Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/t7kFFxrGX7b_8JY79xsh7QWePnI.roa
File: t7kFFxrGX7b_8JY79xsh7QWePnI.roa (raw, json)
Hash identifier: 3NaS6l21qtRZhafFxfFpDNUW1OP8TUGIeUDERM2ms5M=
Subject key identifier: B7:B9:05:17:1A:C6:5F:B6:FF:F0:96:3B:F7:1B:21:ED:05:9E:3E:72
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019588F85208A684EB3DC3C992B81F6ACB36
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/t7kFFxrGX7b_8JY79xsh7QWePnI.roa
Signing time: Wed 12 Mar 2025 06:08:49 +0000
ROA not before: Wed 12 Mar 2025 06:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63150
IP address blocks: 178.239.121.0/24 maxlen: 24
178.239.122.0/24 maxlen: 24
178.239.123.0/24 maxlen: 24
178.239.124.0/24 maxlen: 24
178.239.125.0/24 maxlen: 24
178.239.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:88:f8:52:08:a6:84:eb:3d:c3:c9:92:b8:1f:6a:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Mar 12 06:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7b905171ac65fb6fff0963bf71b21ed059e3e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:ff:ea:c1:24:24:6d:17:5a:60:7a:b8:58:
2c:7a:f4:64:38:f3:59:1f:72:ad:32:cf:63:0a:93:
68:f5:89:99:df:b8:99:53:bc:c9:02:31:a6:b0:04:
a2:c6:d1:f2:dc:6d:58:e6:2e:fc:00:03:83:d4:62:
32:02:40:ea:c5:56:01:c3:55:92:71:4d:99:3e:c0:
a4:55:bf:46:53:8c:22:d5:3c:75:c6:be:0c:b9:d9:
33:b1:5a:54:5f:95:9d:19:5f:84:e9:ba:60:64:f8:
78:2a:ec:fc:89:7f:c1:7a:49:1f:97:bf:cd:61:3b:
5a:82:e8:67:75:52:c0:7f:6f:9c:c1:12:d1:15:d8:
05:36:d8:d2:de:13:5f:68:a9:ea:82:6e:c4:ff:94:
2f:63:be:3b:cf:b9:15:18:3b:f8:a0:89:9f:1d:bb:
5d:7e:b8:eb:c8:13:ba:53:34:00:54:42:e2:fd:31:
fa:28:ae:88:ec:65:09:7e:13:34:e5:48:e6:27:ec:
9c:b5:25:0a:d6:3b:e5:e3:12:4d:22:8c:7a:d4:1d:
f2:eb:1d:a8:5b:bf:ec:f4:03:d2:9e:fe:8e:ae:f3:
eb:3f:af:bf:6c:ed:0f:a5:70:8c:a9:f7:0d:77:9f:
be:c9:42:aa:43:fc:a1:43:ea:41:3d:80:e0:1a:13:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B9:05:17:1A:C6:5F:B6:FF:F0:96:3B:F7:1B:21:ED:05:9E:3E:72
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/t7kFFxrGX7b_8JY79xsh7QWePnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.121.0-178.239.126.255
Signature Algorithm: sha256WithRSAEncryption
43:44:03:5d:41:68:01:3c:b5:19:3b:b9:23:b3:3c:ef:9a:d7:
0b:4d:ab:dc:f4:94:fa:7a:b5:3a:c9:19:ae:59:24:e3:6f:17:
8d:55:ac:b0:2a:4c:da:75:2e:4f:da:d6:3c:a4:f2:6c:61:af:
88:8d:49:a6:93:07:78:42:a0:ce:a5:2b:eb:8a:a9:12:bf:49:
4a:df:f3:f5:14:42:c9:b4:ad:b8:f2:83:33:4d:ca:c8:0d:57:
65:cb:8c:29:0b:61:a4:05:3c:01:5d:14:7b:6e:dd:7a:40:45:
31:7a:5c:1b:a0:75:f2:4d:be:eb:41:ad:bf:db:b0:2f:65:ce:
20:79:0e:1b:ca:c6:d2:02:16:b5:48:d9:38:0d:30:4f:46:b9:
19:40:f8:a3:af:8c:77:be:bf:fa:26:11:c8:7e:82:6a:13:b2:
8a:53:af:99:88:83:4a:f5:bc:46:5e:ff:56:72:a7:9e:cc:6b:
4f:ed:1d:03:97:c5:1c:f2:a2:67:16:09:b9:4f:7c:7f:c0:b8:
49:e7:65:8f:24:9b:60:39:3d:23:86:55:38:f4:b2:b2:eb:4b:
57:4e:e5:66:3f:da:11:8e:31:38:7f:a0:a3:c8:2e:2d:32:d9:
af:4c:70:e9:f5:81:1e:c9:10:4f:6a:91:99:fd:9b:d6:0e:07:
a0:05:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:15:17 2025 by rpki-client