Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/HmEXSyMzNsE6ZXWyBUFqSz_-J_I.roa
File: HmEXSyMzNsE6ZXWyBUFqSz_-J_I.roa (raw, json)
Hash identifier: QHoycNdEbZMja0gAvjEgeC3E4wx2OI9vc9S4Y873m1w=
Subject key identifier: 1E:61:17:4B:23:33:36:C1:3A:65:75:B2:05:41:6A:4B:3F:FE:27:F2
Certificate issuer: /CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Certificate serial: 019421B1B193A364B89F4080C11FDD33B7C2
Authority key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/HmEXSyMzNsE6ZXWyBUFqSz_-J_I.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51139
IP address blocks: 178.249.224.0/22 maxlen: 22
178.249.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b1:93:a3:64:b8:9f:40:80:c1:1f:dd:33:b7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e61174b233336c13a6575b205416a4b3ffe27f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:4c:c9:89:19:45:bd:05:12:9b:4b:1e:dd:
03:56:7b:c2:a2:19:26:f3:68:65:ae:37:01:3a:7b:
53:35:64:c8:6f:d7:c6:bd:26:f7:2e:e4:86:47:95:
0f:3f:f4:60:45:43:47:89:90:84:f3:9a:c9:75:c5:
9e:93:dc:6b:a7:13:2e:d1:01:5e:96:2a:0d:ab:1e:
e0:51:1e:49:f7:a8:e4:aa:fc:fe:04:e3:da:0a:02:
8a:09:02:7d:ae:fe:61:70:de:09:69:fd:47:10:a0:
99:c6:82:38:a2:a1:b2:45:47:d9:ca:ae:04:42:ad:
23:d6:50:0b:1f:89:e0:b1:9a:1a:5f:51:62:96:da:
d2:2d:c0:d0:76:b5:cd:89:03:7c:dc:e6:09:cb:e2:
2c:55:df:8d:4f:63:7a:28:9b:64:96:b7:9b:29:a2:
56:fd:70:72:30:30:aa:1b:01:b6:ee:b0:7f:87:78:
8b:bf:87:68:27:d4:5e:77:8c:24:f9:1e:90:1c:5d:
f1:7e:c8:67:0c:04:cf:74:46:01:99:40:a0:ee:77:
41:68:bf:e2:20:67:4b:93:e1:d1:f1:9a:c2:45:ac:
97:fe:44:1a:9f:7e:9b:8f:5d:2c:eb:2d:f9:70:c3:
71:d6:48:21:4b:5d:59:85:a6:ca:ff:55:53:5d:a1:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:61:17:4B:23:33:36:C1:3A:65:75:B2:05:41:6A:4B:3F:FE:27:F2
X509v3 Authority Key Identifier:
keyid:B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/HmEXSyMzNsE6ZXWyBUFqSz_-J_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.224.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:b8:e6:37:11:fe:1a:e9:1c:85:61:a1:41:65:f1:34:5d:95:
e5:2a:f8:9d:03:7b:2d:7a:ea:68:5f:5b:be:88:a2:11:8e:22:
93:97:f2:90:0a:93:d5:6a:6f:52:ef:89:0b:c9:8f:e1:7a:1d:
40:c1:b7:e9:4c:e5:42:29:fd:27:55:2f:b0:ca:51:ca:b0:62:
a5:a9:b6:fe:72:de:17:2c:87:9f:e2:ec:4e:d0:4a:ef:ec:e8:
10:46:c7:e6:cf:d3:e9:e2:42:53:14:62:54:43:c6:15:d0:d7:
34:3c:68:62:a5:5a:1d:37:b1:8d:22:97:6f:46:ad:d4:74:22:
f1:04:f5:fc:73:09:e6:42:6e:9d:0c:d7:5d:f2:24:78:82:6c:
11:63:aa:62:c7:d0:87:74:62:0e:bf:3f:3e:9b:86:95:a1:af:
a3:de:51:04:94:a4:1b:1f:af:de:a2:a5:66:44:7d:46:12:5f:
28:0c:39:aa:90:36:5d:52:df:2b:28:d0:75:8e:67:d3:5d:7e:
6d:8c:5b:bc:cc:27:c4:4c:00:2b:a6:d5:9b:0f:50:96:07:d1:
e9:db:68:75:5b:1a:97:65:e7:ae:2a:ea:61:b7:7c:ef:3d:8d:
fe:fd:7e:71:d5:52:31:a8:2a:93:bf:bb:b1:a4:06:dc:d8:a3:
a3:1c:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:05 2025 by rpki-client