Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/s4RYSTa_DQM6mbeCiFkbqZRwQRI.roa
File: s4RYSTa_DQM6mbeCiFkbqZRwQRI.roa (raw, json)
Hash identifier: xAou0y37UyKX/N7mGgzgT1IdxgiUSpde6/R4Xqy5Al0=
Subject key identifier: B3:84:58:49:36:BF:0D:03:3A:99:B7:82:88:59:1B:A9:94:70:41:12
Certificate issuer: /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial: 01951976DC5B8D53E038A9DB99389C6843C7
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/s4RYSTa_DQM6mbeCiFkbqZRwQRI.roa
Signing time: Tue 18 Feb 2025 14:29:34 +0000
ROA not before: Tue 18 Feb 2025 14:29:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59729
IP address blocks: 78.136.253.0/24 maxlen: 24
78.136.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:76:dc:5b:8d:53:e0:38:a9:db:99:38:9c:68:43:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Validity
Not Before: Feb 18 14:29:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b384584936bf0d033a99b78288591ba994704112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:3b:c2:45:71:5f:43:64:a8:3f:0c:cc:46:
53:18:a3:73:b0:31:0b:e7:6e:7d:0d:36:bd:c1:0b:
1b:a0:b6:a2:04:dc:2c:9c:fb:e6:2b:e6:dc:b8:e9:
1d:1e:97:f0:b9:5b:d8:b7:fa:da:ff:a5:2f:d7:82:
d6:f5:53:28:f5:88:ad:c8:bc:d4:8a:9d:7b:be:c4:
b2:4a:c7:1b:e2:72:ba:af:eb:ba:dd:ff:cd:99:67:
8d:a9:15:4f:b3:70:c7:cf:67:14:c9:55:c1:04:10:
d4:24:f6:11:87:93:25:4a:3f:17:ea:3d:f9:93:9b:
74:bc:d1:22:42:1c:60:28:41:5a:df:d2:5f:d3:14:
7b:1f:ec:6a:f5:cf:86:54:e7:31:03:8d:b9:3e:7a:
85:14:a4:cd:75:c0:e6:b6:a1:62:4d:75:4c:7c:d8:
47:0c:7f:cc:d7:53:16:ad:3c:23:b7:9d:e3:99:2b:
a1:d7:6e:ba:1e:f9:0b:4d:63:1e:f5:4a:4e:ee:dd:
8f:e2:43:88:fc:ab:8a:65:11:44:ad:aa:22:5e:2a:
60:2f:85:82:49:24:8e:50:57:7a:2a:d6:6a:bb:13:
9e:ac:6c:fb:33:c4:6e:cc:f3:51:ef:af:55:fe:5d:
58:49:f1:95:7e:93:24:34:01:05:d5:2f:ef:c0:58:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:84:58:49:36:BF:0D:03:3A:99:B7:82:88:59:1B:A9:94:70:41:12
X509v3 Authority Key Identifier:
keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/s4RYSTa_DQM6mbeCiFkbqZRwQRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.136.253.0-78.136.254.255
Signature Algorithm: sha256WithRSAEncryption
63:f5:2d:7d:62:55:b7:33:7b:86:8e:ae:36:f2:26:30:03:70:
37:ca:48:98:0a:ee:5d:e5:09:db:7e:51:ca:b6:15:ad:11:ba:
c3:6b:b0:72:e5:c8:81:d2:9c:67:b4:bf:d7:8b:1d:c6:d4:e7:
8b:b3:5c:51:d5:b8:d9:90:28:f4:3b:e7:ce:32:e4:48:00:03:
7f:10:3b:ca:ae:06:e0:5d:c2:9d:42:a6:2c:9b:05:11:e5:8d:
71:aa:7a:38:2f:87:78:8a:e5:62:09:c0:71:29:c4:82:6c:fb:
28:73:0b:26:65:23:c5:4f:2e:06:04:21:27:33:3b:81:c0:e9:
da:b0:7e:a1:67:a4:16:9c:c2:d8:bd:25:29:ce:ad:5c:f5:1a:
6c:87:50:2e:7f:69:de:a8:18:b1:7a:33:d2:46:35:8d:f2:45:
85:a5:96:02:65:37:3f:c0:bd:49:cd:f2:cf:6d:58:0e:bf:f4:
9d:5b:36:46:55:36:e6:0b:6a:9c:94:5b:64:e5:50:af:6d:f5:
b4:53:c1:80:32:e9:1c:37:ac:1d:1f:c2:52:6a:df:1a:24:a7:
17:a2:db:b8:2d:0c:93:a2:40:3e:c6:e1:66:9d:a1:a2:12:5d:
d3:d7:f0:b8:86:ee:fa:af:4e:5a:3b:a3:2b:84:81:96:ae:53:
ee:f2:7a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:51:14 2025 by rpki-client on console.sobornost.net