Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa
File: F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa (raw, json)
Hash identifier: B5PNCVqEZ3htMuoUo9SXwMTUf5kV2N6tfRSmohV4ztI=
Subject key identifier: 17:C3:64:FB:E4:00:5D:57:E0:BC:36:CB:2F:FE:B1:41:C7:7A:39:E6
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 0194221FDE2E5C9BA6C3BA8F1B886D1F0E6F
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa
Signing time: Wed 01 Jan 2025 13:48:21 +0000
ROA not before: Wed 01 Jan 2025 13:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203560
IP address blocks: 178.21.144.0/24 maxlen: 24
178.21.145.0/24 maxlen: 24
178.21.146.0/24 maxlen: 24
185.8.168.0/24 maxlen: 24
185.8.169.0/24 maxlen: 24
2a02:2c0::/48 maxlen: 48
2a02:2c0:1::/48 maxlen: 48
2a02:2c0:2::/48 maxlen: 48
2a02:2c0:10::/48 maxlen: 48
2a02:2c0:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:de:2e:5c:9b:a6:c3:ba:8f:1b:88:6d:1f:0e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Jan 1 13:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17c364fbe4005d57e0bc36cb2ffeb141c77a39e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:b8:f1:51:5e:03:89:b4:f3:72:78:1d:ab:
63:f1:2b:30:e1:6b:36:b7:9b:6b:35:30:f8:9e:cb:
94:9e:fa:9d:c3:e7:b3:48:18:98:18:a3:50:0b:07:
15:f1:17:b4:4c:e1:fc:c8:96:a7:17:b0:52:8c:f4:
e4:0a:0f:6b:15:11:37:df:54:d7:e6:23:74:fa:95:
ae:4e:58:2d:39:f3:ef:77:90:ca:d1:8c:48:49:82:
65:ef:0e:cd:27:a6:b7:bf:4d:2e:74:8e:40:9f:ca:
28:21:d0:ba:5b:51:f6:ad:93:58:98:a5:1d:03:f7:
0e:36:f6:6e:c0:bd:a3:a7:2c:3b:a8:ff:00:43:f8:
38:cb:49:95:0c:f7:09:09:4c:da:40:05:14:96:f1:
46:92:6a:42:63:e2:35:01:ee:e5:15:9a:e8:4a:ef:
87:4d:59:59:d6:dd:3f:d2:f7:ea:29:9a:25:ac:f7:
b8:d6:c4:8f:01:6e:e4:74:f9:11:e6:f3:97:1f:b0:
b5:bc:33:40:bd:48:56:b3:0c:b3:cc:ab:18:ba:45:
98:72:be:9e:b1:26:13:15:1f:2e:b3:be:a7:87:ec:
d2:90:dd:1f:d3:3a:cf:8b:01:4b:55:d1:da:30:d7:
30:27:d4:61:5d:48:5f:82:00:44:84:7a:85:36:28:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C3:64:FB:E4:00:5D:57:E0:BC:36:CB:2F:FE:B1:41:C7:7A:39:E6
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.144.0-178.21.146.255
185.8.168.0/23
IPv6:
2a02:2c0::-2a02:2c0:2:ffff:ffff:ffff:ffff:ffff
2a02:2c0:10::/47
Signature Algorithm: sha256WithRSAEncryption
83:bd:7a:06:d0:ec:7a:75:c8:fd:3a:95:3f:76:69:01:ab:b7:
ad:17:0f:96:e0:11:d2:9b:1e:95:38:91:b0:34:14:f8:ae:50:
3e:01:a3:03:8b:26:0d:3c:f9:4e:1f:cf:cf:2e:ff:b8:5d:6e:
2d:1b:a6:ea:24:35:86:2e:b0:c1:48:98:8f:64:ed:87:15:f7:
aa:4a:37:54:cb:d4:d7:b1:1b:f6:94:6e:67:4a:26:52:9d:ff:
45:0d:3e:d5:b1:a4:2b:81:48:7b:72:a1:2f:d4:5b:48:14:fc:
a9:9c:ef:08:58:ae:ab:e6:e8:f1:a0:a1:b8:82:70:93:b3:b9:
f9:5b:9d:c1:dc:68:09:d0:25:ad:c4:7a:b8:91:9d:19:76:71:
3d:8c:54:79:41:42:a5:16:3a:f7:82:b1:7f:b1:9f:a4:2d:55:
65:6a:57:5f:27:df:a9:b1:18:99:3b:05:a3:72:f4:b0:01:9c:
c5:30:af:59:11:9c:01:1b:16:eb:62:6b:e0:bc:2d:dd:85:81:
c7:4a:9d:d6:1d:39:89:e6:12:bc:66:a7:8d:de:5f:a3:b3:c8:
14:63:69:92:9d:24:4e:91:ab:81:f3:03:2f:e8:3d:a7:6b:e4:
1f:18:b7:cb:24:09:61:c5:53:d0:39:58:80:c6:96:8b:f8:c5:
d2:de:62:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:30:26 2025 by rpki-client