Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/tvRSeXQrAZZAT29yjtZ_7KQawB4.roa
File: tvRSeXQrAZZAT29yjtZ_7KQawB4.roa (raw, json)
Hash identifier: hpP1eRenYzQA7QTMLizhwWDHvaoDIHsy9V8YHR+DYto=
Subject key identifier: B6:F4:52:79:74:2B:01:96:40:4F:6F:72:8E:D6:7F:EC:A4:1A:C0:1E
Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial: 01941F8C8B7907EE7FD571BB38D7B5F62E8E
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/tvRSeXQrAZZAT29yjtZ_7KQawB4.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211347
IP address blocks: 178.237.201.0/24 maxlen: 24
178.237.207.0/24 maxlen: 24
2a04:7e00::/48 maxlen: 48
2a04:7e00:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8b:79:07:ee:7f:d5:71:bb:38:d7:b5:f6:2e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6f45279742b0196404f6f728ed67feca41ac01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:e9:7e:e3:fe:f6:14:6d:4a:9e:84:9e:96:
ac:dd:d0:bd:03:85:13:27:1c:5e:15:0a:6d:c3:28:
6b:e2:b2:0b:21:40:56:6e:c9:24:d1:35:e5:16:f6:
d3:84:9c:2e:ba:6d:b3:50:07:f2:43:80:28:de:60:
24:75:2b:99:3b:53:74:81:dc:96:df:31:8e:6a:04:
28:8b:a2:32:a8:87:b1:fb:b6:53:1f:ea:88:95:7f:
36:8a:19:ae:b3:51:bb:8c:55:f1:0c:ca:b0:93:0f:
9f:8a:52:ed:ba:e2:f1:36:fe:e4:74:4b:8f:b8:e0:
31:9a:20:5e:77:42:f4:40:eb:a1:d8:cb:bb:4d:30:
01:17:26:1b:0f:bd:35:94:39:44:75:48:5f:a4:1f:
58:81:bd:19:98:ed:7f:c4:57:96:c0:20:af:83:87:
e9:51:32:db:dc:dc:3c:50:9d:ad:ec:0a:63:2c:00:
38:92:81:3d:24:46:26:bc:b0:48:51:0c:da:61:6f:
d3:99:34:ec:ec:2a:59:59:db:56:ac:c1:32:ed:61:
db:bb:9d:9a:68:52:5d:ef:cf:94:72:d7:45:1c:39:
50:78:39:7b:9a:8a:36:88:be:43:2e:d9:41:e8:88:
4f:42:fa:45:c2:c8:92:e5:7c:04:ec:eb:77:ed:b1:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F4:52:79:74:2B:01:96:40:4F:6F:72:8E:D6:7F:EC:A4:1A:C0:1E
X509v3 Authority Key Identifier:
keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/tvRSeXQrAZZAT29yjtZ_7KQawB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.201.0/24
178.237.207.0/24
IPv6:
2a04:7e00::/47
Signature Algorithm: sha256WithRSAEncryption
2a:6a:74:9b:9d:18:7e:90:86:c8:1c:d1:c9:20:74:fe:b6:be:
4f:07:1c:cb:83:cc:fd:c8:57:08:7e:3f:79:2d:67:86:61:10:
f7:ce:4e:5c:76:90:1e:41:bb:c1:06:d8:d5:99:3a:6a:81:7f:
4f:e0:55:ca:23:93:c7:13:12:46:6f:68:6f:86:b9:3a:df:13:
82:ce:a9:d4:15:ca:e9:c8:0a:ea:9a:67:51:7c:be:e8:4d:03:
56:5a:43:5c:d9:34:f4:47:a7:63:e7:b9:8c:74:65:dc:b6:62:
52:14:a2:2b:bd:2b:64:51:ba:37:ba:78:dc:c6:30:34:12:fb:
28:d9:d2:2e:62:60:6d:3f:3b:78:23:14:31:5b:b6:0d:5d:53:
75:f9:10:42:7a:8e:71:2a:2c:f8:65:e5:04:f4:01:8f:1c:b9:
ac:63:f7:b8:6a:6e:51:1a:3e:fe:eb:ba:a4:9e:7d:02:e1:a0:
98:f5:90:7a:be:50:39:1e:fa:64:a3:45:84:c4:4f:9c:41:b1:
9c:4b:1b:83:d3:db:41:c2:b5:63:9b:6b:df:14:02:5b:1d:18:
6d:ef:6f:16:4c:24:db:a6:a5:c1:01:49:f4:8e:92:57:e7:ed:
03:33:42:24:db:dd:b7:17:a5:3e:be:c5:d7:03:cf:4c:00:2e:
1c:60:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:40 2025 by rpki-client