Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/1-lv-eyLkZwpQLTuJorHeKbcVMK8.roa
File: 1-lv-eyLkZwpQLTuJorHeKbcVMK8.roa (raw, json)
Hash identifier: tvNysXrHBHPZC5fymq/kQjA0jN47rS/9OLBH7USYU6E=
Subject key identifier: FA:5B:FE:7B:22:E4:67:0A:50:2D:3B:89:A2:B1:DE:29:B7:15:30:AF
Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial: 019464B7C0CF3FF28E8FEAEE0E06AD7B808D
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/1-lv-eyLkZwpQLTuJorHeKbcVMK8.roa
Signing time: Tue 14 Jan 2025 12:09:11 +0000
ROA not before: Tue 14 Jan 2025 12:09:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215992
IP address blocks: 147.78.88.0/22 maxlen: 22
147.78.88.0/24 maxlen: 24
147.78.89.0/24 maxlen: 24
147.78.90.0/24 maxlen: 24
147.78.91.0/24 maxlen: 24
2a09:2040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:b7:c0:cf:3f:f2:8e:8f:ea:ee:0e:06:ad:7b:80:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Validity
Not Before: Jan 14 12:09:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa5bfe7b22e4670a502d3b89a2b1de29b71530af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:b7:33:b7:fb:0f:9e:5d:96:9d:b4:1b:b6:
49:67:75:29:df:dc:24:29:a1:bc:4f:f0:cd:18:bf:
00:ed:c4:fe:b2:e2:34:76:58:a6:2f:48:8d:5b:a6:
16:7b:cc:50:8b:57:3f:19:a0:a3:c6:1e:e5:56:89:
ed:38:c3:69:31:35:7b:20:80:0d:ff:47:a5:58:3d:
7b:ff:d9:36:19:91:47:02:79:09:60:c9:b8:a6:ee:
8d:d7:dd:08:66:ff:cb:c9:eb:e8:cc:cc:a4:a2:0c:
0d:d6:1d:83:df:db:95:45:62:fd:41:e0:4a:9f:cb:
4e:0d:c9:bc:23:93:60:8f:85:44:d5:08:39:79:0a:
a7:ee:65:88:25:eb:d8:16:8d:d6:dc:00:f2:c9:3d:
45:cf:69:50:b8:ec:51:5c:bf:b9:e5:89:32:4e:61:
ff:a3:d4:9d:85:11:f1:4e:a0:0c:80:e6:79:6e:0f:
cd:79:68:69:43:e7:28:23:46:83:66:6c:8f:44:74:
3f:09:84:ff:1f:a8:8a:99:f9:7c:b0:09:36:db:19:
23:89:1c:0e:b7:13:11:c4:e4:6b:3d:03:77:0f:4c:
e8:ad:0c:9b:70:87:a5:11:45:58:4d:24:76:11:25:
aa:61:bb:36:52:b5:a6:29:1e:85:01:26:48:89:d8:
98:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5B:FE:7B:22:E4:67:0A:50:2D:3B:89:A2:B1:DE:29:B7:15:30:AF
X509v3 Authority Key Identifier:
keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/1-lv-eyLkZwpQLTuJorHeKbcVMK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.88.0/22
IPv6:
2a09:2040::/29
Signature Algorithm: sha256WithRSAEncryption
38:d6:78:c4:f0:b4:29:63:58:d6:82:11:64:9b:8a:f0:41:e1:
5a:52:82:7e:b5:89:d7:51:8e:7c:f9:c9:a8:a4:5d:54:35:f1:
a0:6a:c1:e0:76:71:8f:93:68:e9:9a:9f:81:57:f6:9c:b3:4f:
ec:a3:d5:16:28:87:6a:e3:93:ec:83:d6:30:39:3a:52:92:66:
ae:51:44:75:06:3f:36:23:7e:07:53:64:44:6c:43:53:a7:3a:
3d:bf:0e:d7:53:11:4b:10:ed:13:ad:c6:76:45:ef:47:b4:d2:
21:05:30:03:8f:24:24:2e:0d:08:51:0d:c3:6a:c0:9e:00:9b:
9a:f2:22:55:78:36:42:0c:1e:c5:f9:e8:f9:12:e5:f5:ac:93:
26:fb:4d:a0:56:7c:2e:86:d5:a2:0f:44:02:2b:43:35:36:08:
30:48:f4:1f:df:99:d0:d3:2c:58:8c:46:37:5c:68:c4:b0:f0:
70:dc:0e:f1:41:4e:64:81:82:6f:7d:9a:16:97:46:75:1a:c4:
b3:85:d8:2b:a9:1d:31:b8:f5:96:52:a1:15:0c:63:70:85:14:
ed:79:72:62:ba:89:9b:51:ef:62:69:25:f2:4d:fe:46:f0:ea:
b3:6e:06:52:94:63:91:9e:87:11:10:43:ed:9d:a1:82:14:2b:
df:e5:6d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net