Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/4SOfXtsUKcFlXa9Q9yEW4D3DIqA.roa
File: 4SOfXtsUKcFlXa9Q9yEW4D3DIqA.roa (raw, json)
Hash identifier: S0ISeClce5TxDsWjgivJh0Ti1wUrqurbMyCPE36tiVY=
Subject key identifier: E1:23:9F:5E:DB:14:29:C1:65:5D:AF:50:F7:21:16:E0:3D:C3:22:A0
Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial: 019422FC1558F5811033DC8DA323902DC514
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/4SOfXtsUKcFlXa9Q9yEW4D3DIqA.roa
Signing time: Wed 01 Jan 2025 17:48:53 +0000
ROA not before: Wed 01 Jan 2025 17:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216423
IP address blocks: 178.219.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:15:58:f5:81:10:33:dc:8d:a3:23:90:2d:c5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1239f5edb1429c1655daf50f72116e03dc322a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:d6:7b:76:2f:28:bc:38:df:9b:f5:1f:66:
62:54:68:16:fc:7a:58:d0:c6:6b:d7:8b:cc:a2:23:
67:51:b0:02:bd:dc:31:52:f7:71:d6:92:bc:7d:3a:
72:b3:12:af:13:02:e1:8a:2b:0e:2e:42:83:7b:73:
d4:35:23:65:f6:f8:cf:55:af:05:5f:db:1f:46:a6:
b5:00:71:09:75:50:72:de:a6:f2:b8:55:65:4c:23:
56:23:16:68:f7:dd:eb:59:c9:55:cf:17:00:10:52:
6f:06:ae:9c:d2:37:28:2c:76:4e:1f:85:09:c7:dd:
09:b5:c0:da:61:7e:68:e4:8a:0e:65:07:3d:32:20:
a4:b8:d8:41:49:f6:c4:ef:85:9a:bc:e8:71:55:60:
b1:b2:a1:06:f1:1d:61:6b:f8:c2:e4:fa:d8:e0:42:
11:c2:62:4b:0c:cf:8e:2a:29:fc:30:84:8e:53:ac:
cb:07:6d:c4:34:ef:72:d7:3d:81:a7:73:94:b0:a8:
95:a7:5c:8b:0d:e1:ac:de:3d:1b:85:5d:22:22:5c:
ea:d3:39:f8:dd:82:67:16:7d:b4:ea:2a:68:0c:1f:
88:7d:4b:2c:f2:33:01:b1:80:2c:04:8d:ab:10:6a:
cf:2e:f9:8f:3a:9a:c8:0a:c3:ee:49:50:66:2b:6f:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:23:9F:5E:DB:14:29:C1:65:5D:AF:50:F7:21:16:E0:3D:C3:22:A0
X509v3 Authority Key Identifier:
keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/4SOfXtsUKcFlXa9Q9yEW4D3DIqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.157.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f8:d5:60:02:0d:c5:05:41:0f:e4:7b:45:9b:47:f1:a3:b3:
63:ff:95:05:8b:eb:45:ff:bb:f5:32:c6:a1:33:6f:e1:59:8d:
47:a5:27:e7:90:66:53:49:b2:25:fe:74:7f:70:57:d5:78:57:
60:6a:bd:d5:1c:19:f1:49:f7:c8:7c:da:b8:c3:82:ad:81:73:
70:9a:97:39:d9:0b:0c:d6:a4:57:ed:6b:2e:8c:02:f6:25:03:
24:3c:89:7d:a3:06:01:11:ad:cf:82:be:4f:3e:08:29:e4:fd:
7a:03:95:c1:ff:19:18:e1:3e:49:44:b3:8e:73:23:c7:b0:dd:
47:fb:34:11:b9:53:a1:f2:e0:c5:98:cd:a2:a8:47:61:fc:95:
ac:6b:13:8b:9c:bb:d2:2d:9f:4a:4a:eb:ea:07:20:7e:f0:34:
50:d3:ae:18:03:06:53:d3:75:7d:cd:57:30:eb:e6:89:9a:98:
de:d0:8c:91:0e:50:98:13:06:8e:89:f2:48:44:d3:a0:8e:0f:
eb:2d:01:fe:33:e3:fe:56:5b:0d:f6:70:c8:fa:fd:04:0a:9f:
01:86:ef:15:57:53:94:42:ed:53:4f:69:4c:92:cd:70:f7:97:
e5:1a:cb:47:ce:68:c9:d3:bc:a0:de:4a:2f:d6:b2:d3:f5:e3:
1b:9d:4c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:47 2025 by rpki-client