Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/8lcVMAvDHKFVWpkIvW003vZxmno.roa
File: 8lcVMAvDHKFVWpkIvW003vZxmno.roa (raw, json)
Hash identifier: b9AoL9a4Iwp34m1O6gUmOqwjFvFHDHYDPCqNWBeuTCY=
Subject key identifier: F2:57:15:30:0B:C3:1C:A1:55:5A:99:08:BD:6D:34:DE:F6:71:9A:7A
Certificate issuer: /CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
Certificate serial: 0194266C30964392F704D06AC39873F3C240
Authority key identifier: 97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/8lcVMAvDHKFVWpkIvW003vZxmno.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50815
IP address blocks: 178.216.56.0/21 maxlen: 21
194.0.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:30:96:43:92:f7:04:d0:6a:c3:98:73:f3:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f25715300bc31ca1555a9908bd6d34def6719a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:e0:ae:fb:da:09:75:ef:0b:32:5e:a5:f1:
b7:48:7e:8f:9f:3d:1d:1e:56:cf:31:0f:33:57:28:
6e:de:bc:a8:6c:8c:4b:f9:2e:1d:00:12:b6:eb:85:
57:41:b7:23:58:28:59:8c:ab:82:58:3d:d5:e7:e9:
d5:79:f8:d8:eb:f5:b7:82:88:b5:75:43:65:5e:7b:
ac:43:70:f5:25:0a:98:61:68:7b:d3:24:7d:cd:6d:
3e:c2:95:38:86:d7:1f:6e:01:44:a2:cb:39:6e:e9:
27:ab:30:3c:68:d2:d8:f7:cb:49:1d:71:c2:21:f6:
87:75:38:2c:ad:80:60:9e:6c:3b:f9:8f:8d:b8:8a:
29:33:b8:70:d6:41:58:56:96:86:39:42:c1:9c:bb:
9d:8c:ab:6a:61:22:c4:a7:d2:8a:8a:46:cc:b5:b1:
73:28:ae:e1:02:b2:31:25:34:b6:85:d2:cf:a9:9f:
83:91:c3:ad:52:cf:f2:3b:6f:4d:04:cd:b6:42:e5:
f9:2d:54:c4:18:45:76:58:0f:d0:68:bc:ae:07:06:
4d:a7:c8:2f:9a:78:8c:7a:39:f6:d6:d6:8c:bd:4b:
86:1e:b4:36:a4:1f:be:c8:40:ae:27:2b:66:e2:48:
62:40:37:b7:1e:d7:8a:82:ad:1e:50:c1:69:97:25:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:57:15:30:0B:C3:1C:A1:55:5A:99:08:BD:6D:34:DE:F6:71:9A:7A
X509v3 Authority Key Identifier:
keyid:97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/8lcVMAvDHKFVWpkIvW003vZxmno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.56.0/21
194.0.174.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:fb:48:2e:15:14:30:ae:25:0c:5d:04:ef:f4:6b:fe:f5:97:
13:b9:5c:b9:ff:91:3c:0e:6b:6e:05:6e:e2:5c:63:e4:05:95:
b9:c0:5a:b2:bb:05:18:e7:31:e6:66:15:79:7a:bf:02:41:5c:
88:e5:a0:b6:21:d3:a1:7e:f2:94:70:b1:6b:72:7d:0b:f0:ef:
b1:3d:c5:2e:eb:5d:7b:98:31:df:d7:d1:3d:26:bd:96:20:68:
a8:11:6b:94:b7:da:69:a6:f3:c5:ef:12:a7:f8:e8:4c:36:8f:
9d:04:ed:f9:23:ac:1e:8f:d9:94:c3:8b:82:c4:9c:5e:3b:48:
74:c0:fd:78:ad:ca:36:49:a7:ab:07:6b:56:68:2e:bc:eb:ec:
7d:b7:14:ce:0a:a7:05:c5:30:bc:b6:2e:3e:6c:3d:d8:1e:34:
2c:7c:2d:5b:cb:bb:46:21:f6:9e:a0:f9:88:53:f5:7c:cf:d5:
72:5a:cd:7a:4e:34:b9:55:9d:fb:c0:c0:b1:2e:0d:47:4a:0e:
06:3a:61:6a:56:00:f9:3e:d3:fa:c0:e1:39:fe:72:f9:a5:32:
9d:3f:7b:2f:43:a1:ef:62:c2:2c:4a:ac:e5:03:f2:f8:57:9b:
99:8b:18:2b:55:b7:97:10:18:e6:d7:4d:b8:4e:24:56:9d:f2:
2e:56:8e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:30:40 2025 by rpki-client