Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/DuKvCk6weo_jRBIvDVj8Yjk0KTM.roa
File: DuKvCk6weo_jRBIvDVj8Yjk0KTM.roa (raw, json)
Hash identifier: V+Me01+23/zbVQCoEw1CvcMCR84Y0P8j12b7Z3im4Sk=
Subject key identifier: 0E:E2:AF:0A:4E:B0:7A:8F:E3:44:12:2F:0D:58:FC:62:39:34:29:33
Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4
Certificate serial: 0195D632381F221465B7DACF2F57437A3FAA
Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/DuKvCk6weo_jRBIvDVj8Yjk0KTM.roa
Signing time: Thu 27 Mar 2025 06:02:50 +0000
ROA not before: Thu 27 Mar 2025 06:02:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59463
IP address blocks: 78.108.248.0/23 maxlen: 23
78.108.248.0/24 maxlen: 24
78.108.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:32:38:1f:22:14:65:b7:da:cf:2f:57:43:7a:3f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4
Validity
Not Before: Mar 27 06:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ee2af0a4eb07a8fe344122f0d58fc6239342933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:93:5f:1f:07:99:1a:af:f7:f6:23:97:d1:
ed:50:d2:20:32:6f:7a:e0:5d:46:19:01:f9:5e:37:
45:01:5b:ed:2b:0d:e4:3b:ad:61:c6:b4:22:88:91:
93:73:d8:08:58:df:93:74:94:d1:d0:43:89:7a:fd:
0d:de:65:4e:a2:89:75:92:8e:f0:8a:5d:e5:4f:7d:
0a:7e:9a:ee:43:f7:d9:30:4a:ce:80:c8:75:11:93:
c2:85:50:06:41:f0:e9:5f:c5:a4:23:fc:d9:47:35:
d1:e0:38:19:09:2d:86:5a:35:57:f0:b6:24:7a:4a:
21:af:50:ca:1b:60:01:5c:30:d7:2a:92:27:eb:29:
68:96:03:a5:06:76:e2:12:04:4d:fa:40:8b:6f:c0:
50:a1:c1:c0:72:ef:fb:fc:e0:a5:b2:7c:a4:44:3b:
c7:25:25:a9:4d:02:88:f7:16:01:c5:ad:ac:ae:90:
6b:50:10:77:b0:8b:b1:63:60:90:9a:dc:dd:3f:e4:
08:d0:55:6d:61:ff:5f:0e:24:44:d0:aa:2d:87:ea:
09:13:9c:b8:67:7d:b9:40:1b:b9:c7:64:25:d9:94:
f9:a7:8f:c5:1e:84:22:d6:06:47:dd:ec:82:b7:ba:
0f:e4:8e:be:92:38:94:7c:f8:9a:f7:30:34:b1:ee:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E2:AF:0A:4E:B0:7A:8F:E3:44:12:2F:0D:58:FC:62:39:34:29:33
X509v3 Authority Key Identifier:
keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/DuKvCk6weo_jRBIvDVj8Yjk0KTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.248.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:c0:a3:3f:48:d8:61:57:df:df:5c:90:a6:b0:91:fb:78:7f:
79:dc:ce:92:a2:e4:a3:3f:ab:98:fb:c0:78:c7:b6:81:0d:f6:
dd:e0:7f:ac:38:c5:48:e0:87:41:c6:a5:91:1d:53:dd:5f:67:
0f:f3:07:f7:da:a2:b7:26:e0:5d:37:06:fa:ac:59:33:8a:39:
d2:c6:13:11:a6:f8:c4:cf:65:62:7f:22:99:84:95:e1:28:e6:
f9:d1:99:c4:12:84:a4:9a:38:e4:c4:cb:7c:e3:8b:eb:67:90:
74:82:ca:0c:26:29:bf:60:78:8b:bb:d4:d8:d7:11:47:4b:4a:
b5:e6:a6:a1:57:b0:ce:a4:a0:42:68:4f:ec:ad:de:a5:7a:aa:
5a:b3:1d:48:d8:e6:8d:e7:12:be:3c:7b:d2:ce:6d:86:84:06:
7e:59:8d:58:40:29:02:69:d0:2b:e2:88:e9:3f:4f:71:1c:3d:
d4:c3:04:e2:08:85:39:b5:64:9e:85:c1:6e:8f:5c:19:55:30:
ca:95:f5:a5:63:b6:0e:2c:b7:c2:a9:a0:37:05:6c:7d:13:67:
ef:cf:2c:84:96:46:90:0f:4d:6b:04:67:e8:99:4a:17:ad:8a:
53:89:f5:d3:13:d9:cc:28:b6:bd:7d:0d:a0:bd:43:95:01:f5:
45:3f:cb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net