Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/fFh6lhPeTU_ktyWJvgqVmWtOF3Q.roa
File: fFh6lhPeTU_ktyWJvgqVmWtOF3Q.roa (raw, json)
Hash identifier: AgVStdTBtz10UhWi+prRN62uYxyB6wfSYy9B3b+hAYM=
Subject key identifier: 7C:58:7A:96:13:DE:4D:4F:E4:B7:25:89:BE:0A:95:99:6B:4E:17:74
Certificate issuer: /CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Certificate serial: 0194266BDA5803A5A7C56D39C67FFF947FEA
Authority key identifier: DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/fFh6lhPeTU_ktyWJvgqVmWtOF3Q.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50329
IP address blocks: 178.170.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:da:58:03:a5:a7:c5:6d:39:c6:7f:ff:94:7f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c587a9613de4d4fe4b72589be0a95996b4e1774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a8:93:8e:40:f1:15:30:89:4a:3e:54:01:b6:
c9:5e:87:64:99:23:6e:0e:14:b8:9f:c9:a5:d0:83:
49:42:00:b8:40:06:3a:c2:1e:12:ae:3c:16:7c:ef:
eb:90:2b:cf:a8:ed:b1:88:0a:6a:cf:55:5a:02:0b:
65:f7:f5:df:d5:b2:71:50:cf:51:99:8e:f8:3b:f0:
47:21:1e:2b:2d:b3:d1:e2:be:29:81:d3:79:33:60:
e5:fd:b1:cc:ce:31:37:c0:7f:13:be:7b:e7:65:51:
e6:7b:af:e4:0f:40:57:4c:fb:42:e8:3d:5f:1d:3c:
b5:9b:f3:e8:9f:20:0d:8f:44:04:88:54:dc:3a:eb:
60:f1:02:37:8e:57:e2:bb:65:c3:ba:48:e5:57:39:
07:0a:ad:a3:00:ed:7e:a5:6e:09:42:fe:8a:c8:dc:
42:e7:10:20:ad:65:b0:c2:c6:a9:a6:27:ce:a9:44:
4f:2f:aa:75:86:82:13:d9:0d:96:f0:52:ed:f3:43:
33:8d:2a:72:3c:ab:9f:9f:b3:0e:83:4a:0b:49:d8:
75:e2:db:dc:4c:c3:a4:9a:2a:df:2c:8d:90:75:8f:
5f:80:8e:90:d7:f5:6a:cc:a7:ab:74:ab:b9:ff:6c:
b9:8b:f3:cd:82:a9:52:66:02:c0:f3:d5:97:96:d7:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:58:7A:96:13:DE:4D:4F:E4:B7:25:89:BE:0A:95:99:6B:4E:17:74
X509v3 Authority Key Identifier:
keyid:DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/fFh6lhPeTU_ktyWJvgqVmWtOF3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.131.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b2:7d:29:33:2a:2e:85:ba:ac:f2:c7:3d:7e:13:b2:1f:2b:
47:43:be:45:12:84:9f:a3:aa:0f:a0:e1:96:70:ce:75:98:f4:
75:14:76:fe:ec:71:d1:39:e5:50:14:71:fb:bc:f1:55:d0:59:
15:34:a7:af:ca:62:93:c7:38:c0:4a:d6:6a:fc:62:7c:36:2c:
96:80:96:5b:4a:73:72:5e:cd:4e:34:ee:f8:a1:4e:1e:86:d6:
e9:3c:c8:e3:11:94:64:81:35:26:eb:85:a9:cf:0e:5b:bf:f0:
61:2c:5a:54:51:cc:a6:f7:f3:15:3e:57:9b:7f:ef:5a:d8:66:
bd:fb:38:d0:fe:7d:da:15:dd:14:42:35:4e:ea:eb:66:6c:eb:
a3:c1:99:20:a4:2c:ca:f7:ed:c6:9b:31:0c:1c:74:90:9f:70:
5a:f4:00:ed:35:09:8e:c4:d5:28:59:ec:0f:b5:4d:87:dd:ee:
68:7e:c6:a8:48:6b:91:a8:fa:ba:44:9e:64:4a:65:df:87:8a:
b1:89:eb:be:4a:08:d0:55:c2:47:f6:b2:a2:07:d1:54:15:2d:
8d:dd:ba:f0:17:42:b8:dc:10:e7:1e:43:69:70:94:b1:3d:df:
37:ee:9a:60:cc:45:ba:1f:8e:ba:0b:c0:18:68:b5:5c:83:36:
4a:6b:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:10:57 2025 by rpki-client