Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/0vFnPnyD0rk0NBq-vHcuUjmsih4.roa
File: 0vFnPnyD0rk0NBq-vHcuUjmsih4.roa (raw, json)
Hash identifier: 8C+9WOepMdgxD+Xcj7Wjy9LCISmYrp2hucRDb6Vj6WM=
Subject key identifier: D2:F1:67:3E:7C:83:D2:B9:34:34:1A:BE:BC:77:2E:52:39:AC:8A:1E
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 019427B5BD8865CBAB790620246252A126B0
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/0vFnPnyD0rk0NBq-vHcuUjmsih4.roa
Signing time: Thu 02 Jan 2025 15:50:09 +0000
ROA not before: Thu 02 Jan 2025 15:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210797
IP address blocks: 178.22.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:bd:88:65:cb:ab:79:06:20:24:62:52:a1:26:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: Jan 2 15:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2f1673e7c83d2b934341abebc772e5239ac8a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:fa:6b:6c:68:c3:d0:a9:4d:82:fd:c7:f9:
42:76:3c:3e:04:be:c2:21:2c:b8:15:e5:93:ac:1b:
c5:53:4a:34:7d:58:0d:8a:5b:1e:a4:c4:58:62:49:
07:23:88:e1:6c:b0:44:80:32:c0:5b:82:3e:0d:d8:
5b:c7:2f:95:bc:5a:bf:d5:bd:2c:23:61:31:79:66:
ea:d4:f0:7e:25:86:f6:99:3a:92:4d:77:93:07:91:
e7:fe:fb:4c:6c:5c:66:a1:9c:64:dc:af:e4:97:60:
f6:7c:d3:33:88:72:ba:12:86:a5:b6:72:ef:d8:c3:
6b:03:d2:94:c9:93:3e:98:bf:eb:3b:ed:c1:1e:9d:
23:5c:39:06:50:83:66:12:2a:19:1a:89:b8:43:68:
ae:78:40:d0:b3:2b:2d:46:1a:73:38:43:95:df:9a:
60:af:45:07:6f:bf:7e:39:fe:b2:e1:ca:73:84:5f:
bc:d9:2d:0b:24:08:b2:75:68:1f:d4:06:eb:31:5d:
af:61:4c:d5:69:09:43:6d:9a:61:6f:ef:f5:be:98:
69:62:6a:35:c3:43:bf:c4:b6:21:12:9d:30:1f:bb:
9f:83:99:d9:cb:8f:25:a5:e2:60:13:f3:70:1a:a9:
7f:0f:97:66:48:34:a5:10:11:b4:8c:b3:e9:91:4e:
19:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F1:67:3E:7C:83:D2:B9:34:34:1A:BE:BC:77:2E:52:39:AC:8A:1E
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/0vFnPnyD0rk0NBq-vHcuUjmsih4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.27.0/24
Signature Algorithm: sha256WithRSAEncryption
93:67:1c:e9:2f:aa:4e:4c:92:3b:b9:52:78:d1:87:ea:b4:98:
ab:76:6d:72:a9:eb:2b:30:f3:73:10:2d:29:85:ac:17:90:ed:
bd:73:be:0a:3f:3a:2d:65:3f:43:bf:00:09:f2:e8:99:13:2f:
f0:05:24:60:03:5f:cd:b8:b6:a7:18:1e:f2:d7:80:59:34:ad:
cf:15:a9:d5:df:fd:3f:5d:c4:7a:ef:d7:76:b8:cc:4e:df:54:
29:8b:27:ef:f5:c6:dc:d6:b3:77:eb:d9:64:6d:af:7f:d2:cd:
a2:13:f1:56:7b:53:15:0b:a0:93:84:ec:64:52:0b:5c:31:2d:
97:6a:0f:78:aa:e5:7c:12:6b:cc:54:e5:43:b3:fe:81:a7:95:
7f:22:3e:6c:ad:b9:32:77:3e:45:37:28:e0:9e:7b:11:1c:51:
30:08:29:58:c3:73:5c:95:f9:e7:b3:b6:c7:2f:14:a0:fc:de:
5a:99:f3:62:d7:18:27:d5:3c:ad:bb:be:b8:00:88:f4:8f:c8:
78:b8:68:81:20:4f:44:22:ac:24:e4:16:57:d9:ab:83:39:0f:
f2:00:4c:73:ad:88:2e:8d:35:7f:a1:72:2b:c3:6d:4e:4b:e2:
10:b7:4b:16:6c:44:c7:e5:99:a7:00:f7:56:8e:0f:32:89:22:
13:46:e7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:49:31 2025 by rpki-client