Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/ha25ToUc3hy6XpsOv66_KAAFZfg.roa
File: ha25ToUc3hy6XpsOv66_KAAFZfg.roa (raw, json)
Hash identifier: 6tSFpWTb+Nw4ORwTVhnRDUK8QpvPm4RoA8MapI/2opw=
Subject key identifier: 85:AD:B9:4E:85:1C:DE:1C:BA:5E:9B:0E:BF:AE:BF:28:00:05:65:F8
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 019512F7C6A309F38A33C97A3F0F54D4CC2F
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/ha25ToUc3hy6XpsOv66_KAAFZfg.roa
Signing time: Mon 17 Feb 2025 08:13:02 +0000
ROA not before: Mon 17 Feb 2025 08:13:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60464
IP address blocks: 178.210.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:f7:c6:a3:09:f3:8a:33:c9:7a:3f:0f:54:d4:cc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Feb 17 08:13:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85adb94e851cde1cba5e9b0ebfaebf28000565f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:aa:ce:2b:8c:39:67:68:ea:8b:dd:ea:28:
22:79:76:22:27:b2:60:c3:60:90:b1:ba:b4:49:98:
a1:d8:bd:91:4f:49:25:2a:a4:b6:16:88:f1:df:8c:
82:f5:1e:f9:d6:ac:ca:40:1a:55:5c:31:02:bd:fa:
ba:5b:e1:ac:8f:77:d0:78:21:fd:96:ad:e4:18:8e:
17:4c:96:3c:b8:45:1a:84:9f:96:be:3d:07:b5:4a:
7e:4b:7c:53:f0:b2:01:4d:5d:5d:d8:b3:24:ca:fc:
54:14:a0:ce:fd:0e:42:5e:81:3b:d9:c0:10:ea:dc:
0b:ed:08:af:04:23:b1:9c:78:dd:48:25:8b:dc:ab:
5e:dd:bb:7f:9a:0d:00:c4:4a:a8:85:dd:5c:7f:86:
37:05:36:70:9b:bc:c6:6a:ee:45:90:b0:77:5c:43:
4f:9a:45:3b:f0:d1:46:6e:54:5f:27:f1:d0:a6:bf:
2a:39:61:9c:62:23:03:a0:4f:a7:7c:52:06:0e:4f:
d1:d6:d9:88:f8:96:73:a3:ae:11:85:dc:4a:71:6f:
d6:17:38:f2:7f:54:3b:15:d7:35:f4:1a:d9:6f:ff:
a4:15:c5:78:dd:ca:13:d6:a8:9d:6b:1a:da:48:36:
b5:99:8d:a4:de:5a:9a:fe:0b:0e:8d:b8:78:80:36:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:B9:4E:85:1C:DE:1C:BA:5E:9B:0E:BF:AE:BF:28:00:05:65:F8
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/ha25ToUc3hy6XpsOv66_KAAFZfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
57:e6:75:6a:6c:db:3f:6a:c0:a5:80:6c:7d:81:75:c9:2c:be:
ca:1b:71:f0:f3:6d:b5:51:d6:7c:f2:f1:e9:df:28:bb:a0:7f:
e4:48:03:77:19:41:73:6b:67:ec:c7:32:e7:6e:89:52:8f:6c:
47:ac:e3:bf:ea:e1:dd:21:8f:f0:7d:91:e4:17:64:91:12:c6:
5d:e8:77:88:c3:05:a4:7d:aa:ef:d2:bb:3e:a6:47:f4:62:94:
78:3a:24:35:21:61:c9:d7:1d:17:4e:43:be:b5:8d:1e:ca:85:
43:7b:22:d4:a3:63:04:97:cb:ac:9f:b3:57:96:ee:a9:da:b5:
c3:68:a0:52:47:99:50:7c:da:98:c3:c8:1a:0c:6d:05:77:fb:
f1:f7:48:74:5d:59:f7:ab:5f:bf:81:db:32:10:4e:62:24:48:
42:18:c4:34:33:66:e8:50:8a:d4:c1:f4:ab:bc:79:4b:fc:8d:
63:df:0c:d0:c2:6f:c6:66:e4:63:d1:10:d5:e1:58:f4:1c:c1:
32:36:67:44:ea:ae:b6:ec:5c:3f:56:9a:37:fc:e6:73:ca:3b:
98:a4:d0:72:1d:d5:cc:41:7d:55:c4:78:b9:c6:92:b7:5a:0a:
a8:51:44:d2:39:57:7a:f2:50:ad:c4:6a:1b:96:3d:6a:f4:5d:
ac:af:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:23:09 2025 by rpki-client