Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/_7kpaS2UowFnBiDzlZIsC6T4jPU.roa
File: _7kpaS2UowFnBiDzlZIsC6T4jPU.roa (raw, json)
Hash identifier: Uap1nQF5HIXbd/fuDO9f3i3zi5VRkj05CB6xiL5G0NM=
Subject key identifier: FF:B9:29:69:2D:94:A3:01:67:06:20:F3:95:92:2C:0B:A4:F8:8C:F5
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019426D9B1161BD56B8CC98A9C3DCF529AA4
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/_7kpaS2UowFnBiDzlZIsC6T4jPU.roa
Signing time: Thu 02 Jan 2025 11:49:48 +0000
ROA not before: Thu 02 Jan 2025 11:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29497
IP address blocks: 178.155.4.0/24 maxlen: 24
178.155.5.0/24 maxlen: 24
178.155.7.0/24 maxlen: 24
2a00:1fa1::/33 maxlen: 33
2a00:1fa1:e00::/40 maxlen: 40
2a00:1fa1:4e00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b1:16:1b:d5:6b:8c:c9:8a:9c:3d:cf:52:9a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 11:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffb929692d94a301670620f395922c0ba4f88cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:c1:e1:03:da:74:1f:a3:50:ee:81:68:b4:
bd:28:17:b6:38:81:9a:0b:e0:b8:43:09:01:50:7c:
65:d6:2e:85:bc:9d:0c:cc:ec:db:16:82:34:7b:5f:
ff:ed:3c:69:36:42:07:e5:af:76:02:9a:61:f9:4a:
77:fb:9b:47:12:2a:92:8d:49:f9:14:2f:59:45:4a:
d9:5e:30:6f:3e:8f:ea:0f:69:07:ae:0a:fd:a0:58:
59:96:91:62:2b:7a:b0:df:2e:00:73:38:83:93:1a:
de:c1:3f:41:82:e6:c0:02:9f:e8:67:ec:f0:e1:7b:
e5:4e:57:ed:11:07:40:9c:fb:de:36:32:90:2f:f3:
ff:45:6d:f8:44:e1:24:a3:32:fd:3f:dd:1c:71:a8:
34:14:37:f4:07:2e:b3:47:b8:2d:6b:09:56:51:95:
ff:52:7c:f2:f6:c3:3e:97:ac:07:08:3e:19:35:c0:
d5:4c:bd:25:ab:e0:8f:39:02:77:60:e2:f4:50:06:
ba:04:4e:8d:94:24:e4:ca:9a:42:10:05:48:83:21:
60:44:8c:3d:9c:8c:db:d7:f6:61:22:f2:03:ca:bf:
ad:e4:7e:36:eb:06:fe:fb:a9:30:39:95:79:6c:87:
26:5f:ad:bf:e1:01:eb:b7:66:21:2f:45:50:c9:31:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:29:69:2D:94:A3:01:67:06:20:F3:95:92:2C:0B:A4:F8:8C:F5
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/_7kpaS2UowFnBiDzlZIsC6T4jPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.155.4.0/23
178.155.7.0/24
IPv6:
2a00:1fa1::/33
Signature Algorithm: sha256WithRSAEncryption
0d:20:4d:af:be:be:43:4f:8e:79:5a:ad:1a:74:74:df:12:2c:
13:d4:c0:93:71:5a:9a:5b:14:ef:b9:d3:31:68:de:42:37:9a:
35:e0:44:3c:e5:2f:7d:d4:a2:14:46:1b:1b:53:9b:36:76:e6:
a1:8e:6f:08:35:c1:b3:b9:b4:d2:89:fd:1f:52:60:5e:61:c2:
71:56:bf:e7:47:92:6d:ac:ef:de:24:65:8b:5b:bf:56:fc:27:
03:8b:46:20:6f:f1:8a:94:8e:1f:16:83:b5:f0:43:41:7a:22:
7e:21:21:53:55:23:3d:e7:62:0a:3e:d9:c9:cb:8e:ed:2f:a4:
96:11:a1:db:e3:69:08:50:3c:d0:e1:ce:ac:75:09:23:4d:8b:
d4:35:7d:ae:17:b6:c9:97:8b:1b:18:5f:bd:4a:cd:b1:0d:e2:
82:1e:39:e0:4e:e4:72:1b:b0:8a:df:cb:8a:36:ea:d9:97:5f:
05:3d:d9:3d:f2:cb:62:dd:43:0f:bb:7f:a9:8e:3b:34:00:23:
e6:8a:25:ab:b2:a3:6e:b5:10:78:0b:57:e0:34:4b:e2:e4:78:
ea:4e:87:9e:b8:2d:86:be:47:e6:48:06:9e:f4:1e:90:84:ec:
e0:62:16:da:ec:4f:99:3e:95:cb:2a:f2:bf:51:bc:51:4e:fa:
38:13:0b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:44 2025 by rpki-client