Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/XjVu2IyXljFzhSvYma_h3-clfVU.roa
File: XjVu2IyXljFzhSvYma_h3-clfVU.roa (raw, json)
Hash identifier: nT21YokFB5zQvbm3JPkkRJDjEHGU38C24xQDpQHQGAI=
Subject key identifier: 5E:35:6E:D8:8C:97:96:31:73:85:2B:D8:99:AF:E1:DF:E7:25:7D:55
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0194266BF5942DABF6EED829833AE349A835
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/XjVu2IyXljFzhSvYma_h3-clfVU.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209541
IP address blocks: 147.78.232.0/22 maxlen: 22
147.78.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f5:94:2d:ab:f6:ee:d8:29:83:3a:e3:49:a8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e356ed88c97963173852bd899afe1dfe7257d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:bf:e7:5b:f8:43:13:b2:04:cf:0d:47:b1:
6b:77:49:f1:f5:8e:0b:4b:76:b6:67:6f:20:38:84:
24:8f:16:ec:db:04:fb:c2:9d:0c:6b:67:47:c6:b0:
ac:be:d6:b6:db:06:ae:c6:50:e5:8c:cb:b5:c9:37:
6f:74:f6:b7:9e:59:19:aa:c7:99:ae:ec:31:b5:68:
f4:2b:7b:e8:ae:92:86:41:41:5e:ab:80:ef:d7:ac:
8f:4b:b5:f6:0d:6a:ab:62:21:64:f2:b7:68:e0:57:
2a:26:f1:4b:a4:10:93:2b:85:0f:42:e4:9a:4c:95:
a7:76:c0:b4:8e:da:de:96:e6:63:6a:9a:bf:6b:bc:
b3:a9:15:57:7a:d0:8c:77:56:97:e8:f6:c7:76:a1:
97:75:05:65:1e:8b:a5:89:88:94:b3:f2:6e:1f:c3:
ee:b5:ff:fd:d1:98:70:ae:1a:d5:34:73:45:d0:11:
b3:d8:1a:59:08:51:37:de:95:a8:5a:81:d2:e9:49:
8c:98:c5:cd:8e:ee:7e:41:7d:1d:40:ce:c1:fd:ab:
7f:7a:7c:df:d9:05:6d:41:97:d6:fa:43:65:9f:a3:
e3:9a:77:89:ff:8e:d0:73:73:43:81:dc:52:6d:f9:
46:98:a0:03:8b:22:48:b2:5b:10:16:06:e5:38:dc:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:35:6E:D8:8C:97:96:31:73:85:2B:D8:99:AF:E1:DF:E7:25:7D:55
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/XjVu2IyXljFzhSvYma_h3-clfVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.232.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:bc:02:d8:e7:d9:c5:24:32:15:2d:2d:b7:be:a9:26:23:00:
b8:73:b7:ac:81:23:73:3b:d8:6d:ce:54:a6:5b:ae:4b:91:44:
49:22:c9:df:f1:69:b7:c0:61:5f:8f:5d:95:41:03:4b:6a:22:
88:d2:64:25:23:0c:9d:25:77:7a:8b:30:94:c0:be:64:97:07:
d5:ec:51:82:0f:4c:67:b6:24:96:a5:61:ff:a7:2b:f3:88:ae:
a0:83:40:b5:55:e5:28:08:6c:6e:3d:da:1b:97:89:50:ce:52:
7c:09:e0:71:7b:d2:bd:68:e3:39:fa:59:d3:8f:16:fb:3f:08:
ef:90:ed:f4:e5:9d:f0:4a:96:11:8a:9b:55:8a:2c:8e:fc:fc:
32:9d:be:6d:42:e0:a7:77:74:47:fc:ea:9c:54:8a:53:32:d9:
56:e0:60:5f:eb:60:1d:bd:fb:96:7f:0c:d3:e5:3d:9d:b3:ef:
99:19:b8:4f:8d:1e:b7:80:6a:39:c4:cd:35:06:3a:99:a4:e2:
68:25:91:64:c6:fc:58:4f:85:19:55:a1:57:f8:11:d8:bb:40:
39:9c:fa:a7:65:ad:f4:d9:43:1a:a1:a1:a4:2f:32:b4:d3:66:
c9:9a:0c:08:77:66:86:0d:88:c8:40:72:d1:bf:66:5d:50:a3:
b5:0c:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:49 2025 by rpki-client on console.sobornost.net