Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/irXVQKZrZFERT0qlEvOEYo8eStU.roa
File: irXVQKZrZFERT0qlEvOEYo8eStU.roa (raw, json)
Hash identifier: SM6wGE9/EVXEBgUTm1zsTO58ye4c68Xl+iOGBhNr7JE=
Subject key identifier: 8A:B5:D5:40:A6:6B:64:51:11:4F:4A:A5:12:F3:84:62:8F:1E:4A:D5
Certificate issuer: /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Certificate serial: 01942067EF68B33951484379480B893D6E4E
Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/irXVQKZrZFERT0qlEvOEYo8eStU.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209531
IP address blocks: 147.78.168.0/22 maxlen: 22
147.78.168.0/23 maxlen: 23
147.78.170.0/23 maxlen: 23
2a09:27c0::/29 maxlen: 29
2a09:27c0::/30 maxlen: 30
2a09:27c4::/30 maxlen: 30
2a14:5980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ef:68:b3:39:51:48:43:79:48:0b:89:3d:6e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ab5d540a66b6451114f4aa512f384628f1e4ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:6f:9a:5a:d7:04:71:09:35:a4:ae:91:37:
cf:ac:a2:7f:c8:1f:b3:a5:6c:5e:14:67:fd:10:ac:
4c:fc:19:2d:0d:75:b1:23:31:1f:c5:52:ea:89:ad:
10:69:1b:fe:67:c2:71:2e:73:f8:47:df:b6:f6:e6:
0c:6e:5a:70:e0:20:97:89:5e:72:9b:94:85:9a:db:
f3:9a:fb:48:cc:0b:ea:90:fe:c8:37:81:1a:06:2c:
07:07:6e:09:93:f3:ef:be:21:65:e4:4f:1d:7c:ce:
5e:e9:59:dd:e1:5f:98:41:e4:66:f6:d0:2b:28:d7:
39:9b:c6:04:ec:62:bc:d9:0e:a5:cf:08:d6:8b:a6:
24:c8:24:a0:34:fd:f7:da:56:10:89:5b:a7:60:55:
d2:61:1c:ef:45:65:cd:80:39:6e:68:8a:5a:6f:6d:
4c:b1:f2:75:e2:73:be:09:8a:99:a7:20:a1:5b:45:
ca:57:bb:98:14:f8:5a:56:bd:a9:75:a1:f8:56:9f:
28:19:4c:49:7a:2f:70:db:9e:4f:f8:9b:ef:96:aa:
53:93:59:3a:82:c6:77:77:3b:69:2f:74:85:af:2d:
bd:e7:27:b7:f8:d3:c0:84:da:c7:3e:1b:a1:c1:a7:
4f:43:0e:20:6c:f8:a7:a6:2e:e6:56:24:cf:90:2e:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B5:D5:40:A6:6B:64:51:11:4F:4A:A5:12:F3:84:62:8F:1E:4A:D5
X509v3 Authority Key Identifier:
keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/irXVQKZrZFERT0qlEvOEYo8eStU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.168.0/22
IPv6:
2a09:27c0::/29
2a14:5980::/29
Signature Algorithm: sha256WithRSAEncryption
8b:c4:d5:59:13:b8:da:79:cf:70:79:aa:b2:d8:a3:39:3d:66:
a6:73:99:18:2a:00:8c:f8:0b:64:ba:61:75:c8:b7:3d:53:c2:
83:f4:36:d4:9a:f6:5b:96:d3:39:b8:c1:e1:3b:da:10:87:ac:
44:ef:b3:31:19:c3:c8:25:f6:30:c4:73:fb:d5:68:85:0b:ea:
40:44:6f:58:ee:cd:33:16:00:44:f8:e9:0d:48:6c:95:a4:47:
6e:c0:12:1b:a6:a0:03:91:3d:27:71:05:12:35:54:12:e4:7b:
94:c1:f7:f2:ef:5e:26:80:d0:c0:af:c0:36:fc:10:51:94:25:
fd:84:c4:2d:2e:9b:6f:da:d3:32:cd:12:d6:2c:ee:da:44:af:
51:8f:8a:90:94:6a:a7:61:ae:5d:10:8b:f2:22:7c:eb:6b:ea:
ec:07:8a:9f:eb:a1:3a:e3:15:a8:3c:31:2d:74:6a:47:ae:89:
a4:e0:44:0b:b5:e8:b7:60:6a:71:ec:09:be:49:05:a9:4d:8e:
bf:63:b7:62:62:12:19:34:63:a0:0c:6a:3e:1b:df:2e:06:fc:
21:f3:9b:af:7f:d2:b7:55:22:04:23:15:24:20:f3:97:3d:3f:
c7:dc:e4:f1:f0:cb:e4:ce:7d:1f:cd:7f:e0:f0:c9:0f:10:c4:
e0:fd:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net