Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/z4IVFfra9dO93PZl7xdhmVhqzoE.roa
File: z4IVFfra9dO93PZl7xdhmVhqzoE.roa (raw, json)
Hash identifier: 90ivV2dV0BSclFTId5ah7Fo9mKfLvO9taEvtncU7b/w=
Subject key identifier: CF:82:15:15:FA:DA:F5:D3:BD:DC:F6:65:EF:17:61:99:58:6A:CE:81
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 019422201081B655A854AC104E79E9AB7CB7
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/z4IVFfra9dO93PZl7xdhmVhqzoE.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49986
IP address blocks: 78.31.236.0/22 maxlen: 22
78.31.236.0/23 maxlen: 23
78.31.238.0/23 maxlen: 23
2a05:c000::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:10:81:b6:55:a8:54:ac:10:4e:79:e9:ab:7c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf821515fadaf5d3bddcf665ef176199586ace81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:41:30:23:fb:69:7a:a5:d5:8b:5e:c9:7f:
08:68:db:3a:d1:76:4b:1a:e6:c5:da:a3:f1:6b:e4:
e5:9b:79:38:8a:82:48:14:e1:aa:1f:c8:fa:c2:8d:
d8:c3:72:e7:d4:0b:80:eb:d5:e1:3f:45:1c:c7:71:
c8:23:cf:9f:96:8c:ad:d7:eb:43:0b:84:97:e9:c8:
e2:0b:29:52:c9:c0:27:68:53:3a:bc:1c:68:55:55:
04:53:74:05:46:90:55:2a:b4:82:ab:3f:6f:a0:1c:
61:7b:38:7d:75:c4:f1:c5:f7:f8:e7:3b:d6:97:69:
b0:2d:86:25:da:94:6b:37:c0:1b:39:51:fc:34:c4:
62:57:c0:5a:02:85:b9:08:37:9c:b2:e3:86:ff:52:
b8:7d:fc:dd:7c:35:d0:fc:c7:9e:15:2c:88:03:25:
60:86:a7:36:25:f4:c1:d9:1b:71:eb:6b:f0:60:36:
de:66:f2:7d:89:c4:23:50:c9:98:43:bb:7b:55:0e:
32:37:df:fd:fe:2d:20:8a:17:6e:ef:f3:e9:b9:42:
43:76:52:8e:66:cb:d3:f4:2a:90:d0:88:37:9c:d9:
10:ed:4d:46:f3:06:8e:ef:77:3e:c4:94:e1:27:83:
2c:31:17:e1:c0:0e:b6:e0:cb:99:3f:47:2d:45:5b:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:82:15:15:FA:DA:F5:D3:BD:DC:F6:65:EF:17:61:99:58:6A:CE:81
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/z4IVFfra9dO93PZl7xdhmVhqzoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.236.0/22
IPv6:
2a05:c000::/32
Signature Algorithm: sha256WithRSAEncryption
6e:98:d8:d3:9f:53:0e:72:a6:66:26:7a:ee:eb:71:46:c2:59:
cc:cb:91:bf:41:f0:59:4b:ac:0c:6a:88:d0:d1:2b:10:65:16:
54:7b:53:22:c4:ec:20:2c:be:45:7a:84:3f:7e:9f:b5:07:b3:
a9:13:21:25:0a:2c:96:eb:d6:4b:8c:7c:30:48:5f:9d:17:7d:
f4:23:51:11:c1:51:50:6e:3d:dc:5c:eb:57:68:cc:18:0e:55:
66:2f:a5:7d:dc:d5:b6:56:b5:fb:37:b9:be:f1:7b:06:a7:30:
47:91:a2:85:82:6c:a2:ee:f6:f1:55:a2:85:4b:d5:57:0d:7f:
f3:a1:92:a1:52:6e:e2:4a:44:da:4c:60:c8:da:8d:b7:b4:7e:
22:ab:0c:c1:02:39:98:3a:a3:8c:ac:6e:cc:ab:35:59:d6:19:
0b:32:49:a1:24:ca:8a:ba:19:08:d0:51:ea:19:db:d9:ca:ce:
7f:53:ef:1c:e5:2c:72:7c:8a:36:13:34:f7:b6:7c:3e:fc:54:
09:50:c3:f5:c3:e6:ee:44:89:ca:78:ad:13:22:97:4e:db:6c:
75:de:1b:ff:8d:eb:ab:ce:3f:07:08:26:ba:1f:33:df:1a:43:
72:4a:ed:16:d1:45:79:d2:89:d3:3d:06:8f:44:79:81:27:6a:
b1:cb:bc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net