Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bEWZuH1zdIhUzcFSQHi6NDPKc-I.roa
File: bEWZuH1zdIhUzcFSQHi6NDPKc-I.roa (raw, json)
Hash identifier: N+P017EG+vkO9YVqJ3/vFEU24OhPdU2m1NfVUvOgZ2U=
Subject key identifier: 6C:45:99:B8:7D:73:74:88:54:CD:C1:52:40:78:BA:34:33:CA:73:E2
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746B17524B088209F7D19147B120B4A
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bEWZuH1zdIhUzcFSQHi6NDPKc-I.roa
Signing time: Thu 02 Jan 2025 13:48:51 +0000
ROA not before: Thu 02 Jan 2025 13:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207983
IP address blocks: 78.135.109.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:b1:75:24:b0:88:20:9f:7d:19:14:7b:12:0b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c4599b87d73748854cdc1524078ba3433ca73e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3e:a2:6a:e7:67:7c:1a:ba:52:91:04:b3:42:
e3:3c:61:56:db:ff:96:51:ec:84:3c:e4:3b:fd:63:
61:0a:a8:ef:b6:bf:6d:17:41:74:93:7f:cb:0f:44:
b9:a2:68:fd:6b:5c:96:98:21:5b:4f:9e:85:e2:b6:
d8:47:6f:3a:e7:79:3c:e2:36:1d:3f:07:e5:94:d7:
29:90:59:a9:30:a9:1b:09:a3:68:db:55:5b:12:d5:
ed:63:ef:cf:06:3a:21:6b:a0:a6:0a:1c:c8:16:4d:
62:b8:55:06:8f:44:22:72:26:e0:fa:10:5b:26:23:
0f:ae:b9:95:db:e8:cf:f7:48:62:b4:f1:01:f4:0a:
a4:42:73:28:dc:e3:51:9d:95:7b:e6:91:cc:ee:11:
89:57:b8:89:fd:eb:65:2a:2f:29:37:98:3d:78:f6:
0b:7c:9e:04:6e:6b:7d:79:d9:e7:6c:79:19:7d:01:
a1:e7:e0:33:7e:79:a6:59:ac:93:65:b1:17:67:04:
c9:db:cc:32:6e:20:92:a7:15:f7:91:b1:89:95:c3:
56:13:95:d6:03:19:7e:2b:f1:e3:37:4e:98:11:d7:
1c:c4:c0:ae:88:5a:0f:3f:be:fb:07:42:2c:35:3a:
e3:e1:60:7b:f5:04:c1:49:6b:45:2a:54:9c:6c:42:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:45:99:B8:7D:73:74:88:54:CD:C1:52:40:78:BA:34:33:CA:73:E2
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bEWZuH1zdIhUzcFSQHi6NDPKc-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.109.0/24
188.132.227.0/24
Signature Algorithm: sha256WithRSAEncryption
17:45:8a:9b:3b:03:8b:30:1d:91:5b:a3:39:88:15:f1:79:2e:
3a:17:ab:79:2b:f8:49:4b:c3:da:0f:cb:3c:34:18:36:50:93:
72:07:7b:78:4a:e4:e7:67:72:06:4b:d0:9e:3b:7b:7a:02:4e:
e3:f7:c9:5e:a5:10:aa:d9:bf:59:3d:9d:1c:6c:03:2a:b1:f1:
a5:0d:28:f6:b5:fa:1a:3b:f3:06:fc:94:fb:29:2e:9a:47:99:
87:98:38:b5:3a:f9:86:50:51:0e:43:bf:4b:17:4b:6b:79:d0:
65:c1:b1:32:a1:93:7a:6e:da:6b:d0:b1:46:d9:09:5e:fe:49:
7a:dd:a6:7d:1b:b7:cf:70:54:fb:10:3c:f6:9d:74:7e:46:d9:
12:c0:d2:61:8d:71:24:43:13:ab:41:38:c8:58:8d:ef:a7:8b:
59:a2:1d:8d:f6:75:37:49:39:d1:1f:00:1a:0f:75:90:f2:e4:
5d:de:5c:8a:9b:ce:2e:e4:2b:cd:b8:e3:8b:cb:6d:c0:59:d8:
8b:be:ba:cb:5d:a3:cb:c6:5d:3a:b0:ba:2b:4b:41:e2:9c:06:
cb:cd:77:dc:d7:c6:02:fb:89:47:61:1b:b0:e4:17:8b:39:55:
95:46:99:90:17:3e:36:e9:df:67:d1:f3:7c:d0:b1:6f:60:8f:
41:c0:e1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net