Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/bl1i3ytedni4woUQ1YOE-FDvrS4.roa
File: bl1i3ytedni4woUQ1YOE-FDvrS4.roa (raw, json)
Hash identifier: tEg8X6wjSf5f3ZqIFv8q7QL5EJsMbBEc+RZjhvnHFrY=
Subject key identifier: 6E:5D:62:DF:2B:5E:76:78:B8:C2:85:10:D5:83:84:F8:50:EF:AD:2E
Certificate issuer: /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Certificate serial: 0194236A3F98B306BC8C4B95023C5265DCDC
Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/bl1i3ytedni4woUQ1YOE-FDvrS4.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41227
IP address blocks: 78.111.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3f:98:b3:06:bc:8c:4b:95:02:3c:52:65:dc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e5d62df2b5e7678b8c28510d58384f850efad2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:7e:c8:5b:16:2f:10:43:7e:d7:be:a5:da:
e7:19:e5:e9:43:81:7e:bb:d7:f1:0c:b6:c0:ed:62:
ea:ed:8e:8a:0c:24:01:59:18:9f:f8:bd:68:87:23:
95:14:c9:46:fd:3b:cc:6d:bd:81:8b:ad:ac:5f:ca:
6c:a6:45:43:97:1a:fc:1d:91:87:19:d7:8e:93:4d:
ab:5d:b8:20:8b:62:f5:7b:2b:44:44:c4:c2:dd:e0:
9d:03:71:c8:94:93:62:18:c5:c5:7c:b9:79:2a:a6:
11:7b:90:01:da:1e:e2:87:2d:3a:24:f0:de:f0:03:
4e:48:db:3f:d5:ae:15:57:ee:2e:9a:aa:a7:9c:5a:
19:6e:87:86:54:c8:48:f4:6f:e3:93:a4:d2:a5:18:
e5:b3:38:86:79:3f:d0:7e:54:0d:22:43:75:97:1f:
20:78:82:3c:57:41:59:64:25:4d:48:1e:41:d2:48:
22:ae:d2:d5:35:c1:6e:67:17:73:44:89:5c:0e:f2:
80:49:7e:7b:a0:5f:73:49:25:b2:9f:f1:1a:27:80:
ed:85:05:5c:86:e5:d6:3b:dc:ce:0a:7e:cd:3e:b5:
74:82:3b:f9:1c:44:77:1b:e8:68:58:06:a3:f7:bb:
df:c6:06:bf:0d:23:92:3f:5e:d3:b0:50:b3:b8:3f:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5D:62:DF:2B:5E:76:78:B8:C2:85:10:D5:83:84:F8:50:EF:AD:2E
X509v3 Authority Key Identifier:
keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/bl1i3ytedni4woUQ1YOE-FDvrS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d9:8a:9c:42:a3:49:11:6c:e5:5e:a5:6b:59:4c:a8:97:a6:
6c:49:50:dc:7b:5e:34:d5:b9:86:16:1e:51:29:c1:3f:08:a4:
6a:ad:22:3a:63:62:8d:63:2b:40:e9:40:f0:9d:ef:1b:51:17:
2c:cb:c5:aa:e8:56:47:ed:b4:3a:1d:e3:c2:d4:ce:b1:cf:6d:
b3:16:b5:bc:67:38:8f:8f:bb:73:68:13:19:04:f7:4d:62:b5:
73:2d:4c:98:ba:16:59:52:5b:7f:b8:a1:ed:a5:d7:68:ef:66:
18:fa:5f:36:dc:d5:38:10:33:eb:84:00:d4:cc:3b:a3:ed:ab:
54:6b:7d:65:0a:f3:36:b7:c8:fe:d3:46:b4:77:07:10:90:fb:
c5:1c:7f:ce:4e:2a:11:ea:83:4c:d0:e4:55:a7:be:04:35:11:
c8:94:ad:91:2e:a2:3b:49:ec:30:0a:89:c8:dd:08:d8:e2:57:
ef:5c:10:6e:37:1c:39:46:e6:f5:95:7b:55:c9:72:47:8f:bd:
bd:a6:ab:36:eb:31:98:35:54:a7:c4:d1:e9:2c:3b:fb:94:f5:
b1:73:b2:92:e7:b4:c1:a2:a1:4a:13:b4:9e:47:67:4c:67:ea:
87:42:be:60:cf:f3:ae:79:68:3b:9d:e9:b9:60:8d:6e:48:57:
4a:02:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net