Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gbkmmRsyGVtTgdThTvrZ-QRQEk8.roa
File: gbkmmRsyGVtTgdThTvrZ-QRQEk8.roa (raw, json)
Hash identifier: K0reKsFR6HbvGrbeoQ2k0lGLxgv/lyu/d3s5Cksaf+I=
Subject key identifier: 81:B9:26:99:1B:32:19:5B:53:81:D4:E1:4E:FA:D9:F9:04:50:12:4F
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0195F581A80C4B6D860B9C39A6636F98B61A
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gbkmmRsyGVtTgdThTvrZ-QRQEk8.roa
Signing time: Wed 02 Apr 2025 07:57:49 +0000
ROA not before: Wed 02 Apr 2025 07:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39582
IP address blocks: 78.135.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:81:a8:0c:4b:6d:86:0b:9c:39:a6:63:6f:98:b6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 2 07:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81b926991b32195b5381d4e14efad9f90450124f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:41:43:39:7b:ee:3a:e6:a7:37:00:fa:75:
71:7c:1f:74:de:b6:b3:ef:84:d0:00:c2:4d:93:57:
85:e7:8f:1b:e1:b0:05:31:50:9e:13:93:b3:ed:53:
69:80:fd:07:ac:96:c2:21:e8:08:ea:32:72:4d:dd:
75:0a:d7:37:4b:9d:16:13:ca:4c:8b:f2:6c:0a:12:
00:99:7d:9b:35:90:02:1d:f9:39:a3:42:30:9c:58:
f7:a8:ab:c2:bc:6d:dd:b8:e6:da:b7:e2:bd:4c:22:
a8:c7:1a:83:a5:a3:05:3c:9d:32:ef:60:59:fe:66:
ee:81:6f:0e:e7:09:b5:b4:39:03:20:1b:6b:e1:57:
e9:f6:b4:59:21:62:b1:17:e7:2c:9d:32:e3:1b:dc:
69:93:e1:1f:4b:48:97:a4:a1:f1:5a:ac:8e:e7:fe:
c7:63:47:02:6b:62:33:92:49:ce:f1:52:32:fa:5c:
53:46:43:61:85:03:51:3f:29:b7:09:16:be:27:ed:
49:60:e9:23:97:08:e5:dc:d0:c4:96:b7:45:ff:8e:
ae:2a:fa:da:fe:ca:a5:4a:ab:67:ca:fa:2c:7e:60:
c7:3a:b4:1c:3f:bf:9a:b3:98:fa:ae:5e:fe:9e:99:
22:cb:d1:da:4b:3a:37:c6:80:fc:7e:57:77:c5:fa:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B9:26:99:1B:32:19:5B:53:81:D4:E1:4E:FA:D9:F9:04:50:12:4F
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/gbkmmRsyGVtTgdThTvrZ-QRQEk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.80.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ec:cf:f8:9a:80:f8:4b:a0:98:59:eb:54:c9:79:9e:cc:cf:
d9:5d:ea:83:f6:2e:15:40:8a:58:9d:ca:a5:e7:e3:f6:a5:b5:
86:6d:ca:63:05:6d:06:1b:84:4a:c4:cb:ed:1e:02:94:d0:dc:
8f:25:e3:ac:03:1c:86:32:78:fa:8e:fc:b4:8b:ef:cb:94:27:
81:22:82:cc:7d:ad:c4:ee:c1:76:0d:b8:40:f4:a8:72:1f:ea:
84:7c:ab:5f:32:aa:21:c4:b5:2e:4d:cf:48:91:e4:0b:5b:b1:
64:23:e3:d6:b8:8a:43:e4:69:b0:a9:23:00:62:d5:39:0e:91:
6a:65:64:e0:e0:dd:a5:06:be:1b:f9:8f:8b:f7:0a:69:e5:bf:
e2:d2:44:8c:d4:49:83:56:b8:6a:e5:8b:da:28:e5:8c:51:a8:
ce:f8:20:4f:8f:a8:fa:23:c5:61:94:f6:00:bd:df:92:d1:46:
fa:a2:df:c1:2e:49:a1:11:26:c7:89:36:8b:e0:ba:1a:70:46:
22:c8:54:d4:b3:20:94:b4:f1:9d:24:db:63:5a:03:2b:d1:24:
54:f0:2a:59:67:e3:29:bd:c0:fd:be:8d:d6:c4:d6:23:05:3a:
b6:c5:ca:92:70:e5:30:3d:7e:66:7f:d0:d2:fb:61:9e:0d:ad:
c1:1f:47:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net