Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/VwHu0AZouyhVLQY99VO0Hkcb7pw.roa
File: VwHu0AZouyhVLQY99VO0Hkcb7pw.roa (raw, json)
Hash identifier: cQhVJXl3GQeuBM9kWPoYpEUpa83WUtjFGDqVTGex39s=
Subject key identifier: 57:01:EE:D0:06:68:BB:28:55:2D:06:3D:F5:53:B4:1E:47:1B:EE:9C
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 0194266BDD70A66BEA3BB3C0F707DE1436B8
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/VwHu0AZouyhVLQY99VO0Hkcb7pw.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203
IP address blocks: 193.178.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:dd:70:a6:6b:ea:3b:b3:c0:f7:07:de:14:36:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5701eed00668bb28552d063df553b41e471bee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:80:5f:f7:92:7f:3d:3d:ae:e6:d8:19:2f:
b4:27:ec:83:6b:63:1d:b0:32:96:1a:0d:3d:9a:b6:
de:6b:43:8b:e3:a4:eb:b9:df:c9:01:d6:9b:cd:89:
a0:93:eb:30:e5:fb:d0:00:1b:8c:be:4e:6b:74:2a:
c8:df:1c:70:b8:05:21:83:95:3a:9a:f5:be:68:ac:
7f:f7:43:82:b7:97:2a:c6:e2:9a:35:a5:06:ba:89:
9e:c4:30:55:8a:f5:72:e4:f7:3b:7b:f9:40:ad:83:
6b:7d:bc:92:30:38:44:8f:0f:0a:94:55:57:24:e4:
60:f6:ed:d1:b2:93:f6:42:99:00:80:fd:aa:62:04:
e8:eb:43:15:0e:8b:5d:ca:02:51:d9:cd:f0:24:73:
55:fd:20:59:02:c3:1c:fb:47:16:8b:68:9b:2d:c6:
ca:27:af:d6:ad:47:5b:36:25:7c:79:38:eb:91:b0:
6b:f4:e7:3b:f7:f3:5f:c3:9b:02:72:ab:1c:8f:b3:
3b:2d:58:db:83:2f:c8:a2:f9:d0:18:af:5a:5e:75:
41:a8:d7:7c:e3:77:5b:3b:46:52:28:e4:2a:e1:d8:
2f:ec:1f:50:d5:50:f7:13:c3:f8:78:d4:e2:51:0b:
59:e3:a3:03:b0:39:6c:09:f3:49:de:bd:2a:5b:2f:
d6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:01:EE:D0:06:68:BB:28:55:2D:06:3D:F5:53:B4:1E:47:1B:EE:9C
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/VwHu0AZouyhVLQY99VO0Hkcb7pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.166.0/24
Signature Algorithm: sha256WithRSAEncryption
44:40:c9:12:2f:27:cc:fe:ff:b2:ff:7d:4d:d5:27:4e:7f:5f:
88:b3:ad:14:a6:fc:65:8e:3c:af:ae:2f:4d:a4:41:67:6b:a8:
c8:d7:e0:ce:a1:21:5c:b1:5b:fb:46:94:04:d7:18:e6:4d:d2:
60:6a:88:b3:d0:77:c3:06:91:f1:8a:89:20:e3:4f:84:ec:b1:
32:d3:e2:f7:54:23:c6:99:a6:de:ac:ad:9e:be:a0:7f:79:02:
c5:60:c6:aa:88:ae:66:68:52:13:f6:78:50:7f:67:99:13:b8:
fb:00:0f:ba:7f:d8:8f:ee:f4:90:8b:2d:2c:b5:fd:59:00:8b:
26:ea:f7:02:6a:68:58:64:d2:2e:a0:fd:d6:45:57:07:30:0d:
e6:8f:b1:fe:1a:60:22:bf:38:48:5a:e9:fc:98:f5:f3:ce:1d:
6d:17:d7:b2:e8:2a:10:07:1b:f2:56:c4:7b:45:49:e8:9a:e1:
96:4b:82:ff:ea:1f:c2:e6:fb:51:c1:20:3e:ac:ee:08:97:98:
af:df:33:62:3e:cb:22:b0:73:2b:c4:b4:97:65:55:73:82:79:
0e:d9:6b:a0:59:61:3c:f9:cd:aa:ac:6e:52:67:ad:40:43:fc:
0d:38:0a:37:cf:33:01:f9:34:02:a6:66:f0:68:e0:34:d5:8e:
73:0e:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:25 2025 by rpki-client