Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/CahBkkjIRD5RSAyC_TG87QI2fzc.roa
File: CahBkkjIRD5RSAyC_TG87QI2fzc.roa (raw, json)
Hash identifier: xwWB2SdIUKCzemaOm29fIJHDchBB//Ii3x59COqFn54=
Subject key identifier: 09:A8:41:92:48:C8:44:3E:51:48:0C:82:FD:31:BC:ED:02:36:7F:37
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 0194228DEED9DACF7C1EF5C3E4F8E7F7E86A
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/CahBkkjIRD5RSAyC_TG87QI2fzc.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202896
IP address blocks: 78.26.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ee:d9:da:cf:7c:1e:f5:c3:e4:f8:e7:f7:e8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09a8419248c8443e51480c82fd31bced02367f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:d9:b4:62:4f:3c:8a:06:c5:15:d0:cd:98:
f0:6b:b8:82:38:95:00:8e:7f:72:98:dc:68:1c:f4:
b0:1e:0b:58:a5:e1:ba:00:76:d1:53:2c:20:1a:ba:
74:66:0e:06:cb:ec:3d:e3:c4:fc:5c:9e:7c:5e:49:
58:cb:c8:53:a6:e2:4a:ee:5b:c7:1e:a9:3d:54:3b:
d1:df:cf:e3:d7:74:c6:82:0c:3b:22:01:86:db:6c:
11:60:fc:38:50:f9:19:a3:9d:6e:7f:76:99:bc:77:
53:33:ed:b1:f1:74:88:70:30:60:ae:5c:06:62:4a:
5c:8a:ee:7a:38:54:71:26:12:cc:96:10:2c:1a:6f:
9e:e0:c7:e0:23:4f:c2:21:25:f5:f1:d8:12:3f:b3:
bf:d1:02:18:f6:73:ea:00:d4:8b:30:b6:4d:91:f9:
d8:3d:f5:cb:ee:29:c8:ff:0e:18:98:a5:42:03:26:
cd:fe:eb:64:71:1c:6c:80:d5:33:f5:74:48:d8:1c:
ba:c8:17:ea:b9:f1:c2:70:79:b6:43:02:40:b1:27:
7e:af:44:cf:79:91:a3:23:6d:90:aa:ee:5a:12:b3:
85:cb:c1:20:f8:2a:39:01:b1:0c:0f:16:52:aa:22:
58:03:f0:5d:86:47:71:c4:f2:25:6d:70:3e:e3:ca:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A8:41:92:48:C8:44:3E:51:48:0C:82:FD:31:BC:ED:02:36:7F:37
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/CahBkkjIRD5RSAyC_TG87QI2fzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.26.126.0/24
Signature Algorithm: sha256WithRSAEncryption
53:49:30:74:63:22:f1:47:47:32:dd:64:c4:ff:03:b5:ed:fe:
7a:98:43:30:7d:3c:8a:c0:56:24:44:d4:09:f7:2c:ff:cb:81:
54:d0:5d:94:dd:2c:d6:51:b1:ee:01:d3:33:9f:c9:e5:be:e4:
f5:a7:94:f4:c4:fc:55:5e:87:93:f4:52:03:b4:5c:d1:87:f1:
9d:8d:5c:bd:42:65:65:50:ff:30:9c:a4:37:35:46:54:4f:d7:
f7:c7:b6:40:40:ca:a8:84:7e:9c:54:ad:90:5b:67:6f:fa:2a:
4d:b7:ff:89:74:43:ea:f9:9c:b9:84:b7:96:88:23:45:f0:b9:
d4:41:f7:b4:b0:e7:3a:10:47:b9:91:7a:ee:68:e6:cf:40:9b:
3a:c2:ae:59:9f:1d:e1:5b:c2:1f:d7:f9:fa:6a:6d:02:5e:af:
78:2f:36:5a:d4:9b:29:80:47:c3:a4:8c:89:d1:b7:e4:8c:02:
02:65:2d:4c:60:bc:19:f7:19:a1:56:c2:3d:9b:b3:17:c3:a6:
5e:24:65:50:1f:9d:f6:e3:b5:ee:86:db:96:2a:50:8a:1c:52:
3a:55:b5:1d:d3:fb:a3:38:63:67:c4:92:6d:61:18:66:8c:9a:
9b:e5:1c:7c:71:8e:fe:a1:93:f0:14:5a:13:8f:4b:65:26:0b:
a9:71:8b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net