Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/RU5E17gMGmmzUF7DyUsz6Dcdy4o.roa
File: RU5E17gMGmmzUF7DyUsz6Dcdy4o.roa (raw, json)
Hash identifier: SV4wrezER+B7zJmSnS+dtuO+VnGZO+qY0bpfuRJ6G9Q=
Subject key identifier: 45:4E:44:D7:B8:0C:1A:69:B3:50:5E:C3:C9:4B:33:E8:37:1D:CB:8A
Certificate issuer: /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial: 01912B8839B2974C1DBCA6FC0CDD7BEF2C44
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/RU5E17gMGmmzUF7DyUsz6Dcdy4o.roa
Signing time: Wed 07 Aug 2024 06:30:33 +0000
ROA not before: Wed 07 Aug 2024 06:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 78.136.250.0/23 maxlen: 24
78.136.252.0/23 maxlen: 24
78.136.254.0/24 maxlen: 24
78.136.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2b:88:39:b2:97:4c:1d:bc:a6:fc:0c:dd:7b:ef:2c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Validity
Not Before: Aug 7 06:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=454e44d7b80c1a69b3505ec3c94b33e8371dcb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:c1:47:14:f7:4b:ae:ae:17:d7:7d:54:3e:
0f:53:11:31:e4:e3:2c:b4:07:fd:e0:04:54:42:b9:
94:0e:84:e0:0d:f9:65:13:8f:ce:38:69:ca:1c:06:
83:6d:a1:ac:e2:84:d5:63:05:0d:d4:4d:4c:27:a7:
ac:75:f2:f5:58:87:25:6a:7b:9f:78:f7:d1:ae:75:
43:a1:67:64:c1:bc:d0:f0:36:a0:e3:3a:d7:e6:cd:
d1:90:76:f6:95:f3:b8:04:f2:07:6a:fa:34:75:99:
2a:be:b5:42:2e:24:b7:18:1f:47:72:8a:fc:ab:dd:
5e:de:89:52:0a:9f:64:30:4c:1f:e7:29:89:3f:0a:
30:25:bb:c9:c1:ec:9f:4d:6f:3c:03:9b:83:15:1d:
e6:ef:4b:35:63:38:6e:35:80:f8:30:17:b4:c7:ee:
de:5d:0c:e3:50:8c:05:8a:dd:46:c5:26:55:50:56:
ee:1a:4d:c4:23:8e:84:fc:7c:37:ba:88:a7:6b:aa:
8a:27:af:f6:49:59:08:8a:71:03:67:88:9e:31:36:
51:a6:5e:47:52:cd:ad:30:08:cf:35:e2:5a:0c:5b:
ce:32:c6:25:86:c6:3a:11:cc:46:bb:d1:eb:14:e5:
2f:07:20:0d:2e:f0:68:15:e0:ed:ba:ad:ac:ee:af:
d7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4E:44:D7:B8:0C:1A:69:B3:50:5E:C3:C9:4B:33:E8:37:1D:CB:8A
X509v3 Authority Key Identifier:
keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/RU5E17gMGmmzUF7DyUsz6Dcdy4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.250.0-78.136.255.255
Signature Algorithm: sha256WithRSAEncryption
72:cd:2c:5a:9b:c5:09:02:13:f6:05:d5:05:49:02:81:a0:bf:
bc:64:39:fe:7d:9c:ce:cc:dc:c3:5e:bb:27:29:3a:0d:af:7e:
12:fc:ac:bd:8d:c1:94:99:0d:a2:59:a9:24:d8:38:06:fb:b2:
f3:8f:7f:af:8f:76:dd:63:90:08:41:3f:9f:35:d5:47:c6:fc:
16:2a:28:d2:98:5f:4a:55:44:af:5b:2c:66:4b:db:71:21:20:
69:81:50:45:f6:60:2c:9f:c8:4a:17:2e:6c:aa:c0:8a:bf:5a:
14:a1:e0:e0:2e:53:9e:a1:8b:2e:b4:5a:82:7f:ad:a3:e7:65:
31:df:87:6e:f2:e6:db:b3:bc:4f:22:ee:aa:af:e9:bc:63:73:
fe:83:bf:f6:89:4e:43:25:6f:d2:b0:94:c2:1c:12:15:e4:26:
15:05:d4:f2:8f:6f:c2:f7:ea:24:8a:22:29:b9:9f:98:19:6d:
fb:a2:4f:1a:51:6f:7a:86:33:61:a0:7d:0d:32:c2:13:52:6a:
0a:c4:28:33:ef:5d:1f:3f:6c:6e:c1:2e:4a:55:db:b5:9b:1d:
0d:bf:f2:10:ef:ca:aa:1c:be:a4:14:fb:de:99:10:34:a4:44:
d5:c8:82:09:77:46:ba:e0:33:48:be:4b:b5:82:a1:97:d4:62:
f3:45:15:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:08:43 2024 by rpki-client on console.sobornost.net