Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/Ry6CjTQauY6jePfF9K1aXRBPI1U.roa
File: Ry6CjTQauY6jePfF9K1aXRBPI1U.roa (raw, json)
Hash identifier: c9CRHRXe2zz0jhFDuzmDe52TtCa+3RwGF3AlfmTp4Fo=
Subject key identifier: 47:2E:82:8D:34:1A:B9:8E:A3:78:F7:C5:F4:AD:5A:5D:10:4F:23:55
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 0194236A38209FD29831D71CD1FA6AA64FAB
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/Ry6CjTQauY6jePfF9K1aXRBPI1U.roa
Signing time: Wed 01 Jan 2025 19:49:11 +0000
ROA not before: Wed 01 Jan 2025 19:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52070
IP address blocks: 178.21.40.0/23 maxlen: 23
178.21.40.0/24 maxlen: 24
178.21.41.0/24 maxlen: 24
2a01:9800::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:38:20:9f:d2:98:31:d7:1c:d1:fa:6a:a6:4f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: Jan 1 19:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=472e828d341ab98ea378f7c5f4ad5a5d104f2355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:05:8f:b5:d5:bc:0f:54:35:84:d7:96:e9:98:
bc:bb:d6:af:09:a8:54:8f:7c:9f:b7:74:f2:a6:c0:
40:4b:e1:d6:44:93:27:7b:78:9c:2e:ea:93:ea:9c:
d7:9c:58:12:b4:a8:72:b5:ef:b6:8f:b0:ba:a6:0d:
03:c4:1d:25:6e:3b:b4:dd:9a:e4:9d:95:ec:51:40:
46:3d:12:40:8a:9a:73:d0:d7:1d:ab:2a:b5:00:cf:
8b:90:1e:e1:0d:83:b6:d4:6a:87:04:0a:a8:3d:6a:
05:af:fa:15:c1:a9:e2:b0:08:bd:43:1e:c5:4b:9e:
5d:e3:e3:af:40:f2:73:18:ba:12:5a:a9:f4:3a:f2:
c4:c1:cb:1b:3a:9e:6b:6a:0b:d0:5e:74:2c:ea:39:
26:2f:d0:ba:3b:93:d3:8d:f6:32:b0:80:bb:1c:51:
54:76:f3:1b:09:bd:81:6a:a3:97:17:7c:b3:8e:63:
c5:67:f1:44:7e:c9:cf:dd:78:65:4f:a8:bd:45:8d:
69:bf:3d:41:98:5e:19:43:90:6e:7e:a1:42:8f:ef:
73:c3:6f:8c:28:9b:4e:dc:09:12:57:02:22:9e:80:
ba:bc:af:03:de:25:91:90:a9:a8:79:06:a4:16:0b:
1e:ff:f8:50:e2:df:71:f5:96:8c:59:01:83:61:92:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:82:8D:34:1A:B9:8E:A3:78:F7:C5:F4:AD:5A:5D:10:4F:23:55
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/Ry6CjTQauY6jePfF9K1aXRBPI1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.40.0/23
IPv6:
2a01:9800::/35
Signature Algorithm: sha256WithRSAEncryption
91:ce:d5:1b:fc:64:c2:ca:ca:5c:09:8a:1c:a9:05:20:e1:dc:
2d:33:d2:9f:1d:f5:ef:38:46:19:a2:c2:96:d0:51:e5:43:ff:
e8:2a:2c:3a:0d:dc:c2:46:ef:ee:b3:3c:0b:ac:53:cb:9f:b5:
15:cf:ce:ac:0f:0c:7f:30:b1:4c:3c:a1:fc:7d:56:4f:a2:d1:
85:cb:1e:31:d2:c6:8f:97:3f:ce:92:02:64:dd:e4:be:ce:4c:
8e:07:13:f2:48:c4:2e:6b:77:4d:48:1b:73:6c:b4:ba:a1:fc:
41:bc:e0:8a:11:6e:97:38:ee:68:0c:d1:a3:3f:01:45:6d:fd:
ad:be:72:02:47:45:47:6a:68:89:79:47:a8:c5:4f:6a:dd:a3:
3a:90:d1:3c:12:43:51:c0:6f:5e:ff:e4:f6:35:6d:bc:d7:14:
e0:33:1d:e8:d8:7f:8b:46:cc:55:23:28:a5:e9:2a:86:fb:51:
07:e6:8b:4a:2d:72:a5:6c:7b:cc:9a:42:fd:6c:c5:ff:43:72:
d6:c6:6c:ce:c0:ed:63:c9:7c:b3:7b:7c:bd:c8:57:f4:82:72:
79:70:2f:e7:5e:e9:c2:cc:3e:e0:d6:b6:5f:37:ea:5f:1c:c4:
69:f0:62:64:c9:d7:cb:68:ba:e5:78:ae:d6:92:75:4d:5c:a5:
56:f7:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:57 2025 by rpki-client