Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/oNxvE63rcj97fc8Yx97MMgI0FKg.roa
File: oNxvE63rcj97fc8Yx97MMgI0FKg.roa (raw, json)
Hash identifier: /Xg7m8gscK0V6m6vSgFFAxQ362y8xtW8lEesPTxiMpI=
Subject key identifier: A0:DC:6F:13:AD:EB:72:3F:7B:7D:CF:18:C7:DE:CC:32:02:34:14:A8
Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Certificate serial: 0194228D86FD63B039910E41D5D9CA67EACB
Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/oNxvE63rcj97fc8Yx97MMgI0FKg.roa
Signing time: Wed 01 Jan 2025 15:48:07 +0000
ROA not before: Wed 01 Jan 2025 15:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58349
IP address blocks: 178.216.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:86:fd:63:b0:39:91:0e:41:d5:d9:ca:67:ea:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9
Validity
Not Before: Jan 1 15:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0dc6f13adeb723f7b7dcf18c7decc32023414a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:ee:c4:fc:93:f0:1d:43:67:2a:cb:7e:55:
a3:63:48:8e:33:bf:df:1e:af:d3:e9:bf:83:bb:df:
0d:c1:45:19:5a:15:10:91:51:c6:c5:24:35:e8:bb:
fb:fb:6b:43:f5:bb:7d:ed:1c:b9:d1:1d:ef:1f:1a:
eb:0c:e6:9e:c9:3c:0d:59:de:69:42:02:2e:c8:46:
96:e4:9b:1e:6b:f0:aa:2a:77:93:0e:ba:a1:ba:34:
34:6d:06:f1:7e:7c:68:af:2d:d6:87:db:4b:4f:fa:
35:ec:ad:db:f8:be:32:94:b8:45:12:65:ff:cd:96:
39:19:a3:ef:e3:7e:67:22:37:d6:77:a8:1d:b2:53:
f2:f6:bc:c6:29:d1:53:a5:00:3f:3f:42:f5:e0:b6:
ee:f8:cb:64:c3:a2:3e:93:30:44:e4:dd:48:c6:19:
14:86:1c:9d:be:6b:7b:82:ef:db:a2:83:8a:32:c3:
02:df:4c:bd:a0:94:63:65:96:8c:24:2c:d0:2f:e7:
d3:5e:9a:c1:e3:00:0f:13:b9:e2:61:46:0c:14:31:
a3:8f:cf:62:b6:c1:d7:3a:37:d0:08:e1:a4:85:57:
ae:1a:8b:d7:04:16:17:4d:cd:c8:4b:27:76:bb:f0:
1c:71:55:ca:46:51:c3:ca:91:43:ae:5f:5f:ee:b1:
cc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DC:6F:13:AD:EB:72:3F:7B:7D:CF:18:C7:DE:CC:32:02:34:14:A8
X509v3 Authority Key Identifier:
keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/oNxvE63rcj97fc8Yx97MMgI0FKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.216.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d9:34:de:0b:64:9a:7e:55:1f:d1:4e:55:2d:91:33:d7:b0:
bf:11:f5:c1:9b:dc:7a:0a:db:18:29:f0:25:d5:62:2a:97:35:
8c:a8:ec:9c:3a:1b:b2:75:69:32:e8:5b:af:6f:4d:1e:5d:9a:
ba:f3:b4:74:fc:6b:e7:27:82:dd:4e:33:b2:d0:23:16:c5:73:
fc:5d:3a:49:a1:8e:8e:71:65:23:87:2a:43:3d:3e:c2:67:cb:
d3:f1:ee:b8:31:d5:a6:21:f6:a2:17:dc:d9:7f:95:0e:0a:55:
ae:ec:ba:24:cc:5b:0b:32:5d:aa:15:d5:80:30:f6:a9:1f:ac:
0f:df:6f:61:33:ff:e8:9a:e6:38:48:31:88:17:ad:2b:29:3d:
eb:56:7c:3b:05:d4:8e:b2:df:12:09:1d:ab:b0:94:25:3b:ee:
84:00:31:cd:7c:64:11:59:92:b4:e4:90:43:64:ba:24:1f:8c:
af:8a:d9:17:21:12:73:80:e1:c9:1c:6a:bf:50:ed:64:a6:19:
0b:3f:03:56:77:60:a3:ab:ea:4f:14:16:fa:1a:d6:bf:6d:57:
89:9b:7c:4d:c1:f1:d9:9b:ed:e4:c3:ff:74:b2:a6:db:e9:91:
a2:68:18:6c:97:f8:29:8a:25:62:99:55:46:c8:39:b3:ff:cf:
8d:77:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:13 2025 by rpki-client