Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/nKxswHwUBE_XIOIyQ1Qpw5XOFvo.roa
File: nKxswHwUBE_XIOIyQ1Qpw5XOFvo.roa (raw, json)
Hash identifier: xZYcCOMTf00TiuBXWvG+qaD8S6ouJ5YlmrR2oW0i9z0=
Subject key identifier: 9C:AC:6C:C0:7C:14:04:4F:D7:20:E2:32:43:54:29:C3:95:CE:16:FA
Certificate issuer: /CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06
Certificate serial: 0194266C1481E3706BB00E12FA90D6A4DB0E
Authority key identifier: B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/nKxswHwUBE_XIOIyQ1Qpw5XOFvo.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51390
IP address blocks: 178.214.0.0/21 maxlen: 21
178.214.8.0/21 maxlen: 21
178.214.16.0/21 maxlen: 21
178.214.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:14:81:e3:70:6b:b0:0e:12:fa:90:d6:a4:db:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48a289ebb2dd6806d60b8c5ad036c798f66ba06
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cac6cc07c14044fd720e232435429c395ce16fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:5f:a0:01:86:18:ce:97:a5:5b:4e:47:0a:
1d:47:90:00:f4:28:ef:5e:2d:c5:72:be:df:49:18:
dc:5c:03:61:18:68:53:f1:9d:46:68:33:e6:28:a5:
f0:cc:28:23:58:3c:ec:ad:07:09:f6:97:45:1e:3a:
f9:b7:69:e4:45:34:56:f1:72:bb:f3:67:39:c5:9f:
18:e0:10:64:93:e4:9f:6d:fc:92:4e:e0:f2:01:4d:
67:d0:8c:fb:03:87:a4:be:32:4e:8e:ad:da:ea:9a:
cc:08:20:83:6b:8b:ad:25:59:55:91:77:0f:e6:b0:
61:72:d1:bf:2c:7a:33:74:94:7c:83:43:2d:75:44:
17:f5:5f:e8:0d:d3:4c:16:24:93:60:ec:90:e2:0a:
56:3f:26:fd:7e:17:d2:91:48:3a:f7:5d:72:63:5b:
75:92:f3:16:1b:31:03:b0:62:b8:57:ec:a5:a5:f3:
49:9f:da:b1:ac:b6:19:25:7f:95:eb:f8:c5:a2:fc:
d0:dc:4e:23:13:c8:46:2c:75:f1:db:55:bc:86:d9:
ee:9d:4d:9e:1c:89:a4:10:d0:25:12:e7:e5:9f:b7:
6f:a8:69:61:21:d4:7b:ed:96:4c:8e:39:0a:54:68:
0f:bc:2a:b4:b0:63:63:2b:a6:30:f5:5a:dd:d0:c5:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AC:6C:C0:7C:14:04:4F:D7:20:E2:32:43:54:29:C3:95:CE:16:FA
X509v3 Authority Key Identifier:
keyid:B4:8A:28:9E:BB:2D:D6:80:6D:60:B8:C5:AD:03:6C:79:8F:66:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIoonrst1oBtYLjFrQNseY9mugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/nKxswHwUBE_XIOIyQ1Qpw5XOFvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5992eb-4b82-4fd3-9121-fee137c890bc/1/tIoonrst1oBtYLjFrQNseY9mugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.0.0/19
Signature Algorithm: sha256WithRSAEncryption
97:c8:64:ed:46:e7:f4:6d:37:1f:f3:6b:95:9b:f4:e8:b3:63:
7d:84:be:fb:2f:8f:24:a9:20:87:6e:14:b1:15:97:e7:a0:8e:
f3:5d:e8:5e:a0:59:8a:8f:18:09:4e:13:c7:66:a6:40:d0:0d:
03:97:fc:cc:25:a3:bb:42:91:cd:8f:b7:53:c0:73:84:e0:1f:
50:16:fd:21:89:a6:83:be:cc:24:76:cc:78:21:71:39:2e:0a:
16:9c:84:55:3a:fa:2b:fe:90:14:5a:44:a0:00:f1:67:88:1f:
7b:8d:17:1f:84:1e:52:7c:f0:39:3d:88:3f:1d:8b:30:d9:4c:
85:d0:57:83:53:e6:46:aa:1c:93:86:9f:43:f4:4c:9c:b0:82:
8c:38:45:50:7c:0b:6e:d1:50:f9:1a:03:11:15:18:95:0d:8a:
66:89:84:14:e9:dc:21:0a:61:e7:4f:03:9c:fc:93:4f:5d:ab:
a0:cd:9d:9a:b7:9b:42:20:46:48:d9:72:8b:84:e8:4e:c2:33:
5a:16:8c:e5:1b:12:03:bf:f7:ee:1d:67:02:35:4a:f4:40:b6:
e4:73:02:b0:ec:23:86:a1:07:f6:ee:c8:d8:27:6a:57:10:98:
ea:31:64:4b:d5:c5:e6:94:70:0d:1b:d0:4f:72:57:7a:cc:c6:
d0:b7:7a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:17 2025 by rpki-client