Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/M6tpw9WDHHcOBE7Nu4iTuKE-VyM.roa
File: M6tpw9WDHHcOBE7Nu4iTuKE-VyM.roa (raw, json)
Hash identifier: AHwFhMzSzOOXUMkTHVHZW6pPfRFju6dYa9b60DMHno8=
Subject key identifier: 33:AB:69:C3:D5:83:1C:77:0E:04:4E:CD:BB:88:93:B8:A1:3E:57:23
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA6E6CB642A73371C6D83F79478F79
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/M6tpw9WDHHcOBE7Nu4iTuKE-VyM.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214567
IP address blocks: 178.239.147.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6e:6c:b6:42:a7:33:71:c6:d8:3f:79:47:8f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33ab69c3d5831c770e044ecdbb8893b8a13e5723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:f8:44:05:6a:24:4a:68:1c:0d:cf:20:9f:
47:d9:fe:7f:af:fa:78:da:1a:30:33:0e:44:b1:65:
46:5b:b4:83:8c:10:ab:79:1f:86:3d:b4:17:25:7e:
5a:a1:77:d0:23:2d:d0:6f:2f:68:14:43:ae:7f:ae:
9a:6e:94:86:c3:dd:83:1e:4b:90:d6:a4:b8:71:77:
06:51:4c:b2:46:06:33:1e:08:cf:ff:4d:f6:5b:a1:
e5:0f:30:28:3a:39:27:ae:20:e3:02:b5:7f:b5:f2:
69:f0:a8:08:c9:37:e0:a9:ec:0f:16:a8:71:77:20:
49:03:9d:7f:0d:d8:91:55:8f:f5:41:47:f0:60:53:
ce:fa:17:7e:12:6e:85:91:32:97:e5:3e:41:42:40:
65:5d:f6:db:d1:33:1e:52:1e:43:84:39:4d:e6:8b:
07:f5:d8:fa:85:84:02:58:ea:d4:bf:73:47:21:a1:
a7:49:25:41:44:26:2f:60:24:ad:e8:3b:ed:86:e1:
3f:08:bb:94:54:8e:83:9c:c1:23:0d:5a:a5:2f:5b:
56:ef:0b:20:d4:9c:84:e3:19:4b:e0:a8:f7:7d:ba:
71:cd:12:d5:57:03:47:20:99:a4:ee:17:2f:1c:7b:
3a:d6:f2:fe:a3:22:da:15:a7:57:d1:d8:a9:03:f9:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AB:69:C3:D5:83:1C:77:0E:04:4E:CD:BB:88:93:B8:A1:3E:57:23
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/M6tpw9WDHHcOBE7Nu4iTuKE-VyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.147.0/24
178.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:13:73:c1:24:ad:c9:a9:5b:5f:6e:5f:24:47:43:e2:d7:e4:
22:8e:19:0c:88:eb:bb:9f:85:79:23:9a:dd:c9:2f:7f:37:83:
c8:f8:0c:86:3d:84:1c:1f:3f:8c:79:c7:3d:22:5f:46:a1:f8:
b6:38:b2:06:35:b3:9a:58:b0:69:81:59:d9:2e:0d:f3:1b:5e:
6a:ab:ee:ac:c2:bd:df:04:39:1c:05:00:fe:a8:3f:66:df:65:
14:3e:b7:f8:bf:00:44:db:2f:68:f8:a6:d7:84:f8:ff:2b:71:
0d:aa:fe:62:e4:36:61:0b:83:ff:f7:91:b5:a3:9b:49:e2:d2:
52:13:2a:2c:4c:e6:8a:d0:16:00:99:b9:da:20:c1:66:72:1a:
79:14:cc:8f:e5:d2:33:93:ba:71:86:1f:0c:1a:1d:c4:01:65:
31:ae:ec:32:c4:52:38:cd:fc:44:39:66:34:c4:29:70:0f:5c:
04:cd:2f:c1:60:fc:ae:a9:f6:19:8c:88:4f:f6:9f:1a:ea:dc:
30:fa:d6:83:6e:3f:b8:93:6d:39:d3:a7:ca:1c:3b:cd:e0:02:
08:ba:dd:90:78:f8:69:c7:a5:df:9a:bf:88:04:60:5b:46:eb:
cf:48:6e:8e:9e:af:3e:66:b9:99:29:d1:9f:fe:b5:c7:95:0c:
52:c0:70:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:22 2025 by rpki-client