Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/rKGVKqiZpnbfrBEvUIL3z2bcD3w.roa
File: rKGVKqiZpnbfrBEvUIL3z2bcD3w.roa (raw, json)
Hash identifier: GqgeMXx+9CHaMaMRbd16hQlhBApo1up4EaH0YwEA5E8=
Subject key identifier: AC:A1:95:2A:A8:99:A6:76:DF:AC:11:2F:50:82:F7:CF:66:DC:0F:7C
Certificate issuer: /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial: 0194236A0AE636B89E9D2900D3CF07CCF19D
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/rKGVKqiZpnbfrBEvUIL3z2bcD3w.roa
Signing time: Wed 01 Jan 2025 19:48:59 +0000
ROA not before: Wed 01 Jan 2025 19:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41098
IP address blocks: 178.212.8.0/21 maxlen: 21
195.114.2.0/23 maxlen: 23
195.114.2.0/24 maxlen: 24
195.114.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0a:e6:36:b8:9e:9d:29:00:d3:cf:07:cc:f1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aca1952aa899a676dfac112f5082f7cf66dc0f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:07:16:60:b3:5f:fa:85:38:55:18:12:78:
a1:c3:ed:05:7c:2b:99:38:41:be:75:5a:8f:06:c6:
21:11:09:19:eb:75:81:5b:1b:d4:9f:34:2e:6b:0a:
ba:af:d8:19:8a:63:67:8d:e2:23:22:9f:54:b3:89:
72:00:15:60:d1:8f:77:b3:2a:ab:5b:d5:de:d3:f4:
9d:0e:9e:ba:28:29:5d:bc:84:10:5a:ec:60:a5:92:
9b:84:7c:19:91:6c:5d:bd:fd:4a:d9:0e:31:e3:af:
cb:4e:90:cc:0d:8e:79:d4:e3:e4:ef:45:56:fd:fc:
28:32:76:41:ac:c8:6f:2a:a4:64:02:e3:d5:42:5f:
69:b3:e4:3d:9d:6f:67:36:45:9c:77:20:93:91:bf:
36:c0:82:c4:50:d3:b8:ca:8c:10:0c:46:a6:36:2f:
b5:4d:92:cd:c4:dd:61:07:5a:c6:1e:c5:69:36:e4:
2b:f2:31:99:7f:f3:c5:73:9a:b4:d1:5e:f7:39:58:
ee:b1:4e:35:cc:b6:a3:f5:bc:7d:4a:7d:4b:d2:bd:
3f:a2:50:94:37:ba:21:6b:78:ea:8f:29:c0:9e:ab:
b0:a2:ae:5b:5f:90:6f:8a:45:17:e8:43:a1:a1:d4:
98:61:0a:39:1c:18:32:4a:0c:ad:88:33:e5:19:36:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:95:2A:A8:99:A6:76:DF:AC:11:2F:50:82:F7:CF:66:DC:0F:7C
X509v3 Authority Key Identifier:
keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/rKGVKqiZpnbfrBEvUIL3z2bcD3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.8.0/21
195.114.2.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:5d:06:8a:89:d5:a3:43:42:33:61:e0:71:6d:64:78:f4:eb:
d4:66:8b:22:9a:4f:af:39:cb:d9:15:dc:47:16:b6:0e:6c:3a:
c8:74:b8:00:ca:11:ae:ab:d2:0a:11:42:84:a8:71:f2:7d:16:
4b:37:f1:2d:df:61:c6:56:02:08:ad:f1:15:83:13:12:a3:6d:
73:98:a9:43:c9:57:f7:4c:ef:4c:88:11:6a:45:e4:33:f4:93:
23:26:89:0c:20:67:f2:ab:0d:f3:71:b3:58:7e:e1:2c:9c:5b:
d1:0a:a5:55:4d:4a:21:d5:b5:27:68:50:68:a3:48:91:29:8b:
17:21:9a:a8:8b:da:e6:67:43:b1:87:80:9f:7c:8b:fd:d8:51:
f0:df:72:92:fd:f6:18:0f:34:79:b1:dc:af:ad:5f:d9:f5:2c:
7e:f2:69:5e:2f:d5:82:2f:78:b0:ec:3d:0a:d4:86:6f:9a:7f:
89:4e:76:05:38:f4:0d:04:39:1d:ac:a2:01:15:3f:0e:59:14:
61:47:d2:5d:94:16:f6:47:97:ec:7b:15:d7:7c:5e:86:b6:b6:
04:a6:7e:2b:8b:48:45:c3:32:d1:27:ea:f7:0d:cc:9a:f0:23:
ea:1f:d6:2a:25:4d:da:1f:1a:f2:da:c4:1f:5a:84:ba:99:f0:
28:d4:53:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:10:16 2025 by rpki-client