Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/PveX9WXxCJj9e18L9V5LXcSlf4I.roa
File: PveX9WXxCJj9e18L9V5LXcSlf4I.roa (raw, json)
Hash identifier: Gc7ehRUF/Atprjxx4oQFsUeoQdkyLlSY7XL+/gL4J0s=
Subject key identifier: 3E:F7:97:F5:65:F1:08:98:FD:7B:5F:0B:F5:5E:4B:5D:C4:A5:7F:82
Certificate issuer: /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Certificate serial: 01942521E65EE910ECC2BCFA74F175BC7AF7
Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/PveX9WXxCJj9e18L9V5LXcSlf4I.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12759
IP address blocks: 78.153.64.0/20 maxlen: 20
78.153.80.0/20 maxlen: 20
185.128.216.0/22 maxlen: 22
188.126.160.0/19 maxlen: 19
212.16.224.0/19 maxlen: 19
2a01:3d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e6:5e:e9:10:ec:c2:bc:fa:74:f1:75:bc:7a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ef797f565f10898fd7b5f0bf55e4b5dc4a57f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4c:fe:d0:d1:ae:0b:dd:91:16:8f:71:f9:4b:
aa:0b:7f:79:e2:f7:58:de:60:e6:72:d8:e7:d2:48:
64:dc:b5:5a:52:a2:25:cb:10:91:c0:a3:8a:71:17:
41:40:5a:15:94:cf:2b:6f:ef:53:05:35:08:2c:d1:
63:21:de:6d:59:a5:30:66:c4:17:80:95:fd:d6:14:
6c:10:20:a5:34:c4:0a:69:a7:94:cb:14:d3:3d:04:
f6:31:4c:03:e6:d4:36:8b:8b:90:34:ed:c3:e1:e6:
fd:43:34:fe:ba:02:20:5d:5e:c2:5b:77:1d:bb:6e:
a7:44:85:1a:a1:5f:d0:87:89:eb:d8:5a:ea:86:5c:
7c:da:2d:23:00:18:24:b2:be:a4:8f:86:b9:4f:61:
e2:3c:25:94:71:e5:24:45:0c:f2:47:20:f5:77:33:
c8:23:21:43:1e:6f:fd:5f:84:6b:98:f8:22:5e:2d:
04:8a:ec:c1:2b:d7:8e:13:08:66:11:e3:cf:d5:6f:
b1:09:77:4a:5c:bc:2b:92:84:a3:aa:74:e6:57:a6:
79:3b:71:94:3e:ea:26:84:95:49:b5:9d:de:62:d5:
ad:ae:59:0a:2a:e9:38:ee:9e:8c:e1:bc:05:db:c8:
f4:b6:5e:3e:31:2c:65:f4:26:6f:f9:a7:bd:94:ea:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F7:97:F5:65:F1:08:98:FD:7B:5F:0B:F5:5E:4B:5D:C4:A5:7F:82
X509v3 Authority Key Identifier:
keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/PveX9WXxCJj9e18L9V5LXcSlf4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.64.0/19
185.128.216.0/22
188.126.160.0/19
212.16.224.0/19
IPv6:
2a01:3d8::/32
Signature Algorithm: sha256WithRSAEncryption
33:d5:29:4d:3e:b7:05:44:32:15:e8:64:2b:4c:0c:b7:e7:e7:
9b:f6:ee:71:d9:9d:20:f2:27:d7:41:16:ec:2b:59:ef:81:e0:
f3:fb:d9:0f:3e:53:09:13:51:f7:c2:cd:4d:71:6f:d8:97:92:
38:1f:54:19:25:23:f6:5d:e0:43:50:0c:eb:b6:e5:08:02:4c:
ea:d6:65:99:60:c8:49:bd:88:1b:4b:c3:65:22:77:49:51:77:
49:fd:89:dd:f2:3d:fb:9f:b3:b7:81:fe:ac:f7:6d:c9:72:52:
e5:a3:fe:e9:ee:b7:98:d0:90:dd:65:63:88:46:ca:4a:35:03:
fc:ae:55:89:19:17:a5:1d:d6:f1:92:33:99:41:e5:05:fd:b8:
5c:a6:2e:97:ca:e3:1f:7e:a5:0d:1a:1d:e0:1f:1a:da:43:b2:
bd:b0:74:82:85:d4:b6:51:0f:16:f9:30:cd:a3:fc:33:a5:4b:
bc:ed:be:0b:75:a1:59:bd:96:57:90:bc:0d:e2:b4:16:0f:a2:
7b:6d:32:8b:13:3d:6b:4d:aa:fc:55:38:e8:22:3e:73:00:e2:
e4:82:26:39:f6:21:31:22:b2:c6:39:8a:62:c4:88:32:ad:18:
80:48:fa:aa:f7:ff:c2:92:67:d7:3b:12:52:10:81:e6:6e:d9:
f7:71:2c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:30 2025 by rpki-client on console.sobornost.net