Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/1VO0RuZDCw_d3nrvSLXPJBFpELM.roa
File: 1VO0RuZDCw_d3nrvSLXPJBFpELM.roa (raw, json)
Hash identifier: RVMlSLh90fckV0ULVrxGXrllRUKBMW1qpE2aUDAMp18=
Subject key identifier: D5:53:B4:46:E6:43:0B:0F:DD:DE:7A:EF:48:B5:CF:24:11:69:10:B3
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 019425216BCB656D760DDA0D6FB84616DFD1
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/1VO0RuZDCw_d3nrvSLXPJBFpELM.roa
Signing time: Thu 02 Jan 2025 03:48:54 +0000
ROA not before: Thu 02 Jan 2025 03:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134408
IP address blocks: 178.237.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6b:cb:65:6d:76:0d:da:0d:6f:b8:46:16:df:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d553b446e6430b0fddde7aef48b5cf24116910b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:56:1b:17:bc:76:dd:3b:cf:c0:c9:02:01:
7f:ba:ff:76:55:dd:03:07:80:96:f0:4d:09:78:9e:
1d:2e:d6:2b:34:c9:ad:0a:35:12:3c:cb:b7:d2:ba:
9d:14:f0:84:14:d4:f5:04:e7:d8:90:40:2f:5f:03:
a6:e3:fc:fa:4e:46:4b:a0:05:f8:e6:3d:a3:87:ee:
c6:a9:e3:01:08:30:b9:9a:a2:9a:40:c6:8f:d6:fa:
06:d8:34:73:1b:20:1c:59:a7:d3:7c:7d:ea:df:a0:
d8:36:b1:c3:c6:a9:ba:15:1b:de:52:4e:f2:d6:39:
b7:26:ac:4f:13:61:7e:5b:99:ce:dc:4e:68:8f:75:
20:3f:df:2c:a8:f9:c4:f3:2c:eb:67:34:e0:b7:22:
0d:09:4c:ec:ba:fa:9e:c5:60:d2:1e:62:e0:e8:63:
d2:e8:ec:96:ca:93:85:24:29:65:e9:de:f7:c6:a8:
19:9e:62:a5:0f:09:a0:9c:63:1d:af:4a:60:3b:56:
30:1b:ae:a0:f2:71:4d:d4:f4:f9:0b:f7:af:b1:5f:
c9:7c:7a:ff:aa:99:1d:70:93:64:03:99:81:c6:d1:
fc:cb:e7:76:61:1f:17:cc:54:66:73:46:ee:89:5b:
b8:7f:ed:46:dc:fd:15:c0:71:4a:c0:ce:69:03:f2:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:53:B4:46:E6:43:0B:0F:DD:DE:7A:EF:48:B5:CF:24:11:69:10:B3
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/1VO0RuZDCw_d3nrvSLXPJBFpELM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.171.0/24
Signature Algorithm: sha256WithRSAEncryption
09:0e:e9:e4:af:89:f4:6e:14:1f:f1:1e:c8:80:f9:32:e6:f5:
c3:4c:5a:8f:cc:4a:2e:34:bb:1a:3e:37:7f:11:8f:71:9b:9c:
fb:de:ea:6f:35:d0:2b:25:50:a4:3f:74:09:d7:1d:a5:f7:89:
c3:43:e8:73:58:34:c8:f2:6d:69:d7:60:61:67:4c:47:ed:bc:
72:36:a6:16:38:3c:e8:38:59:da:d6:a3:b0:52:7e:a6:da:63:
87:50:3c:2b:31:38:91:8f:ef:b8:03:b2:72:85:f0:df:fb:9c:
9f:1d:77:f0:c4:73:ac:eb:6a:84:b1:de:24:57:09:13:b4:2f:
69:91:78:97:2f:6a:4d:83:91:ba:4c:ad:1d:50:f3:7d:57:42:
5c:a9:df:9e:2f:e8:a3:4e:d6:45:18:d2:6d:c3:54:e1:01:de:
3b:21:49:ec:6c:36:41:07:f1:03:78:46:e2:63:b2:96:0a:f0:
b5:8c:24:70:2d:73:30:94:b6:bd:7a:b0:ce:9a:3c:ad:dd:0c:
d5:2a:40:bd:75:91:e9:13:b5:8c:28:77:d7:87:36:38:38:08:
2f:16:4d:3f:dd:a9:a5:c5:90:92:81:0f:42:07:cc:62:23:9d:
73:fd:7a:7b:f0:ac:f4:46:b6:bc:e1:34:3c:b7:65:4f:4d:0f:
91:04:69:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIWvLZW12DdoNb7hGFt/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw
ZGVlMGYwHhcNMjUwMTAyMDM0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTUzYjQ0NmU2NDMwYjBmZGRkZTdhZWY0OGI1Y2YyNDExNjkxMGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4hWGxe8dt07z8DJAgF/uv92Vd0D
B4CW8E0JeJ4dLtYrNMmtCjUSPMu30rqdFPCEFNT1BOfYkEAvXwOm4/z6TkZLoAX4
5j2jh+7GqeMBCDC5mqKaQMaP1voG2DRzGyAcWafTfH3q36DYNrHDxqm6FRveUk7y
1jm3JqxPE2F+W5nO3E5oj3UgP98sqPnE8yzrZzTgtyINCUzsuvqexWDSHmLg6GPS
6OyWypOFJCll6d73xqgZnmKlDwmgnGMdr0pgO1YwG66g8nFN1PT5C/evsV/JfHr/
qpkdcJNkA5mBxtH8y+d2YR8XzFRmc0buiVu4f+1G3P0VwHFKwM5pA/KTaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNVTtEbmQwsP3d5670i1zyQRaRCzMB8GA1UdIwQY
MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt
NmFlYTkwNTdjODAwLzEvMVZPMFJ1WkRDd19kM25ydlNMWFBKQkZwRUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw
LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu2rMA0G
CSqGSIb3DQEBCwUAA4IBAQAJDunkr4n0bhQf8R7IgPky5vXDTFqPzEouNLsaPjd/
EY9xm5z73upvNdArJVCkP3QJ1x2l94nDQ+hzWDTI8m1p12BhZ0xH7bxyNqYWODzo
OFna1qOwUn6m2mOHUDwrMTiRj++4A7JyhfDf+5yfHXfwxHOs62qEsd4kVwkTtC9p
kXiXL2pNg5G6TK0dUPN9V0Jcqd+eL+ijTtZFGNJtw1ThAd47IUnsbDZBB/EDeEbi
Y7KWCvC1jCRwLXMwlLa9erDOmjyt3QzVKkC9dZHpE7WMKHfXhzY4OAgvFk0/3aml
xZCSgQ9CB8xiI51z/Xp78Kz0Rra84TQ8t2VPTQ+RBGnz
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:36:00 2025 by rpki-client