Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa
File: 7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa (raw, json)
Hash identifier: ZilTYghFnWRS/ebtjdIbZ9Dk7wTzY0JMcLcLjLJ+fE8=
Subject key identifier: EE:A0:24:71:42:BC:66:5A:4E:42:4E:07:3F:4B:AE:17:49:61:B2:96
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 0194206858ADE1BB95AE294311DA57AB1209
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa
Signing time: Wed 01 Jan 2025 05:48:16 +0000
ROA not before: Wed 01 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210269
IP address blocks: 178.237.56.0/24 maxlen: 24
178.237.59.0/24 maxlen: 24
2a0d:5540::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:58:ad:e1:bb:95:ae:29:43:11:da:57:ab:12:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eea0247142bc665a4e424e073f4bae174961b296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:0e:cc:7f:a0:d1:25:1c:83:74:35:97:ed:
9e:09:3a:07:88:bf:43:5c:3d:d2:ca:c6:b4:ef:95:
2d:3a:d3:36:0a:bd:17:a9:26:64:0b:a1:7a:86:f1:
e9:67:7b:2f:e4:0d:15:53:71:d3:a1:12:bf:95:03:
17:1e:4d:93:d5:27:88:be:84:09:67:3b:ba:29:76:
6f:76:ef:6a:10:54:ee:dd:dd:5c:63:ae:d8:bf:99:
5a:2e:79:f5:53:25:db:8f:62:cd:03:f6:d0:ea:a8:
e7:a7:a4:6f:c9:a5:8a:a2:db:6a:2f:23:40:df:6e:
d2:6a:8f:e9:c0:96:23:9b:f0:95:99:10:60:03:77:
c5:37:54:05:89:5d:eb:f4:5c:34:3c:85:df:67:ef:
3e:6a:c0:bc:8d:6b:55:a6:84:d9:f9:fc:fe:31:33:
ec:d4:bb:de:49:5c:f1:3f:bd:19:1f:64:9b:4a:60:
b3:59:79:79:16:b4:9f:13:47:87:7e:de:56:5f:33:
06:cf:55:fd:6e:47:26:23:b5:17:0e:76:60:1f:4e:
d2:43:1b:f4:12:ad:e6:84:0c:ff:1c:0c:1a:b7:e2:
df:a4:03:ec:06:63:20:17:6a:e7:ed:22:69:35:47:
9a:4d:3f:51:0b:b6:8a:b9:c4:d9:f0:56:58:bf:ed:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A0:24:71:42:BC:66:5A:4E:42:4E:07:3F:4B:AE:17:49:61:B2:96
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.56.0/24
178.237.59.0/24
IPv6:
2a0d:5540::/48
Signature Algorithm: sha256WithRSAEncryption
57:b9:90:10:38:9f:9e:64:9e:19:4d:98:4c:4a:40:fd:f8:d6:
f0:ed:8a:d1:69:6a:7b:cf:b3:53:80:08:0c:8d:67:af:e0:b7:
54:08:5c:72:88:e3:e4:c2:17:cd:eb:30:e6:5f:0a:f2:82:0c:
eb:3f:00:3d:48:7d:2a:a0:19:5d:30:ec:3b:a3:1d:65:4c:f3:
1b:8f:1d:23:34:0a:11:6e:0c:48:1c:6c:cf:de:b8:74:de:6a:
a4:21:d3:93:68:73:55:b1:b6:22:b1:9e:4f:c0:61:b8:dd:0b:
c4:ea:5a:f9:a0:fe:a5:0f:58:ac:5f:d1:e4:e2:b8:6d:2e:8d:
9c:00:94:c8:31:f0:a5:75:b1:ee:8f:84:ef:25:fa:95:f6:c6:
bb:85:03:53:79:2f:16:1f:9c:87:5d:24:7c:ac:fa:dd:49:83:
5c:03:af:7f:36:bc:4a:31:b2:c8:52:1c:2b:09:59:4c:7e:f2:
6e:d9:be:26:d0:33:6e:28:ff:30:94:2a:0c:e2:f0:eb:24:de:
96:06:39:8c:d9:15:dc:15:cf:b0:a5:f5:c0:c1:98:0b:f9:ec:
c8:5a:49:27:72:8e:1d:52:57:58:3e:c3:a1:b7:8e:82:2b:85:
66:71:9f:f8:40:af:3b:73:22:2a:b4:db:87:56:f0:e1:d1:36:
8b:0b:ac:e5
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQgaFit4buVrilDEdpXqxIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTlhZmQyMWNiOGZiZTZiODUwODAwY2Q0YjQ5ZjI1NjJj
OTJiYTAwHhcNMjUwMTAxMDU0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWEwMjQ3MTQyYmM2NjVhNGU0MjRlMDczZjRiYWUxNzQ5NjFiMjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAwOzH+g0SUcg3Q1l+2eCToHiL9D
XD3Sysa075UtOtM2Cr0XqSZkC6F6hvHpZ3sv5A0VU3HToRK/lQMXHk2T1SeIvoQJ
Zzu6KXZvdu9qEFTu3d1cY67Yv5laLnn1UyXbj2LNA/bQ6qjnp6RvyaWKottqLyNA
327Sao/pwJYjm/CVmRBgA3fFN1QFiV3r9Fw0PIXfZ+8+asC8jWtVpoTZ+fz+MTPs
1LveSVzxP70ZH2SbSmCzWXl5FrSfE0eHft5WXzMGz1X9bkcmI7UXDnZgH07SQxv0
Eq3mhAz/HAwat+LfpAPsBmMgF2rn7SJpNUeaTT9RC7aKucTZ8FZYv+2+fQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFO6gJHFCvGZaTkJOBz9LrhdJYbKWMB8GA1UdIwQY
MBaAFEupr9IcuPvmuFCADNS0nyViySugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmIt
ZjY5NjIyNDI1NjUxLzEvN3FBa2NVSzhabHBPUWs0SFAwdXVGMGxoc3BZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmItZjY5NjIyNDI1NjUx
LzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAsu04AwQA
su07MA8EAgACMAkDBwAqDVVAAAAwDQYJKoZIhvcNAQELBQADggEBAFe5kBA4n55k
nhlNmExKQP341vDtitFpanvPs1OACAyNZ6/gt1QIXHKI4+TCF83rMOZfCvKCDOs/
AD1IfSqgGV0w7DujHWVM8xuPHSM0ChFuDEgcbM/euHTeaqQh05Noc1WxtiKxnk/A
YbjdC8TqWvmg/qUPWKxf0eTiuG0ujZwAlMgx8KV1se6PhO8l+pX2xruFA1N5LxYf
nIddJHys+t1Jg1wDr382vEoxsshSHCsJWUx+8m7ZvibQM24o/zCUKgzi8Osk3pYG
OYzZFdwVz7Cl9cDBmAv57MhaSSdyjh1SV1g+w6G3joIrhWZxn/hArztzIiq024dW
8OHRNosLrOU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:22 2025 by rpki-client