Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/vVMu6Hcqt_WNniCkUUd49xRBXDg.roa
File: vVMu6Hcqt_WNniCkUUd49xRBXDg.roa (raw, json)
Hash identifier: PFqhmo3voRuIoBNZ1c/3YzTjWO4jWVlUC05kdiWQzXU=
Subject key identifier: BD:53:2E:E8:77:2A:B7:F5:8D:9E:20:A4:51:47:78:F7:14:41:5C:38
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 019425216C9D3E3DE402F5E9D7A509DFB5C0
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/vVMu6Hcqt_WNniCkUUd49xRBXDg.roa
Signing time: Thu 02 Jan 2025 03:48:54 +0000
ROA not before: Thu 02 Jan 2025 03:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134679
IP address blocks: 178.237.168.0/24 maxlen: 24
178.237.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6c:9d:3e:3d:e4:02:f5:e9:d7:a5:09:df:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd532ee8772ab7f58d9e20a4514778f714415c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:d9:90:f4:13:c0:38:2b:25:b4:13:7b:ea:
97:48:6c:9b:8a:dd:cd:18:6a:75:83:14:86:33:92:
de:86:6e:2c:0e:e0:01:cc:a3:6c:7b:f9:5a:13:82:
21:e3:72:42:4c:39:42:8d:75:14:b6:23:19:78:3c:
f7:55:22:c7:a4:0e:85:b2:9e:25:de:f8:1f:34:2b:
47:b2:ca:d2:36:0a:10:58:cc:ae:bb:19:a8:e8:f2:
6a:e8:1c:42:90:14:85:c7:9f:a5:7b:2d:bf:9f:0d:
ab:ec:0e:f3:f8:5e:a8:28:57:48:a5:60:ed:e5:46:
17:de:42:16:f4:90:be:bd:0e:a9:e1:df:24:2c:5e:
b8:0c:78:f9:fb:16:6b:51:8d:25:11:1a:d1:ee:5c:
9f:e5:17:a5:31:31:51:15:2a:69:b4:6e:94:05:98:
f3:b7:1b:3c:e6:b4:ed:3d:8f:39:c5:90:49:22:fe:
a6:b7:d3:db:7b:fb:42:a3:d7:37:55:05:6b:2b:5d:
5c:bb:28:57:76:19:ac:60:d2:51:c8:eb:17:89:e3:
93:0e:52:e2:70:44:21:b9:df:e0:5b:fc:85:be:d9:
5e:31:0c:0b:0d:07:47:ea:14:00:82:76:9a:4c:25:
e6:20:49:74:8a:51:41:9a:aa:26:79:5d:1f:56:7e:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:53:2E:E8:77:2A:B7:F5:8D:9E:20:A4:51:47:78:F7:14:41:5C:38
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/vVMu6Hcqt_WNniCkUUd49xRBXDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.168.0/23
Signature Algorithm: sha256WithRSAEncryption
12:ae:a5:55:db:e4:87:9c:cb:5d:5a:ab:cd:bd:4a:d2:2b:8c:
cb:43:26:b3:8e:54:81:48:77:25:94:b9:a6:b7:0f:4a:2d:e9:
5a:ec:6d:04:7b:f8:c6:33:0e:b4:98:3b:73:e2:b2:10:f6:89:
93:38:36:f4:9f:06:6f:1f:8b:a2:fb:ba:f0:6a:bd:06:0a:6f:
14:a5:55:a2:a7:b0:32:70:eb:78:ea:f2:99:f0:61:3b:c6:3f:
da:48:8b:a9:ce:b2:4a:c5:cc:7d:74:dc:c4:4d:b4:f8:14:be:
88:80:b4:80:b0:11:b6:49:02:e7:7e:7d:39:9a:1f:53:08:c6:
0c:5a:cc:f1:a2:d3:e0:64:dc:1b:22:c6:1a:6c:d7:b4:be:cc:
0c:0d:9f:88:11:89:07:68:ff:49:20:81:34:88:06:e7:17:cd:
e2:85:75:e9:98:f7:30:84:cf:c5:89:f0:5b:28:8d:24:1f:cd:
7c:04:fb:3f:15:f2:03:ef:4b:e0:cf:3f:01:68:fb:0b:96:53:
de:81:32:68:47:64:08:2e:22:4e:57:e9:42:b6:e7:5e:18:61:
8c:cc:05:b3:fb:af:df:39:02:f6:c0:e8:7b:9a:f8:4a:b5:67:
94:0c:66:5e:1e:04:77:d1:1b:05:67:f7:6a:35:dd:8e:e0:8c:
69:e0:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:03 2025 by rpki-client