Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/pGXlBe8mvqpUo_lCHeYFkShv2K8.roa
File: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (raw, json)
Hash identifier: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=
Subject key identifier: A4:65:E5:05:EF:26:BE:AA:54:A3:F9:42:1D:E6:05:91:28:6F:D8:AF
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 0194228DA8350C2DBAB0B69D3B0EB882B6EF
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/pGXlBe8mvqpUo_lCHeYFkShv2K8.roa
Signing time: Wed 01 Jan 2025 15:48:16 +0000
ROA not before: Wed 01 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43349
IP address blocks: 178.16.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a8:35:0c:2d:ba:b0:b6:9d:3b:0e:b8:82:b6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 1 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a465e505ef26beaa54a3f9421de60591286fd8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:47:d5:7b:7c:4b:b3:a6:16:42:5c:26:fb:
1e:ec:50:8f:c0:0b:14:0f:c9:d3:23:ee:42:de:3c:
61:51:39:90:b1:63:31:c9:9b:09:33:2a:40:5c:dd:
a1:cb:4d:7b:5b:42:95:83:51:4c:9a:95:eb:a1:56:
2a:65:57:ce:78:cf:0f:11:b2:42:07:d4:bf:82:d6:
c6:fb:97:f7:d2:42:26:05:af:96:33:67:6c:8c:f7:
e9:9e:fa:dc:38:e6:ed:16:05:30:83:1e:04:56:56:
cb:25:1b:c8:4d:95:7b:0c:96:f8:0d:53:42:39:fa:
b6:93:4a:6c:47:ce:b0:31:81:64:20:84:79:56:45:
49:b0:50:1f:9f:1f:3a:fa:ab:94:1b:4b:c6:79:1f:
27:9a:bb:5d:e5:e8:bd:1d:81:ea:85:c2:57:e4:7a:
b4:74:82:cf:bd:2d:e9:d0:30:a1:9c:a4:81:ad:3f:
6b:2d:6b:f3:74:a0:9c:ca:57:ba:12:b4:c7:e3:2b:
70:ed:11:83:8e:3d:09:8b:de:b4:ec:7b:68:c4:d4:
8d:97:0d:6e:fa:55:ed:c9:a1:88:91:a8:2e:88:01:
df:d9:9b:9e:01:b7:3e:96:0a:a1:e0:c3:ad:14:48:
70:6d:a2:a9:36:bb:c4:10:fd:66:3b:2c:07:9a:5b:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:65:E5:05:EF:26:BE:AA:54:A3:F9:42:1D:E6:05:91:28:6F:D8:AF
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/pGXlBe8mvqpUo_lCHeYFkShv2K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.148.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a1:d9:5c:02:df:49:c0:06:0e:45:7b:01:c5:2b:bc:40:ff:
0d:c6:1e:d4:a9:c1:6a:99:d5:da:3b:f2:95:a8:a1:d6:6a:64:
f4:13:da:39:73:e9:13:1a:61:99:71:41:7b:45:62:d9:d5:59:
4f:cb:74:cb:8e:8e:8d:c4:8c:97:5c:94:af:b5:1e:64:05:2f:
f7:ab:6e:db:f3:b0:b8:44:26:66:09:12:22:8b:b0:df:ac:0e:
ea:cd:24:e4:ad:d3:8f:8f:7b:ff:ac:7c:ca:aa:5d:3f:41:57:
91:b5:10:83:9c:b7:b9:18:ef:f0:a8:d4:be:9c:71:a8:cc:f2:
4a:53:7e:78:4f:ee:53:9b:10:80:dd:71:07:08:eb:50:f9:d6:
c7:dd:d6:a8:c1:f5:d9:9b:44:8b:5d:4f:2c:ae:4b:8a:f1:91:
1a:75:1f:7c:ca:da:99:2b:22:ef:1b:df:49:7a:e6:e9:53:17:
08:fe:70:c7:3b:6d:48:b6:a8:dc:71:1f:f6:5b:01:75:e0:44:
98:2b:21:09:1b:9a:df:73:44:43:e3:da:31:91:fb:73:4e:60:
40:a3:32:24:00:24:b0:bb:4f:b8:89:16:64:5f:d5:20:59:e4:
1e:58:43:cb:ed:e9:a6:81:a5:51:aa:f9:3a:36:a1:33:c2:64:
99:c4:45:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijag1DC26sLadOw64grbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi
Y2ZhNjEwHhcNMjUwMTAxMTU0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDY1ZTUwNWVmMjZiZWFhNTRhM2Y5NDIxZGU2MDU5MTI4NmZkOGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7xH1Xt8S7OmFkJcJvse7FCPwAsU
D8nTI+5C3jxhUTmQsWMxyZsJMypAXN2hy017W0KVg1FMmpXroVYqZVfOeM8PEbJC
B9S/gtbG+5f30kImBa+WM2dsjPfpnvrcOObtFgUwgx4EVlbLJRvITZV7DJb4DVNC
Ofq2k0psR86wMYFkIIR5VkVJsFAfnx86+quUG0vGeR8nmrtd5ei9HYHqhcJX5Hq0
dILPvS3p0DChnKSBrT9rLWvzdKCcyle6ErTH4ytw7RGDjj0Ji9607HtoxNSNlw1u
+lXtyaGIkaguiAHf2ZueAbc+lgqh4MOtFEhwbaKpNrvEEP1mOywHmlsBuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKRl5QXvJr6qVKP5Qh3mBZEob9ivMB8GA1UdIwQY
MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt
ZGU0YWNmNDQ3ZmFlLzEvcEdYbEJlOG12cXBVb19sQ0hlWUZrU2h2Mks4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl
LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshCUMA0G
CSqGSIb3DQEBCwUAA4IBAQAModlcAt9JwAYORXsBxSu8QP8Nxh7UqcFqmdXaO/KV
qKHWamT0E9o5c+kTGmGZcUF7RWLZ1VlPy3TLjo6NxIyXXJSvtR5kBS/3q27b87C4
RCZmCRIii7DfrA7qzSTkrdOPj3v/rHzKql0/QVeRtRCDnLe5GO/wqNS+nHGozPJK
U354T+5TmxCA3XEHCOtQ+dbH3daowfXZm0SLXU8srkuK8ZEadR98ytqZKyLvG99J
eubpUxcI/nDHO21ItqjccR/2WwF14ESYKyEJG5rfc0RD49oxkftzTmBAozIkACSw
u0+4iRZkX9UgWeQeWEPL7emmgaVRqvk6NqEzwmSZxEXS
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:24 2025 by rpki-client