Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/j4vYQ759MLoLj0cN0zuQjHrzqiw.roa
File: j4vYQ759MLoLj0cN0zuQjHrzqiw.roa (raw, json)
Hash identifier: uApwJtUDHaWf6V3ibkhcekhPd8rOwJMJCw2CtVWuA6s=
Subject key identifier: 8F:8B:D8:43:BE:7D:30:BA:0B:8F:47:0D:D3:3B:90:8C:7A:F3:AA:2C
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 0194228DEDEEDEBB05E4ECCBFD53325CF1B2
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/j4vYQ759MLoLj0cN0zuQjHrzqiw.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39479
IP address blocks: 78.26.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ed:ee:de:bb:05:e4:ec:cb:fd:53:32:5c:f1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f8bd843be7d30ba0b8f470dd33b908c7af3aa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:7c:34:e6:86:7d:85:8e:a1:59:e8:45:ed:
eb:66:8b:f2:a8:5f:fc:ad:15:c4:04:f3:3c:d0:d4:
57:3e:19:04:e6:60:01:e1:66:0f:cb:56:04:9b:6e:
46:88:cc:2c:51:d0:90:d3:2d:bd:55:9f:a3:5c:63:
fa:4d:d2:9f:84:64:9f:d4:04:0d:be:17:c2:8e:14:
97:40:c7:16:c8:75:51:09:f6:b9:99:30:5b:52:b0:
d6:36:35:ee:a4:18:8d:cd:a2:a2:3d:22:f5:ea:7e:
4b:37:62:83:41:5e:d8:58:26:1d:7d:ca:76:3b:11:
2d:35:5e:b9:fe:cb:90:c8:b7:22:78:9b:ba:79:c1:
92:e9:a5:af:f1:ea:09:74:3d:09:8e:13:dc:96:71:
f0:8c:7f:c3:25:3d:81:c0:92:f9:e0:a7:4a:2f:78:
7f:8c:16:9c:18:76:a7:d0:bb:20:ef:d2:e5:01:86:
03:77:d7:27:f1:46:3c:90:c7:ff:c1:cd:25:45:8d:
94:78:e7:ea:7b:3c:d9:b1:31:63:4a:a5:0e:f6:ca:
57:56:8c:cd:1d:a0:4e:c9:89:9f:a0:55:56:59:04:
e8:32:c9:be:b6:86:89:66:a3:4b:f8:c4:77:f2:82:
d1:6c:ad:4b:40:39:d3:bc:27:23:f3:65:36:44:78:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8B:D8:43:BE:7D:30:BA:0B:8F:47:0D:D3:3B:90:8C:7A:F3:AA:2C
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/j4vYQ759MLoLj0cN0zuQjHrzqiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.26.127.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5c:52:fb:5c:30:62:7d:93:a8:3b:b0:8f:e4:8d:d5:da:81:
1c:39:ae:6d:b6:7e:79:8a:da:c0:01:3f:04:df:e2:78:09:5c:
b8:9f:c2:5a:c3:29:3d:94:1f:7c:c2:a2:50:fd:f3:34:31:48:
82:f9:56:7d:99:ba:23:2f:ba:72:d2:77:20:e3:57:6a:4e:c1:
4d:bd:3a:20:98:5a:f1:78:d3:f9:6a:b0:43:67:e1:e9:eb:95:
4a:56:bb:5f:5f:a2:2f:cc:ed:6e:c5:5b:ca:72:51:c6:73:54:
f4:f8:26:2c:ea:a2:3b:08:f4:6a:10:6e:49:d3:fa:47:1f:3e:
f8:26:d4:75:6e:39:1b:e9:07:69:b2:cd:c9:5b:55:e3:2d:e1:
ab:b2:d4:97:42:91:ab:d1:c7:c5:c0:95:96:cb:10:ef:b4:cc:
d6:27:17:a6:c3:14:18:7e:74:aa:8b:53:85:60:55:4a:10:1a:
f2:6b:45:45:95:16:40:c4:23:79:90:dd:fa:bf:e9:b7:4f:04:
19:80:1d:e7:69:f6:60:a6:2d:c0:d2:0c:4b:00:b6:0c:71:c6:
d0:73:59:c6:f4:9c:3a:7f:6c:df:fe:49:dc:48:0c:ee:79:47:
b4:81:c0:b2:66:a0:31:32:f8:b6:df:79:be:34:8d:a5:1e:dc:
49:13:e0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net