Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/ci5DKE54eT5iN_nAPc-7X1GldFI.roa
File: ci5DKE54eT5iN_nAPc-7X1GldFI.roa (raw, json)
Hash identifier: XQ0NDtKbc4dG/tVRbQc3pC1EJxNFS1iSTeQJD2B3KrE=
Subject key identifier: 72:2E:43:28:4E:78:79:3E:62:37:F9:C0:3D:CF:BB:5F:51:A5:74:52
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 01942825D751A9EF461886262AFD93C51722
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/ci5DKE54eT5iN_nAPc-7X1GldFI.roa
Signing time: Thu 02 Jan 2025 17:52:36 +0000
ROA not before: Thu 02 Jan 2025 17:52:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209873
IP address blocks: 176.118.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:d7:51:a9:ef:46:18:86:26:2a:fd:93:c5:17:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Jan 2 17:52:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=722e43284e78793e6237f9c03dcfbb5f51a57452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:56:98:52:97:a9:f1:27:fa:95:bd:79:31:
24:12:ac:d4:bb:13:2e:9b:78:3b:14:13:1a:4e:04:
7f:1b:9c:9b:4f:e6:9b:90:43:d0:3a:cc:14:20:d2:
33:e1:be:b1:3f:5f:91:8c:42:fa:d4:f8:1c:15:43:
bd:6f:46:2f:b0:31:aa:33:0a:9e:4e:7d:4b:25:15:
44:54:01:d0:cd:6c:46:6f:60:13:d6:4d:9f:32:06:
93:99:88:54:0e:cb:0e:fd:ed:ff:41:1a:0b:9d:5b:
51:76:27:c9:d8:b6:68:b2:70:c9:33:9a:5c:e2:08:
98:56:2e:00:9b:6c:64:da:69:54:8c:8c:97:b4:0e:
50:c3:5f:70:61:cd:6d:0b:10:4b:03:a9:d3:9a:88:
a2:cc:02:ad:df:19:69:83:2c:ef:1e:22:08:89:c8:
ea:fc:12:5d:5d:8f:45:71:a4:ff:be:d2:f9:cd:49:
cb:70:22:54:bf:87:59:39:d2:b9:2a:62:78:ca:03:
da:01:5d:3e:f0:93:a9:0b:2d:87:77:4a:98:fb:82:
ae:be:7d:e0:ff:61:a8:8c:77:30:c6:1e:92:78:f3:
25:6d:4a:61:6d:4f:fc:43:41:08:90:40:c4:52:30:
4b:50:a0:b2:e8:1f:66:5c:72:30:0c:c9:6b:43:3b:
77:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2E:43:28:4E:78:79:3E:62:37:F9:C0:3D:CF:BB:5F:51:A5:74:52
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/ci5DKE54eT5iN_nAPc-7X1GldFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.212.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:d5:e9:c6:a5:78:7b:19:5d:81:58:18:cc:71:bc:6d:dc:ff:
7a:30:b2:c4:a0:d2:e4:fb:79:f6:2d:f6:ab:de:f3:6a:83:2c:
a0:50:8c:4c:0c:01:b7:40:10:54:91:52:20:04:18:cd:d9:bb:
65:9b:90:27:3f:7e:63:fd:e2:c1:c3:9b:91:4d:0a:ed:7a:0f:
d6:0d:cc:70:56:a9:e7:f1:3a:56:b9:c7:47:1b:4f:ea:3e:94:
b8:e8:18:59:77:57:5e:af:70:0f:fb:f2:59:0a:2c:67:8c:98:
eb:9c:6e:2b:b8:d9:4d:83:d2:08:2a:6e:d5:98:88:a6:e9:cf:
8e:0e:23:ba:ac:93:42:7e:a8:90:1b:a7:51:ac:19:45:d9:38:
2d:81:d8:6a:da:ee:66:24:06:78:e4:fa:3e:e2:70:e3:0b:a2:
d7:bb:66:2c:d1:e6:e5:2b:95:f5:5e:b8:45:c1:b4:04:9d:a6:
fb:1b:08:69:a1:34:79:2f:c6:3d:18:51:8e:2a:a3:d1:00:e5:
01:88:00:91:e3:d7:3a:e2:02:8f:52:eb:7e:04:09:d3:de:c2:
f4:11:d0:95:6b:ca:80:15:d7:cb:7b:77:55:7a:92:ac:ce:35:
00:ca:bc:6b:7b:ab:af:dc:24:a8:09:01:0c:fc:50:d2:9b:76:
9e:48:f2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:03 2025 by rpki-client