Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/mA147Xd7z63TDz_x49XUByd9djA.roa
File: mA147Xd7z63TDz_x49XUByd9djA.roa (raw, json)
Hash identifier: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=
Subject key identifier: 98:0D:78:ED:77:7B:CF:AD:D3:0F:3F:F1:E3:D5:D4:07:27:7D:76:30
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B5D7CAEE50B7ADF236F9A3BC5067D
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/mA147Xd7z63TDz_x49XUByd9djA.roa
Signing time: Thu 02 Jan 2025 09:49:18 +0000
ROA not before: Thu 02 Jan 2025 09:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51855
IP address blocks: 78.108.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5d:7c:ae:e5:0b:7a:df:23:6f:9a:3b:c5:06:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=980d78ed777bcfadd30f3ff1e3d5d407277d7630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:41:04:01:b1:06:79:89:49:a2:c9:55:30:
16:2f:71:75:ce:0c:e9:9d:2b:ef:31:8b:be:01:57:
e9:2b:b8:b7:0b:3d:1d:c1:5b:38:6b:5c:b6:76:83:
00:7c:d7:38:d6:12:77:15:e2:c8:28:e7:ad:d7:e6:
da:9b:25:ca:e5:09:67:68:8e:b9:fa:67:9a:cd:6c:
d9:53:24:a3:5c:74:bd:12:65:f6:e2:91:89:4e:53:
4e:cb:1c:49:6f:86:af:49:f4:89:c1:7e:2d:21:ac:
59:cd:98:d7:7f:6e:1a:e6:34:5a:45:d8:2b:b6:db:
e6:2f:92:51:ed:42:c8:38:c9:73:f5:a0:07:fb:94:
1a:dd:d6:85:77:d9:01:b1:e5:28:30:15:35:87:76:
bb:70:d1:11:45:19:5a:e1:c7:db:67:93:f9:14:d3:
d8:ed:45:36:d7:55:b9:f4:d0:b1:02:e2:14:7b:10:
81:ed:ba:82:b0:dd:09:66:1f:fd:d9:f9:77:c4:c1:
eb:30:df:3e:51:83:d9:22:14:1c:83:f3:7a:48:4d:
a6:cc:0b:1b:3a:57:bc:f0:b1:62:d6:07:7d:7b:ab:
30:58:34:6e:5a:c3:04:bd:40:d4:bf:87:0d:ce:8f:
65:21:af:ba:8d:20:5c:dc:38:8b:d0:a1:cd:d8:ca:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0D:78:ED:77:7B:CF:AD:D3:0F:3F:F1:E3:D5:D4:07:27:7D:76:30
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/mA147Xd7z63TDz_x49XUByd9djA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.247.0/24
Signature Algorithm: sha256WithRSAEncryption
15:6d:37:f9:45:c9:d5:ed:7f:21:e7:0f:10:ef:0f:33:b8:30:
1c:fa:e8:55:d5:4d:95:4f:b3:aa:0d:61:1c:6a:d8:ff:88:18:
bc:be:9e:3f:42:98:05:7d:3f:f8:9d:e9:0c:7c:95:e8:0d:08:
d6:72:ea:8b:cd:61:64:b4:22:1e:4e:ce:db:cc:fe:85:23:34:
3e:b1:05:98:27:27:11:44:d9:f6:b8:61:f5:b6:7a:af:89:49:
b8:69:2c:77:c7:9b:81:54:f6:26:34:5e:72:df:ca:1d:f1:22:
e4:99:90:5e:f0:99:1a:c2:d5:e3:f8:ff:00:18:91:f7:0a:63:
2b:f6:d8:cb:1c:1d:f5:2f:8d:8e:cf:69:a0:a4:53:25:5b:e3:
2a:c3:72:79:d9:c5:81:38:1e:0a:06:55:a8:27:a5:2a:d6:6e:
a0:d3:80:43:a3:8f:6e:bc:2e:d1:22:63:e9:30:a8:93:cc:1c:
95:a0:d8:07:6a:5a:3b:93:6f:e3:be:73:bf:48:e7:fb:45:bc:
4f:c3:24:19:92:09:16:f2:e2:ed:f5:8b:ae:a3:a2:92:db:5d:
4b:53:9a:0e:ed:7d:60:c2:38:31:e1:ee:7c:ca:fb:12:28:dc:
05:d1:7e:30:c8:8b:43:bb:3c:5d:67:95:9e:68:9d:0f:b1:a7:
58:c9:e4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:17 2025 by rpki-client