Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/dwV3h0eia08kUM-h7hjm2AX7Vds.roa
File: dwV3h0eia08kUM-h7hjm2AX7Vds.roa (raw, json)
Hash identifier: mfVldjy+DqtdFulzd6J9vaBLe3m4tlTIuz+mcanwE6M=
Subject key identifier: 77:05:77:87:47:A2:6B:4F:24:50:CF:A1:EE:18:E6:D8:05:FB:55:DB
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019465117BD8B55255ADB700BDB2B7FC03E0
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/dwV3h0eia08kUM-h7hjm2AX7Vds.roa
Signing time: Tue 14 Jan 2025 13:47:11 +0000
ROA not before: Tue 14 Jan 2025 13:47:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215081
IP address blocks: 178.173.240.0/24 maxlen: 24
188.253.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:11:7b:d8:b5:52:55:ad:b7:00:bd:b2:b7:fc:03:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 14 13:47:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7705778747a26b4f2450cfa1ee18e6d805fb55db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:ec:c2:61:14:73:f0:cc:b7:70:94:17:75:
40:6c:2b:fc:68:d4:24:e1:ff:e6:11:54:f5:56:7b:
5d:89:55:d5:f6:a2:8d:bf:0d:22:65:fc:d4:ad:c4:
02:05:fd:9b:a9:25:42:23:8c:3a:6c:f1:42:84:d2:
36:22:e9:a6:29:e2:ca:c3:f5:2a:f6:e6:11:f4:b4:
be:e3:2a:96:a4:1e:1b:87:5a:4b:1b:47:77:69:d1:
2a:72:91:49:e2:9b:fc:80:4f:2b:94:4e:26:d6:87:
e2:cc:cf:fb:a5:2c:3a:71:4f:fd:5c:45:df:1f:02:
b4:a6:40:b5:0b:05:0c:6f:a8:2c:e8:95:ff:c0:e2:
1c:75:a5:f8:1e:f2:a6:4d:87:03:09:c2:69:74:02:
fc:e1:98:eb:37:7d:87:71:17:c8:99:20:53:a1:74:
83:96:d0:fa:88:96:51:79:59:69:38:18:6a:4e:4c:
89:e8:d0:18:03:c2:2a:d7:15:3a:b1:f8:95:49:bd:
d4:fb:13:cb:f5:bb:9f:e8:74:f0:26:03:3d:94:1b:
e8:99:e3:4f:0a:e2:13:87:c0:ed:6c:33:9e:cc:3b:
66:45:a8:8e:54:07:39:eb:93:a3:d3:c3:6b:f8:7b:
ae:72:0f:62:dc:46:f0:ed:14:3e:7c:9c:6c:c5:3a:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:05:77:87:47:A2:6B:4F:24:50:CF:A1:EE:18:E6:D8:05:FB:55:DB
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/dwV3h0eia08kUM-h7hjm2AX7Vds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.240.0/24
188.253.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:41:e4:be:04:3e:27:42:b5:ff:c3:0b:a1:83:de:17:51:51:
fa:96:06:1a:14:45:76:9b:d4:d0:36:e1:68:48:d8:45:11:9b:
23:bd:ea:c5:e7:1f:00:3a:dc:ec:1d:77:e8:d9:7c:00:81:ba:
ae:73:be:fe:67:e7:3d:62:f3:b3:9c:e6:02:cb:a1:04:f9:cc:
32:b8:1a:3c:33:a2:55:6a:d5:6a:8c:c3:87:6d:a2:3e:eb:15:
dd:7b:8e:c5:88:b9:c5:a8:41:b6:1f:e4:72:68:ce:47:7b:03:
93:84:d6:93:e3:ea:77:00:2b:e1:3f:d5:6c:c1:68:6d:8e:c2:
83:55:9e:fa:3b:97:cf:0d:43:31:c4:1c:e3:2d:b8:de:62:39:
25:e4:9e:af:ff:a0:e1:fa:22:94:9e:ab:eb:1e:61:26:b6:bc:
a1:e6:08:06:17:d1:e6:a1:d0:99:d0:59:7c:fd:ac:a6:61:71:
d0:ed:f1:7c:ec:7f:cf:08:9e:f0:f1:96:6c:e6:1d:92:54:8a:
8b:d1:47:fa:04:f9:5e:5e:67:57:35:3d:62:5c:2a:d1:21:c4:
58:d7:a5:18:e3:c2:9e:f6:cd:1e:48:65:08:a6:6c:f4:b7:af:
04:6f:67:14:a0:52:95:75:bb:02:17:3e:1d:47:d9:be:a4:a1:
98:b3:3b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:08 2025 by rpki-client