Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/Xt1bkdr_41bSzEpYi46vq9k5Pzk.roa
File: Xt1bkdr_41bSzEpYi46vq9k5Pzk.roa (raw, json)
Hash identifier: zrah07M5AHpxInGTBwRwCoXtVHSq7IpVdG3YjkHSbbg=
Subject key identifier: 5E:DD:5B:91:DA:FF:E3:56:D2:CC:4A:58:8B:8E:AF:AB:D9:39:3F:39
Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9
Certificate serial: 019425FCC93D6F6645350B3A2C635F126BEA
Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/Xt1bkdr_41bSzEpYi46vq9k5Pzk.roa
Signing time: Thu 02 Jan 2025 07:48:31 +0000
ROA not before: Thu 02 Jan 2025 07:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43655
IP address blocks: 78.24.136.0/21 maxlen: 21
78.24.136.0/23 maxlen: 23
78.24.136.0/24 maxlen: 24
78.24.137.0/24 maxlen: 24
78.24.138.0/23 maxlen: 23
78.24.138.0/24 maxlen: 24
78.24.139.0/24 maxlen: 24
193.148.2.0/23 maxlen: 23
2a00:e70::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:c9:3d:6f:66:45:35:0b:3a:2c:63:5f:12:6b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9
Validity
Not Before: Jan 2 07:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5edd5b91daffe356d2cc4a588b8eafabd9393f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:cc:76:fe:05:eb:81:d3:b9:eb:1f:b1:9a:
f8:3c:50:ce:2c:ef:f3:07:53:c0:80:c4:af:40:4a:
85:8c:8a:4e:bc:39:92:6e:61:59:10:8b:8e:70:e9:
e5:77:80:c0:0a:4e:41:06:0f:d1:29:33:b0:40:95:
b1:38:fc:b9:87:b5:09:05:d6:6f:f7:ba:b1:98:17:
1e:c9:d4:80:37:b4:08:6f:a6:7a:3a:d6:3c:39:6e:
0e:54:1e:7c:ae:8a:0c:7c:b4:f1:c0:d1:79:72:3e:
76:dc:6e:09:c1:80:21:c7:8a:d1:af:73:1a:2d:2f:
52:4d:2f:84:56:61:54:30:72:a0:d2:52:9b:5a:11:
46:b1:64:f0:0a:0c:07:ec:36:96:83:67:9c:46:84:
dc:98:b9:2d:48:19:28:36:0c:8e:e5:2f:ca:a9:9e:
fe:af:97:74:15:c4:7b:e4:74:3d:78:24:a3:f7:f9:
bb:0e:02:27:78:8c:c6:c3:aa:12:3c:bb:99:e0:28:
bd:01:51:88:05:9b:05:7c:0d:16:3d:d9:cb:de:03:
e5:dc:69:1c:30:bb:5b:d4:8b:89:a4:10:18:a0:ee:
2a:20:c7:ee:3c:0e:c3:a0:36:95:76:11:e4:31:8f:
1a:98:ae:42:c5:2a:c7:e7:78:6b:72:9f:03:a5:de:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DD:5B:91:DA:FF:E3:56:D2:CC:4A:58:8B:8E:AF:AB:D9:39:3F:39
X509v3 Authority Key Identifier:
keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/Xt1bkdr_41bSzEpYi46vq9k5Pzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.136.0/21
193.148.2.0/23
IPv6:
2a00:e70::/32
Signature Algorithm: sha256WithRSAEncryption
77:c2:01:de:42:08:07:dd:ed:ae:a6:09:66:06:45:5c:e0:a5:
2f:37:9d:bc:d3:4f:cf:8a:f5:fd:ad:d8:f4:bc:3f:f7:fc:d0:
76:be:9f:6a:06:03:85:71:b4:f4:73:34:ce:f7:4d:e9:b3:b8:
d9:b1:91:21:4e:f5:ef:ab:29:cd:29:e3:01:3c:6b:4c:3f:a7:
10:60:1d:b0:95:2a:a1:64:ae:e2:be:59:67:cd:fb:16:58:55:
52:f3:c8:10:b5:64:17:9d:ce:0d:0e:b6:46:fd:99:ac:8e:c7:
dd:3d:d6:6d:6f:38:1d:1c:36:3b:a9:99:55:1e:72:60:7e:b8:
4a:12:e6:c7:6c:39:bc:cc:8a:69:90:43:40:96:ce:27:87:16:
57:b1:f5:82:45:9a:51:00:c8:a6:9b:17:b3:72:2c:b2:a9:b4:
1a:98:4a:3d:c9:72:74:14:f9:5d:c1:c2:7a:57:04:bf:e0:a3:
fe:0a:e9:34:7d:3b:e2:4e:8c:e7:80:37:9b:49:80:d4:db:20:
30:e5:04:1d:fb:49:2d:ac:e2:a3:fd:fd:45:06:c7:04:63:fa:
d8:34:6b:ac:bc:39:19:60:23:d2:7b:34:93:a5:1e:f2:69:a8:
60:cb:49:3d:7a:ba:54:a9:c9:c4:b3:92:03:7b:ec:de:db:7f:
73:4e:cb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net