Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/DD5wwVR4QntHgRvmQHrM5gRYoL0.roa
File: DD5wwVR4QntHgRvmQHrM5gRYoL0.roa (raw, json)
Hash identifier: +XZFURh1MsaKfVC7ehNqW8S6TsTBbdN2yMCWh0GcBWI=
Subject key identifier: 0C:3E:70:C1:54:78:42:7B:47:81:1B:E6:40:7A:CC:E6:04:58:A0:BD
Certificate issuer: /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial: 019421438E09692A248B1A755AB3995F172D
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/DD5wwVR4QntHgRvmQHrM5gRYoL0.roa
Signing time: Wed 01 Jan 2025 09:47:42 +0000
ROA not before: Wed 01 Jan 2025 09:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 178.175.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:8e:09:69:2a:24:8b:1a:75:5a:b3:99:5f:17:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Validity
Not Before: Jan 1 09:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c3e70c15478427b47811be6407acce60458a0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:e5:b8:ed:c1:5b:30:ff:9a:29:2c:41:f7:
aa:7b:77:71:8b:5f:2f:49:94:19:c8:1f:0a:3e:6d:
af:b3:36:42:28:c1:c2:07:c6:52:a1:c9:09:6a:9a:
9b:7c:5a:07:57:b0:f7:70:66:68:e7:20:a2:9a:ec:
34:e3:77:31:01:30:70:03:41:4a:e3:ba:87:b0:72:
43:8e:33:17:1e:7a:65:1e:1a:f6:2d:9a:ba:df:95:
22:3a:6f:a1:ea:c1:6f:07:fa:c7:35:c7:18:8f:6b:
2f:23:12:11:ef:d9:aa:6d:66:6a:b4:0f:b8:57:a6:
17:6a:4c:8d:44:88:21:fe:10:f4:9a:72:b0:4d:97:
12:f4:4b:35:e6:92:ca:41:39:a4:16:b8:b3:0a:4e:
72:9c:31:d9:3f:af:f9:df:df:e2:bf:75:97:79:15:
a3:2c:f1:3f:94:40:42:d6:6f:1c:55:68:b8:32:2b:
b9:3d:3f:9a:7c:b9:36:e8:6c:eb:91:d0:60:6a:3f:
e7:ca:a9:3b:d3:28:79:b1:3d:9e:bf:21:cc:65:e5:
89:b4:92:dc:7b:7d:32:18:49:3c:77:2e:35:17:91:
0c:ab:75:7c:ea:97:0c:41:fe:d9:6a:5d:10:18:a1:
6d:83:a1:ab:48:97:5f:63:cf:2f:63:b5:1b:e9:12:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3E:70:C1:54:78:42:7B:47:81:1B:E6:40:7A:CC:E6:04:58:A0:BD
X509v3 Authority Key Identifier:
keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/DD5wwVR4QntHgRvmQHrM5gRYoL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.182.0/24
Signature Algorithm: sha256WithRSAEncryption
78:58:25:13:ac:f8:7a:8a:42:d9:ec:b3:36:e9:6a:ed:54:37:
18:1e:6a:a2:ca:2f:d0:72:58:80:8d:35:39:c3:95:d3:42:5b:
24:85:cd:31:90:67:58:60:ce:6a:7b:38:87:ab:6d:ac:9a:c3:
15:ae:18:dd:e5:f8:b8:77:7f:1a:f8:90:89:16:32:51:02:12:
c5:da:cf:81:89:27:49:38:b7:dd:aa:7d:f9:98:0c:a3:c5:ea:
30:3a:6b:8b:3a:49:84:b7:47:2c:6b:ad:a0:ab:8d:80:2f:47:
e5:10:84:7c:db:40:fc:3d:e2:ce:66:fd:17:77:80:d1:67:49:
fc:48:f7:b4:69:a5:50:05:c2:93:36:e3:31:9c:22:6a:23:c0:
6c:14:93:9b:10:b3:80:a1:c5:47:2c:13:9e:8c:f3:ec:3c:62:
c6:21:2f:6a:d7:59:ec:d5:4f:b0:cd:1d:19:8b:f2:95:dc:5d:
89:1f:54:a7:7b:0e:49:0a:3c:12:50:28:07:13:44:d7:9c:65:
56:8a:a7:bb:7d:15:1b:87:a8:6b:96:7a:d2:74:59:c4:06:08:
11:8a:f6:30:a8:28:06:3d:f1:37:43:67:cb:ae:51:98:44:e0:
cf:38:f6:64:37:0e:ef:c9:08:9a:78:76:0b:da:72:92:15:96:
ab:d4:b2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:01 2025 by rpki-client