Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/tOidYiB9KzPdc_4JWd0kjK7tprI.roa
File: tOidYiB9KzPdc_4JWd0kjK7tprI.roa (raw, json)
Hash identifier: u38Y9WyKByUf48bNFO8TfYCIxntXZKNsIAVE3xBRAVY=
Subject key identifier: B4:E8:9D:62:20:7D:2B:33:DD:73:FE:09:59:DD:24:8C:AE:ED:A6:B2
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA688545338937040904256CC69B69
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/tOidYiB9KzPdc_4JWd0kjK7tprI.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51431
IP address blocks: 178.239.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:68:85:45:33:89:37:04:09:04:25:6c:c6:9b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4e89d62207d2b33dd73fe0959dd248caeeda6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:5a:cb:f0:99:ef:d3:56:f7:0f:80:35:77:
f1:26:fe:e9:11:09:5a:6b:13:6b:ba:85:2f:6a:34:
6a:c1:8d:5d:ec:a3:d4:38:b8:26:77:48:46:d6:7a:
f8:de:9e:66:64:2f:07:b4:cd:ee:6d:c5:72:bd:7b:
39:3c:5c:c7:c8:8f:5b:c3:40:fd:04:db:6a:77:22:
d6:41:da:67:de:9a:cb:2a:07:c6:65:b8:b2:d0:a5:
e3:69:13:bc:75:2d:3b:7a:09:f4:6c:74:80:20:08:
8c:36:1e:4e:80:73:fc:9d:d9:c0:0b:b0:21:bd:e6:
37:10:d4:7f:60:fa:a1:d9:9c:6e:28:0f:0a:af:96:
cf:40:ae:79:08:0d:ea:fe:ac:3b:13:6e:d5:d3:8b:
fe:32:f7:9c:c4:6b:20:65:60:29:be:2d:df:e4:8f:
90:f9:05:cd:0c:fe:7f:20:d3:b2:f2:e9:f6:63:d5:
07:15:b8:f1:bc:66:99:35:02:62:c9:5d:c4:56:ba:
77:20:84:67:1f:da:1e:5f:45:99:f4:6f:4e:bc:3e:
eb:e2:11:c5:39:9c:05:e5:ad:e0:e5:f9:d5:ef:1e:
a8:a4:92:73:91:a9:0b:66:fc:09:2d:db:67:75:9a:
19:36:f4:9a:61:04:c3:65:cc:0b:da:09:3d:1d:bb:
52:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E8:9D:62:20:7D:2B:33:DD:73:FE:09:59:DD:24:8C:AE:ED:A6:B2
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/tOidYiB9KzPdc_4JWd0kjK7tprI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:88:f8:7e:85:23:18:d5:d7:2a:c7:c8:6e:79:dc:d2:f8:ed:
24:33:05:5a:b0:87:18:3a:1d:a9:11:0b:e6:ef:09:12:26:a6:
5b:03:e5:0c:69:6e:d1:a7:f3:da:17:5b:59:21:2f:7e:f1:ef:
fc:13:37:a2:46:90:ba:d1:38:5c:de:56:40:e6:94:6a:75:08:
56:06:67:70:72:78:ed:93:5f:62:3d:d4:66:3b:d8:06:07:02:
7b:b1:e3:c7:91:a2:2a:79:23:62:4e:00:c5:15:81:11:62:55:
e3:39:4b:d9:a3:4a:94:3d:26:90:b5:a6:32:bb:df:5d:af:2f:
49:4a:a2:4a:c7:b8:82:7f:ff:94:e2:bf:32:d4:74:50:09:0d:
d4:fb:6e:7d:f2:d8:70:5b:d6:c0:f6:16:93:dd:2b:f8:2d:88:
d5:14:6b:c9:48:47:10:0a:85:6f:3e:cd:64:58:65:66:72:b1:
4a:d9:bc:b2:d1:1a:f1:00:89:24:ed:b9:9d:68:ba:7d:2c:e8:
ec:7b:18:10:f3:5c:1e:88:68:e6:53:0c:0b:ac:92:e0:8c:5e:
b2:8b:a3:71:cf:68:2a:e6:3e:22:d5:da:25:8e:fd:c2:80:6a:
db:2c:73:8d:30:f4:56:11:56:48:be:85:fc:49:f0:d6:4a:bb:
13:cb:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:15 2025 by rpki-client