Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/uvI_GRIq2GyJoG31og82hOgTWrg.roa
File: uvI_GRIq2GyJoG31og82hOgTWrg.roa (raw, json)
Hash identifier: OrH6axib8qnAg3xAnrBLPJ8IdTDHwClsXRZdDBToyxU=
Subject key identifier: BA:F2:3F:19:12:2A:D8:6C:89:A0:6D:F5:A2:0F:36:84:E8:13:5A:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 019422FC21740148C030C812E9A738736F50
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/uvI_GRIq2GyJoG31og82hOgTWrg.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43566
IP address blocks: 78.110.224.0/20 maxlen: 24
78.110.224.0/21 maxlen: 24
78.110.232.0/21 maxlen: 24
78.110.233.0/24 maxlen: 24
178.23.24.0/21 maxlen: 24
178.23.24.0/22 maxlen: 24
178.23.24.0/24 maxlen: 24
178.23.25.0/24 maxlen: 24
178.23.26.0/23 maxlen: 24
178.23.28.0/22 maxlen: 24
2a11:7f80::/32 maxlen: 36
2a11:7f80::/33 maxlen: 36
2a11:7f80:8000::/33 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:21:74:01:48:c0:30:c8:12:e9:a7:38:73:6f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baf23f19122ad86c89a06df5a20f3684e8135ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:52:7a:15:89:59:c2:b2:c3:fd:31:26:ec:97:
40:0f:da:89:11:3f:98:e0:1a:3a:d7:0d:bd:28:9b:
d6:b1:5b:fe:2d:4f:cd:e3:b3:90:df:84:dc:34:1e:
b3:73:d2:9b:9e:78:b2:93:d4:24:00:2c:d5:1f:c4:
8c:8c:4c:4d:77:3b:58:51:09:8d:ca:b3:09:a6:2a:
26:c4:f4:0c:df:bb:cf:b1:f7:78:6d:9a:d7:28:aa:
bc:ef:8a:05:81:7c:2f:f6:09:e4:80:17:79:4c:fc:
03:e1:38:ec:f8:10:a2:0a:32:a0:01:9b:83:46:bf:
b4:18:54:e4:8e:0a:98:c4:09:b1:f9:3b:cc:96:4c:
77:60:95:5d:55:5d:81:6b:d5:6b:2d:d0:e1:05:4c:
c8:e8:30:58:4b:99:c1:12:ed:2d:8b:a0:d6:e7:40:
66:86:1d:df:3d:4e:06:25:dc:4c:cf:a2:f2:6d:a5:
d2:b9:ec:8f:16:cf:f9:c1:8a:bb:7a:6c:c5:e6:39:
2b:db:22:b9:17:0e:b8:07:e6:29:06:d5:e7:f3:6b:
94:8f:02:d3:01:4c:be:d8:99:a1:c4:43:35:e2:9d:
d6:3f:d6:f2:0e:d6:97:b9:50:9b:75:85:61:74:c0:
a2:46:79:e6:67:ef:3d:00:3e:41:27:7d:99:8a:b3:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F2:3F:19:12:2A:D8:6C:89:A0:6D:F5:A2:0F:36:84:E8:13:5A:B8
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/uvI_GRIq2GyJoG31og82hOgTWrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.224.0/20
178.23.24.0/21
IPv6:
2a11:7f80::/32
Signature Algorithm: sha256WithRSAEncryption
95:b7:7d:ea:02:8c:65:35:4b:85:7e:9d:9f:a0:07:bb:9d:db:
94:77:5e:8e:9e:95:3b:de:7f:ef:bd:bd:58:ca:12:42:3f:61:
09:a7:45:53:f0:da:75:60:97:a6:2e:c3:c1:b6:97:c9:a1:b8:
36:c5:c1:16:0e:51:96:58:a1:e2:62:43:11:89:ef:04:b6:d0:
fa:f4:d2:f2:1a:dd:44:d8:0c:c3:95:9a:3b:28:2a:c6:ca:15:
18:e1:e8:a7:5b:6d:cf:52:35:e5:5b:c5:63:b2:d9:ef:3f:99:
4a:98:fe:96:a8:2d:95:93:ef:ce:fc:21:57:63:f1:54:0a:ca:
6d:28:75:ea:43:f7:f8:52:bd:1d:f8:ac:0b:cd:37:0f:5e:66:
ae:72:fd:86:99:46:5a:82:74:e4:a5:a4:ef:22:af:24:2f:6d:
ed:d5:f7:d3:0b:a9:83:92:cf:7c:5b:38:dd:54:44:6f:5f:73:
c3:07:b5:57:55:62:f5:41:7a:8c:e0:ac:12:09:bc:32:fe:5c:
9f:6c:de:67:e8:58:98:74:db:2b:13:49:d3:74:a8:09:93:53:
47:e0:de:4e:b4:e9:86:a3:59:bd:61:fd:4f:fe:d5:a1:9d:8a:
b3:79:ad:f8:cd:49:24:aa:85:d7:6a:a0:11:d6:57:7e:fc:f3:
2b:b8:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net