Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/5t_mW-9iAJF947yBRX7z3c1fKCA.roa
File: 5t_mW-9iAJF947yBRX7z3c1fKCA.roa (raw, json)
Hash identifier: j0+9GFhRaH2kiOAKMhZj5W1LMt1cB4nhSOqQQ9Re6jI=
Subject key identifier: E6:DF:E6:5B:EF:62:00:91:7D:E3:BC:81:45:7E:F3:DD:CD:5F:28:20
Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial: 0194F616E43B10F258C11FA29F89D489D356
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/5t_mW-9iAJF947yBRX7z3c1fKCA.roa
Signing time: Tue 11 Feb 2025 17:38:02 +0000
ROA not before: Tue 11 Feb 2025 17:38:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14616
IP address blocks: 147.78.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f6:16:e4:3b:10:f2:58:c1:1f:a2:9f:89:d4:89:d3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Validity
Not Before: Feb 11 17:38:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6dfe65bef6200917de3bc81457ef3ddcd5f2820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:6b:7a:69:08:67:8b:db:fb:5f:e5:52:16:
a6:ca:06:41:10:a1:23:55:42:21:23:06:94:b5:12:
b7:d4:b0:9b:e2:37:84:e7:aa:46:68:ec:0e:25:20:
c0:76:d6:ea:b6:12:70:66:af:ed:2f:56:86:2d:a3:
4b:d4:58:38:76:66:41:5e:7c:55:25:79:1b:9b:23:
fa:8e:2e:d7:2f:80:75:04:92:30:b4:2e:91:47:19:
b7:f5:06:7d:3d:a9:22:3e:89:20:3f:78:2e:21:dd:
35:39:0f:10:f4:89:3c:db:84:57:3b:bd:b0:54:4b:
50:aa:31:3d:1e:a3:35:85:c8:9b:dc:38:b7:51:7e:
a3:18:a4:e0:d4:c0:e8:8c:34:a0:62:08:41:d7:75:
aa:0d:b4:ef:5f:b6:a9:56:ca:01:57:ab:46:9d:e0:
81:9e:d8:c9:24:41:e5:80:61:a9:f1:a7:6b:4c:11:
02:f1:a0:39:02:99:2e:40:86:66:79:c7:d6:ef:86:
70:c0:80:a1:9b:43:de:9a:e7:c2:3c:32:c9:91:31:
1b:04:a6:42:46:8d:08:db:a5:de:90:e9:1e:81:e3:
7c:26:e9:51:05:37:3d:97:41:74:c3:db:41:5b:50:
6b:a2:7e:df:eb:1f:7c:8d:15:1f:35:83:fe:4f:1f:
8f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DF:E6:5B:EF:62:00:91:7D:E3:BC:81:45:7E:F3:DD:CD:5F:28:20
X509v3 Authority Key Identifier:
keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/5t_mW-9iAJF947yBRX7z3c1fKCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.6.0/24
Signature Algorithm: sha256WithRSAEncryption
23:aa:81:27:de:9a:0e:b7:3c:c6:4b:7d:86:75:b1:c8:2f:7d:
22:c0:84:58:69:d2:95:8c:34:55:04:ad:38:76:a3:39:98:83:
5a:63:cb:ab:cc:7a:b4:8b:da:d5:11:30:07:ed:49:b1:68:5a:
2a:a0:e0:65:90:8d:f8:f7:e5:6d:b4:ff:e0:99:6c:37:ad:57:
46:9c:e4:7f:06:24:a1:20:14:89:8a:e7:b1:a1:f6:11:e8:ad:
3b:e0:96:55:7c:94:27:80:49:82:24:90:8a:6a:e0:f9:d2:1c:
f6:5c:4d:2f:56:f7:83:31:a9:3d:f7:c6:db:ff:05:de:2f:ec:
78:99:bd:bd:4a:e4:2a:f1:2a:86:ba:50:b1:f1:00:33:d7:fe:
cc:dc:47:3f:45:b9:27:7f:85:d9:29:60:7a:f8:f3:44:4c:a0:
de:2f:99:c5:ad:84:67:5b:7b:7b:2d:d1:55:30:5c:94:8f:5b:
b9:2c:35:1e:dc:93:11:a6:a3:91:a3:fc:9e:30:7d:c0:ac:0c:
b6:ee:c2:d3:65:a2:63:bb:8d:47:72:1f:4d:a5:78:5f:a5:81:
dc:a6:2d:2a:56:9c:2b:c5:79:b3:18:b2:d7:3e:f4:02:80:ad:
dc:72:a3:3d:de:49:b7:5a:31:a8:a9:e1:2d:d8:c3:f0:b2:11:
45:1d:4c:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZT2FuQ7EPJYwR+in4nUidNWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDU4MmNhNzA0NzE3ZWIwYzk0YmU0ZDg5NDEzZjRiYzJk
OGI4ZTUwHhcNMjUwMjExMTczODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmRmZTY1YmVmNjIwMDkxN2RlM2JjODE0NTdlZjNkZGNkNWYyODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuRremkIZ4vb+1/lUhamygZBEKEj
VUIhIwaUtRK31LCb4jeE56pGaOwOJSDAdtbqthJwZq/tL1aGLaNL1Fg4dmZBXnxV
JXkbmyP6ji7XL4B1BJIwtC6RRxm39QZ9PakiPokgP3guId01OQ8Q9Ik824RXO72w
VEtQqjE9HqM1hcib3Di3UX6jGKTg1MDojDSgYghB13WqDbTvX7apVsoBV6tGneCB
ntjJJEHlgGGp8adrTBEC8aA5ApkuQIZmecfW74ZwwIChm0PemufCPDLJkTEbBKZC
Ro0I26XekOkegeN8JulRBTc9l0F0w9tBW1Bron7f6x98jRUfNYP+Tx+PhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFObf5lvvYgCRfeO8gUV+893NXyggMB8GA1UdIwQY
MBaAFIRFgspwRxfrDJS+TYlBP0vC2LjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAt
ZjIzZjY2ZjhkMjQyLzEvNXRfbVctOWlBSkY5NDd5QlJYN3ozYzFmS0NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAtZjIzZjY2ZjhkMjQy
LzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk04GMA0G
CSqGSIb3DQEBCwUAA4IBAQAjqoEn3poOtzzGS32GdbHIL30iwIRYadKVjDRVBK04
dqM5mINaY8urzHq0i9rVETAH7UmxaFoqoOBlkI349+VttP/gmWw3rVdGnOR/BiSh
IBSJiuexofYR6K074JZVfJQngEmCJJCKauD50hz2XE0vVveDMak998bb/wXeL+x4
mb29SuQq8SqGulCx8QAz1/7M3Ec/Rbknf4XZKWB6+PNETKDeL5nFrYRnW3t7LdFV
MFyUj1u5LDUe3JMRpqORo/yeMH3ArAy27sLTZaJju41Hch9NpXhfpYHcpi0qVpwr
xXmzGLLXPvQCgK3ccqM93km3WjGoqeEt2MPwshFFHUwW
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:20 2025 by rpki-client on console.sobornost.net