Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Da57LzG0CuRgTgO4Ij_hmoZmB60.roa
File: Da57LzG0CuRgTgO4Ij_hmoZmB60.roa (raw, json)
Hash identifier: IOue7ObKFv+19hDaM1sdOrwSozA/fcEKOMqJ4COsknI=
Subject key identifier: 0D:AE:7B:2F:31:B4:0A:E4:60:4E:03:B8:22:3F:E1:9A:86:66:07:AD
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0194B9AC09F624CF94E013C35489361560CC
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Da57LzG0CuRgTgO4Ij_hmoZmB60.roa
Signing time: Fri 31 Jan 2025 00:04:07 +0000
ROA not before: Fri 31 Jan 2025 00:04:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 178.253.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:ac:09:f6:24:cf:94:e0:13:c3:54:89:36:15:60:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jan 31 00:04:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dae7b2f31b40ae4604e03b8223fe19a866607ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:8e:f9:88:3c:3d:75:ef:b1:c0:b2:57:9f:
69:39:4e:81:ef:80:5f:28:16:00:e9:dc:55:89:54:
b9:e7:44:d9:2a:b2:72:f4:2a:fb:f7:94:18:61:59:
6d:a0:ce:ce:9c:59:9e:ea:51:3a:5e:a7:bd:d9:de:
58:17:53:e1:ae:ef:21:13:41:74:2f:36:57:20:75:
05:cf:52:6d:1a:97:61:d0:6e:f3:5e:eb:9f:a2:68:
de:c8:6e:01:51:33:5a:eb:50:99:6b:2c:ed:20:68:
59:ea:c0:40:f7:1a:1f:59:e8:e4:4a:24:61:62:31:
c1:fa:c7:5c:00:92:09:46:02:c7:e1:ae:eb:dc:be:
f5:e8:95:b2:c3:12:dd:3b:bf:7d:84:37:0c:d9:b9:
c3:71:1d:6d:51:0c:32:6d:32:39:a6:26:15:93:d9:
54:c5:4c:46:0b:2d:38:83:cb:3d:7e:eb:5e:65:bf:
bd:c7:8b:ee:4b:80:e6:96:20:96:7c:a4:c9:78:fd:
65:57:b7:19:32:48:b6:04:4f:ec:d6:87:37:23:3d:
76:8b:99:8f:f0:4a:e3:db:e7:59:ec:fd:03:d9:01:
74:11:db:02:92:4d:74:25:98:77:4b:ca:2f:13:e5:
58:c6:1e:a7:27:eb:bc:ca:14:be:70:13:13:81:44:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AE:7B:2F:31:B4:0A:E4:60:4E:03:B8:22:3F:E1:9A:86:66:07:AD
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Da57LzG0CuRgTgO4Ij_hmoZmB60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
54:28:79:fc:95:09:d9:6e:2a:e7:74:10:f3:30:e4:4a:cc:2b:
69:8d:a6:0e:ac:ef:62:fe:79:3d:05:cc:e5:2d:db:d3:86:97:
49:32:3d:77:b4:04:79:4e:f6:aa:7e:3c:63:33:a5:f3:bf:8a:
8c:a2:d0:2a:2e:1f:36:17:10:b5:02:13:2e:6a:3d:9d:52:c6:
ff:43:2f:1e:c1:b3:c1:9d:97:fe:e0:d5:a0:c9:8b:d6:5e:46:
87:25:8a:11:9c:0f:37:cd:30:57:9f:c0:80:7d:78:67:23:80:
e6:bf:2a:e3:2e:01:55:3c:64:4c:90:6f:8c:93:3b:79:2e:97:
8a:2c:38:af:85:75:14:ce:41:6b:ca:c3:75:44:0a:e1:b2:84:
b5:34:4b:35:3e:ef:80:68:c4:1e:79:27:72:c2:fd:8a:df:76:
0a:ea:de:7b:85:07:5c:87:aa:42:d8:4b:af:25:a9:5c:88:1a:
97:52:f5:da:26:3e:59:6d:60:15:39:77:ae:c2:0f:69:fc:71:
db:a6:bc:0a:39:a3:47:01:92:a6:8d:b8:e5:4e:ff:59:d3:61:
e6:cf:73:b7:09:94:39:e7:28:02:25:45:b3:d1:f7:12:df:92:
62:ca:76:03:c3:f6:52:1b:db:95:34:6a:2d:92:df:c1:b2:a9:
d6:6f:db:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:42 2025 by rpki-client