Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa
File: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (raw, json)
Hash identifier: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=
Subject key identifier: 67:75:FD:0E:C4:F8:54:02:96:ED:89:01:4C:C9:F4:AD:71:AE:57:6C
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 0194274807440683588971FC21796BD7C428
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa
Signing time: Thu 02 Jan 2025 13:50:19 +0000
ROA not before: Thu 02 Jan 2025 13:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41847
IP address blocks: 178.251.179.0/24 maxlen: 24
178.251.180.0/24 maxlen: 24
178.251.181.0/24 maxlen: 24
178.251.182.0/24 maxlen: 24
178.251.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:07:44:06:83:58:89:71:fc:21:79:6b:d7:c4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Jan 2 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6775fd0ec4f8540296ed89014cc9f4ad71ae576c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4d:47:b5:49:7b:a4:28:1a:6a:bf:63:b1:8f:
46:f0:e6:f9:44:98:2c:11:cc:60:2b:89:9a:f8:eb:
c8:d1:6e:46:78:d6:94:b7:60:0c:0c:8a:a4:12:7f:
b5:e8:ca:24:c5:f8:78:4b:24:93:03:a8:da:24:fb:
9c:a0:f2:bc:5c:31:74:31:dd:3a:67:2e:81:d8:e0:
4f:9b:3e:88:70:13:74:dd:7f:f3:3c:aa:54:a8:87:
24:f3:4f:a1:21:9c:de:af:ab:dc:f3:97:f2:78:2a:
54:14:93:ec:c2:20:d7:4f:43:66:20:1d:df:d3:7d:
1c:50:ac:a3:d7:5f:3b:30:e3:2d:38:9b:f6:e6:d9:
bb:f7:12:62:ba:96:07:3a:0d:c3:b6:47:a8:3a:84:
fe:86:e7:d7:ad:86:6a:70:ee:f7:ae:46:f9:8e:e6:
5a:12:49:aa:cb:23:d6:4f:24:60:c5:72:3f:b1:5d:
88:25:e9:6a:d6:ba:07:2b:37:7b:21:14:ab:bd:e4:
84:f6:b8:15:02:86:76:9f:8e:78:79:62:6f:08:c3:
f8:cb:89:9a:f8:8c:0d:d3:65:7b:43:82:bb:fe:49:
99:34:b8:a9:2c:ee:0c:0d:e0:a0:54:07:3e:50:b5:
00:00:95:9b:98:1f:8e:2a:b4:5c:18:55:90:b5:6c:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:75:FD:0E:C4:F8:54:02:96:ED:89:01:4C:C9:F4:AD:71:AE:57:6C
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.179.0-178.251.183.255
Signature Algorithm: sha256WithRSAEncryption
25:6d:08:eb:fb:0c:91:2c:e6:37:64:26:cd:ea:72:6d:36:e0:
7c:12:dd:70:a3:f4:ac:d4:49:06:7e:89:89:08:65:0f:88:2d:
e6:84:4b:e1:97:59:d2:46:12:73:d5:47:38:2d:24:16:19:28:
1c:77:fc:da:eb:b1:75:c3:6a:dc:0d:05:18:78:6a:f4:b3:d8:
8c:55:35:7f:88:22:59:d1:52:e4:24:f5:59:32:35:38:ba:09:
f1:40:fd:c0:04:31:12:1e:51:23:2b:80:2f:d5:f9:70:06:86:
14:eb:38:74:98:09:f3:29:7c:ac:5e:4e:7a:80:a9:9c:1c:54:
55:b4:6f:34:31:de:c7:61:df:41:53:03:ce:4e:67:d7:e7:60:
9c:e7:0a:39:72:5f:e9:f0:40:92:ef:cb:37:5a:2e:33:8c:0a:
1e:b9:e4:df:2c:86:80:d5:47:9a:d5:e1:61:83:04:a5:d1:5c:
80:1a:ea:c0:c3:db:c7:f0:a8:2c:61:0b:93:a4:56:4a:59:06:
c0:81:98:b7:66:c2:d2:cd:d3:95:f7:24:0b:17:f0:a4:2c:eb:
40:e3:65:c5:f5:96:c9:d5:82:58:73:a0:20:07:48:dd:c3:fa:
43:91:e1:94:0b:0f:f2:8e:42:60:61:cc:c4:ec:c0:8c:a3:0e:
bb:8f:43:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:16:19 2025 by rpki-client