Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/vWaOyyAnVx7B4tIZA5kY-cS2BzI.roa
File: vWaOyyAnVx7B4tIZA5kY-cS2BzI.roa (raw, json)
Hash identifier: eaazpxj2ANXN1fDw5hHKWOdZyal6Udm1AqCua9Ig+GU=
Subject key identifier: BD:66:8E:CB:20:27:57:1E:C1:E2:D2:19:03:99:18:F9:C4:B6:07:32
Certificate issuer: /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial: 01941F8C29DE9EA81B1E291B3293FE1DBE4D
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/vWaOyyAnVx7B4tIZA5kY-cS2BzI.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30766
IP address blocks: 178.132.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:29:de:9e:a8:1b:1e:29:1b:32:93:fe:1d:be:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd668ecb2027571ec1e2d219039918f9c4b60732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:bc:69:21:8e:01:3f:13:83:a8:bb:97:60:
f6:43:16:66:4d:72:39:fb:4d:52:12:38:2a:d1:5b:
9b:f7:78:d2:1e:4f:36:2d:7c:c0:4a:7e:a5:f0:6d:
26:52:a3:c8:37:d6:15:66:74:33:16:1d:30:bf:80:
db:0c:1d:e7:58:ad:bc:0c:c7:8d:57:e3:70:a9:0d:
53:b9:d0:a3:ea:0d:75:24:fd:52:42:d4:84:d9:00:
ca:70:46:51:33:d3:c5:15:f4:87:9e:b1:6a:70:a8:
67:0f:34:e5:9e:4d:6c:83:e0:d6:37:69:08:f1:62:
dc:48:d7:6a:0d:5e:52:a7:86:5d:06:73:3f:b9:3e:
4e:e0:62:0b:ae:d4:3e:4b:7c:3b:d3:bd:a6:e6:96:
0b:f5:03:af:07:03:ad:bb:5b:04:a5:94:83:f1:58:
6c:a2:6e:e3:5a:1e:99:b8:11:61:b2:94:93:a7:51:
81:41:0b:26:ab:ee:35:1a:bd:d6:39:5a:51:fd:47:
5d:bc:cb:d7:05:cf:6b:8d:cf:a7:c4:b8:d5:bf:30:
5e:58:e0:44:bc:98:33:dd:2f:18:fb:e4:5a:40:d5:
17:8c:7b:d9:95:b3:3d:6e:33:e2:dd:2d:ee:2a:2a:
bc:4a:2d:42:52:6e:91:c0:6e:a4:f1:85:cd:37:02:
b1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:66:8E:CB:20:27:57:1E:C1:E2:D2:19:03:99:18:F9:C4:B6:07:32
X509v3 Authority Key Identifier:
keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/vWaOyyAnVx7B4tIZA5kY-cS2BzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.68.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:bd:64:ed:a6:33:a6:91:ba:ef:fa:d3:0e:da:c9:52:6d:99:
5d:1a:e2:0e:16:0c:d6:38:0a:52:b5:e6:83:87:16:b9:8a:57:
e1:56:67:0c:cb:5d:80:18:6f:61:fe:06:b1:02:7a:1b:e8:e9:
42:f2:aa:17:6a:bd:5b:3c:9f:5c:ee:62:32:01:d3:32:14:b7:
48:62:e3:ff:9d:e9:e1:65:bb:67:86:44:c8:99:e8:c5:83:ab:
f9:11:ff:51:bd:90:ba:4c:49:3c:59:b8:51:02:ab:27:1b:1c:
2d:98:45:55:e3:b1:4d:45:14:8d:9b:db:1e:43:24:aa:86:f7:
ec:a7:d0:79:5e:23:79:46:84:a5:9d:57:e7:97:77:48:c6:91:
c8:a3:75:aa:a3:85:b4:a7:7a:36:4b:39:93:37:98:68:23:cc:
6f:fc:3e:c4:57:59:1e:1e:0d:79:76:fa:24:b6:2a:7c:0e:b4:
2f:e1:ac:0f:02:df:5e:cb:58:1b:ec:83:7f:2b:12:f5:da:e5:
43:f1:56:25:5f:cf:3e:d4:8b:08:f4:9f:0e:35:c0:52:a6:ae:
28:75:f4:fa:4d:d0:35:e3:ae:4b:d0:ec:9a:3a:31:08:fe:4a:
89:3e:c4:17:d7:6d:61:b8:2b:de:cc:d8:7a:9d:34:f0:38:cd:
eb:54:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:41:23 2025 by rpki-client