2:34:F9:2A:A2:B6:AA:C3:76:66:90:64:55:A7:80:73:BB:8B:65:D2
Certificate issuer: /CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Certificate serial: 01942445482DA19D54D09ABDD136C70E8A04
Authority key identifier: 87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/wjT5KqK2qsN2ZpBkVaeAc7uLZdI.roa
Signing time: Wed 01 Jan 2025 23:48:27 +0000
ROA not before: Wed 01 Jan 2025 23:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 78.108.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:48:2d:a1:9d:54:d0:9a:bd:d1:36:c7:0e:8a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Validity
Not Before: Jan 1 23:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c234f92aa2b6aac37666906455a78073bb8b65d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:43:5c:9e:22:0a:e2:a5:e1:d7:93:02:a9:
48:6e:3d:cd:7f:2c:ed:b8:9f:88:47:52:9c:56:24:
2c:14:c9:50:6b:10:cf:ca:3b:3f:2e:db:94:43:27:
2a:75:4f:4f:57:cf:f8:e2:9d:96:4c:7d:22:a1:5a:
72:bc:e9:ba:7c:3a:ea:68:f2:c9:3f:67:08:27:59:
d0:f7:32:ef:28:3c:c0:70:24:c4:13:b2:0f:f8:57:
a0:38:b9:86:14:40:11:1f:29:57:83:dd:da:6a:da:
c4:21:cd:2a:f8:c4:f8:f9:ee:29:48:90:b4:04:9c:
a7:68:09:11:f3:35:35:6f:09:88:13:1f:2f:1a:24:
50:9b:66:c1:6f:fa:85:ca:2b:e1:50:60:19:3c:7b:
f5:ed:81:5d:4c:fc:b0:0a:bc:2d:86:04:78:ee:f7:
2c:e5:63:75:12:a0:eb:b3:15:a4:69:74:2f:5a:49:
2b:f0:e7:97:38:ec:8d:dc:65:7a:25:06:fd:a2:9d:
e5:86:48:f0:55:cf:57:cf:c1:ee:41:1c:3e:e6:45:
d7:5f:c2:26:c7:4c:78:2b:74:9f:9e:db:ab:a6:4b:
b6:7b:b5:a3:dd:37:05:7b:29:bb:83:cc:58:a5:84:
38:eb:19:b6:24:7c:96:79:2a:5d:da:66:28:81:36:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:34:F9:2A:A2:B6:AA:C3:76:66:90:64:55:A7:80:73:BB:8B:65:D2
X509v3 Authority Key Identifier:
keyid:87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/wjT5KqK2qsN2ZpBkVaeAc7uLZdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.124.0/23
Signature Algorithm: sha256WithRSAEncryption
46:94:2a:2c:72:b4:8e:9d:b1:9d:86:af:00:8b:95:b9:29:71:
f4:4b:48:74:d5:74:5c:c9:5e:77:58:b8:4b:b5:cd:be:dd:58:
5b:61:07:d7:77:05:32:55:cb:73:97:72:2a:8a:dd:9b:c9:5c:
d8:00:93:56:e5:77:7e:62:dd:31:ea:e2:fe:31:22:40:43:30:
67:bc:b8:d0:46:4b:90:1e:44:ca:64:9a:6c:19:e1:0a:c0:08:
07:40:4c:d4:d1:81:e9:eb:9e:48:d9:12:a9:dd:b7:58:bf:8c:
4f:3c:b3:7f:89:d9:21:fd:1c:00:1b:c0:4e:73:07:cc:69:2c:
63:d9:e1:f5:20:e7:a7:b2:d1:47:1e:f7:06:23:e8:10:df:c0:
33:ff:e3:e1:d7:87:fc:a2:99:5d:51:15:e7:11:6a:39:95:85:
df:cb:f7:7d:e6:c1:13:7c:80:e7:0f:53:e1:f5:73:36:37:a2:
ee:e4:e3:b6:00:29:be:85:8f:c7:7a:4f:20:e1:37:62:2c:34:
8c:7a:de:8d:07:55:0c:93:c3:e7:d9:d9:76:d2:93:de:ec:43:
4a:02:be:7d:95:d4:f2:be:dd:59:06:50:82:20:3b:fd:8d:a9:
19:0e:55:8c:d2:50:6b:94:48:ba:6e:57:33:51:7d:b8:17:15:
42:0e:b7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:47 2025 by rpki-client