Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/rKizpanRwBJzijXvx7bJn1rhw_o.roa
File: rKizpanRwBJzijXvx7bJn1rhw_o.roa (raw, json)
Hash identifier: 5muARz3AtNkaEYoR9PPKe6ZNmmAul/betoVV1PW2+3g=
Subject key identifier: AC:A8:B3:A5:A9:D1:C0:12:73:8A:35:EF:C7:B6:C9:9F:5A:E1:C3:FA
Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial: 01941F8C8B4E4D760548C205991ADF82AB80
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/rKizpanRwBJzijXvx7bJn1rhw_o.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56666
IP address blocks: 178.237.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8b:4e:4d:76:05:48:c2:05:99:1a:df:82:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aca8b3a5a9d1c012738a35efc7b6c99f5ae1c3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:44:d3:a2:71:18:38:e7:d4:77:7a:da:e1:18:
f0:21:df:2a:29:19:83:e6:59:ce:43:fa:ce:63:56:
4e:05:7f:3b:a3:22:cf:a7:b8:64:0b:a7:3f:97:ea:
b2:3a:ab:c1:7f:ba:02:8e:38:52:57:a2:06:b5:ee:
4c:30:71:69:18:cd:a3:aa:a7:46:e0:0d:fe:90:67:
08:11:7e:f9:61:35:40:7b:d3:ba:02:03:b4:cd:7e:
c5:4e:d2:a5:c7:e7:11:82:ca:2d:6f:d3:33:ca:61:
d1:d6:3b:2c:d1:2c:e3:cc:db:a5:bc:96:ab:0c:96:
5f:4b:ce:c8:12:04:d1:00:6a:c8:07:33:25:87:95:
2c:31:d8:7b:cb:6b:97:01:5d:18:09:bb:2d:40:84:
e6:5d:8c:38:93:8b:64:81:3b:20:dc:e9:44:35:99:
2f:ac:cf:64:38:4d:3b:48:66:fd:b5:4b:52:ce:a1:
ab:63:04:45:8a:98:96:6d:52:4e:f3:cf:0c:92:48:
04:52:bd:76:8f:30:2d:f2:e2:58:03:4c:80:bb:26:
df:dd:eb:48:1c:cc:ee:24:25:0f:a7:24:42:93:0b:
93:e2:91:b1:1d:86:28:a5:2e:f1:fd:82:94:f5:b8:
d7:a1:8a:07:5c:3d:a4:5b:9e:93:0b:b9:ba:c6:ec:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A8:B3:A5:A9:D1:C0:12:73:8A:35:EF:C7:B6:C9:9F:5A:E1:C3:FA
X509v3 Authority Key Identifier:
keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/rKizpanRwBJzijXvx7bJn1rhw_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.206.0/24
Signature Algorithm: sha256WithRSAEncryption
49:01:0b:16:0b:00:ed:7b:10:7e:37:33:e7:aa:c4:43:82:a0:
91:a0:1f:4c:a2:a4:3a:4a:8d:a2:63:ba:87:f7:88:44:77:b6:
86:05:79:69:f7:ef:89:c2:b0:68:72:cb:cf:a4:c5:ec:eb:65:
0f:2d:3a:37:04:12:eb:03:aa:07:27:62:4b:98:d8:c5:44:b5:
29:63:cb:ee:53:a3:53:c4:da:f0:e3:c3:23:bd:2a:89:98:47:
a8:e9:8a:64:3e:32:ac:4f:ef:3f:98:e6:c2:53:34:34:27:af:
99:11:06:f7:0a:c5:3b:1c:0f:2a:4e:8e:58:02:6c:8a:a5:a0:
aa:49:e6:33:60:bc:a6:e3:c0:c2:c9:30:c0:60:16:e1:bb:5d:
16:3c:15:30:9c:a9:8e:2f:ad:88:69:60:aa:6a:58:95:1c:b8:
ff:d1:b5:71:86:b0:94:7b:a8:2a:c7:1d:30:91:87:5c:e0:1d:
6e:ed:79:ab:bf:b6:59:c0:28:17:89:d5:1c:79:3c:2d:7d:60:
3d:d5:12:f4:b3:3d:e8:98:bb:20:93:59:de:66:aa:de:92:1b:
93:00:ed:3e:26:f4:70:72:d2:a9:0f:9a:98:7e:78:1f:4e:8b:
7c:a7:9d:5c:8b:af:df:e9:7f:f3:8f:96:45:be:70:a4:cb:34:
68:48:35:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:34 2025 by rpki-client