Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/F478KPNWaWgwHEjAUDWV7KlTqQA.roa
File: F478KPNWaWgwHEjAUDWV7KlTqQA.roa (raw, json)
Hash identifier: fiVEyWrn82XeJgJcuTMWEO2YQxgfDNcoh754eidkrnE=
Subject key identifier: 17:8E:FC:28:F3:56:69:68:30:1C:48:C0:50:35:95:EC:A9:53:A9:00
Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial: 01941FFA5FB5EC530DEDC74FF2E7C6C01465
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/F478KPNWaWgwHEjAUDWV7KlTqQA.roa
Signing time: Wed 01 Jan 2025 03:48:09 +0000
ROA not before: Wed 01 Jan 2025 03:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42687
IP address blocks: 185.203.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5f:b5:ec:53:0d:ed:c7:4f:f2:e7:c6:c0:14:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=178efc28f3566968301c48c0503595eca953a900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:42:de:1c:28:d7:e6:66:48:f7:c1:1d:33:
62:e1:61:b5:c0:b2:4d:49:67:c4:9d:f3:60:48:7b:
77:6e:f1:78:cc:f2:cf:cd:4e:4b:1f:64:b1:f6:ce:
52:8f:31:ec:1b:33:d3:cd:86:4f:f5:19:0b:ed:87:
5e:7a:f9:7f:a3:7b:35:85:b8:07:54:bc:59:52:39:
71:3d:55:ea:11:97:53:8c:95:e6:d5:6c:96:88:5f:
10:2d:47:e0:12:84:22:8d:4c:c1:47:af:08:a9:77:
38:1b:4a:50:da:28:17:c8:d8:37:29:86:56:e8:71:
da:3c:0c:df:08:99:21:b9:e4:75:c3:bf:a3:9e:ae:
85:20:1d:66:9a:3d:96:39:4c:b7:e8:13:81:4a:1a:
a0:fc:b3:60:f0:6c:89:a1:7f:bd:9a:19:13:d3:dc:
f2:04:b7:d7:fb:35:71:6d:aa:a9:0b:9b:17:94:06:
bc:6e:f6:7e:e8:8f:cc:63:bc:a8:af:91:da:41:8b:
7c:d3:91:f2:3e:57:ad:83:72:40:42:b8:13:6c:48:
e1:e9:cd:9a:1e:6d:a3:74:56:fa:eb:b1:aa:51:32:
7c:a8:44:8b:36:db:33:b1:7e:8b:b5:84:00:10:df:
8a:9c:db:1d:2f:84:25:52:ef:a8:8f:fb:86:9f:7d:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8E:FC:28:F3:56:69:68:30:1C:48:C0:50:35:95:EC:A9:53:A9:00
X509v3 Authority Key Identifier:
keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/F478KPNWaWgwHEjAUDWV7KlTqQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.176.0/22
Signature Algorithm: sha256WithRSAEncryption
22:e8:a7:ac:a6:ae:b0:fc:b1:01:b1:dc:2f:d1:42:84:0b:91:
1c:24:17:b4:54:c0:12:00:87:8c:5e:cb:99:19:bf:ab:12:99:
d9:52:be:8a:a2:cd:0e:83:89:bb:d7:4b:86:e4:42:2b:b7:43:
14:3f:72:df:54:9e:b0:78:3d:8f:ef:d2:79:01:22:b5:f8:2a:
c9:2b:81:fa:f0:7d:85:a6:4e:e6:90:7e:45:be:f0:07:2f:79:
60:87:60:f3:ae:9d:25:f1:c3:9c:67:16:51:29:bb:6e:26:aa:
af:6f:9d:90:a9:56:10:88:f4:c7:c9:c1:cb:7f:d6:f3:e5:99:
63:cb:50:1c:0f:c5:9d:92:29:11:a9:16:59:3a:75:d0:f9:56:
0f:e1:e9:ad:a5:43:fb:b8:60:00:14:76:57:e9:9d:ba:51:a9:
ec:00:d7:36:b7:12:19:e9:0e:4b:cb:6d:ba:a0:f3:76:68:8a:
32:f3:a0:ff:43:6b:ca:4b:41:c5:a9:41:b6:28:37:90:6f:64:
88:d0:22:88:2f:8b:1f:ca:96:ab:01:19:ee:7c:bb:05:e0:8e:
2f:1d:ee:45:3f:ee:bb:ce:b3:b4:e4:f6:ef:6f:14:de:82:19:
d6:7c:e9:e1:04:56:d0:f9:4d:a7:12:8a:8a:5d:91:89:ad:24:
7e:cc:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:52 2025 by rpki-client