Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/izV8LD-KWyx4ph9YXGyEe0qtgqI.roa
File: izV8LD-KWyx4ph9YXGyEe0qtgqI.roa (raw, json)
Hash identifier: 2FIdcaPo0XlL7Qk8UA/+1ue/720HntDktGQmgSyMUIw=
Subject key identifier: 8B:35:7C:2C:3F:8A:5B:2C:78:A6:1F:58:5C:6C:84:7B:4A:AD:82:A2
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019588F850B1AFCBF272BA12574F8109DD9D
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/izV8LD-KWyx4ph9YXGyEe0qtgqI.roa
Signing time: Wed 12 Mar 2025 06:08:49 +0000
ROA not before: Wed 12 Mar 2025 06:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 178.239.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:88:f8:50:b1:af:cb:f2:72:ba:12:57:4f:81:09:dd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Mar 12 06:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b357c2c3f8a5b2c78a61f585c6c847b4aad82a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:db:55:8a:d9:1d:1d:61:94:3c:8a:85:44:
67:df:51:51:46:f0:36:39:b7:58:42:92:e3:7a:46:
b0:1a:d9:85:f3:6b:4c:93:81:9e:78:36:57:1c:0c:
aa:c0:51:48:34:c3:19:e9:bd:55:d5:e5:39:81:c6:
65:20:64:f1:36:8a:cf:81:c8:a6:24:cf:03:ae:79:
45:85:75:72:e2:f9:1c:c7:2a:b8:9b:f3:17:48:f0:
4e:4c:91:f1:c4:28:24:d4:38:0b:87:42:a0:7e:43:
0a:43:f0:f3:a6:27:bb:8a:2a:57:60:2a:6f:05:b9:
b2:07:a2:5e:9c:f6:31:41:27:36:7f:b0:96:62:22:
e5:4a:21:e8:8e:f8:2d:b2:82:01:fc:1a:f9:ed:7b:
34:02:94:0e:d9:db:9c:b6:1a:d3:2c:ce:dc:a7:ec:
c0:42:de:f8:0e:41:86:bf:34:e4:32:75:a0:06:f7:
ec:6d:a2:06:32:68:63:7c:1e:09:b3:2e:d9:a5:be:
26:8f:a7:e1:62:8e:4e:57:62:1f:2d:4d:15:95:36:
83:0f:f1:e1:0b:8d:f8:34:95:59:0d:57:44:45:20:
22:e7:0f:d6:eb:97:1d:84:a9:f3:e8:fc:3f:6e:c6:
3a:29:6c:0f:be:3b:ed:a6:62:3f:f9:d7:0c:e6:74:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:7C:2C:3F:8A:5B:2C:78:A6:1F:58:5C:6C:84:7B:4A:AD:82:A2
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/izV8LD-KWyx4ph9YXGyEe0qtgqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:34:0a:62:df:a3:a0:6b:26:44:5b:dc:3f:29:6b:76:ef:8e:
fe:1c:28:d2:b6:b3:67:8d:f1:28:75:91:99:d3:b8:d9:38:ce:
0e:51:01:b2:3d:0a:a2:c7:1c:ac:21:f9:c2:b1:cc:80:6d:08:
ff:c6:ec:04:62:99:69:5a:ea:a9:f2:b9:78:dc:78:ea:bb:9c:
cc:e8:e8:d7:af:e8:9b:10:d3:a5:d6:8a:be:cd:4f:5a:33:61:
91:c8:28:2f:9b:5d:fd:4d:2b:c0:be:24:14:a8:d7:77:6d:94:
d9:2c:b5:6c:68:45:77:0b:e2:eb:63:be:89:f9:ac:29:db:f7:
8d:20:55:7e:24:df:48:38:23:e8:f1:4d:9e:84:e9:7a:bc:84:
90:c3:92:8b:69:a5:25:cb:d5:8b:38:28:8f:de:31:ba:ff:13:
08:86:81:1e:6d:78:49:55:3d:1b:04:1c:88:1a:04:b6:7b:ab:
f3:68:2f:1a:6a:60:80:ca:24:d0:d3:95:f0:3f:b8:f8:6e:e4:
bf:88:8f:e7:2d:d2:5b:c8:45:9e:6f:a8:ea:5c:e6:7c:50:59:
13:23:fc:53:9b:5f:22:6b:c2:bc:40:c4:fb:60:6b:d3:63:1a:
95:d6:ed:b8:9f:44:25:86:bb:91:24:2c:72:36:4a:96:03:b4:
6b:be:27:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:40 2025 by rpki-client