Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/54dHE0jadLwCWG8zkr-DJUOEEaw.roa
File: 54dHE0jadLwCWG8zkr-DJUOEEaw.roa (raw, json)
Hash identifier: oNDnO3daYus3xELeZDv1QShW9ceHJLAT7TByuVM8qlM=
Subject key identifier: E7:87:47:13:48:DA:74:BC:02:58:6F:33:92:BF:83:25:43:84:11:AC
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 019424B3FE9BE87B2FB7A059F892DE810FA2
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/54dHE0jadLwCWG8zkr-DJUOEEaw.roa
Signing time: Thu 02 Jan 2025 01:49:23 +0000
ROA not before: Thu 02 Jan 2025 01:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 213.178.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fe:9b:e8:7b:2f:b7:a0:59:f8:92:de:81:0f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e787471348da74bc02586f3392bf8325438411ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:0c:78:17:09:ca:9d:80:ed:72:45:43:70:
17:33:b1:fd:2f:fa:fc:2e:94:41:fd:3b:c9:eb:44:
55:95:2a:b9:f3:4f:7c:0a:5b:ea:65:cf:df:f7:36:
75:a4:1d:ca:59:9b:67:2c:93:2e:59:aa:45:ad:27:
5e:b4:3e:2e:d4:43:08:00:6b:d7:6b:a8:04:86:80:
ff:ad:24:6b:38:58:ec:6d:65:2e:fe:c5:97:d2:47:
1f:98:3a:76:7f:75:06:9d:62:78:46:88:bb:56:77:
4f:c7:61:27:8a:3a:1b:eb:80:ed:f9:fc:72:7c:28:
0e:20:e8:60:89:24:c3:6a:4c:c3:50:86:24:80:3d:
14:ae:93:d2:b3:e0:09:e8:ae:16:35:c6:e4:ad:72:
78:0d:dc:54:04:af:92:90:5e:23:61:6f:8c:4d:1d:
00:a5:df:1d:f5:40:93:7b:15:26:08:2d:ad:52:ab:
e8:a2:ad:68:85:99:e8:d2:f7:a9:01:ae:bf:2b:2d:
40:ba:5e:84:55:f9:1e:36:e5:bc:ee:04:5c:ec:b5:
a7:5f:db:4d:5f:93:52:54:3a:b7:26:1d:4b:e5:94:
b6:b9:f0:87:fd:c1:02:b7:ac:ad:9b:d0:f4:c2:14:
26:85:36:eb:6a:83:c7:a5:6c:d9:94:fa:dc:d7:b0:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:87:47:13:48:DA:74:BC:02:58:6F:33:92:BF:83:25:43:84:11:AC
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/54dHE0jadLwCWG8zkr-DJUOEEaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.143.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:97:d7:07:3a:05:39:f0:38:47:5c:4b:13:06:7a:a9:76:ff:
93:b6:6a:b1:15:57:b1:ce:f4:90:36:43:79:95:a5:dc:8a:02:
e4:f2:06:4d:6d:e0:48:b3:51:43:be:50:9c:5a:37:e3:12:24:
4d:79:f6:30:6a:2a:e7:23:c7:c6:80:16:a2:ec:fa:b6:f0:e1:
94:78:f5:33:30:21:69:dd:d9:45:c1:85:e6:d1:7e:86:15:4f:
98:ed:41:42:ea:56:55:e2:f7:ac:b9:5f:19:e7:43:c2:1c:ed:
97:af:b2:9b:c5:3d:87:47:4d:34:e3:e4:6f:14:0b:5a:be:b3:
78:72:49:57:8f:cd:d5:de:5c:8d:10:5a:86:77:b3:e8:ef:ae:
99:3e:0a:11:56:a4:7c:0a:11:0b:9c:50:0b:63:9a:50:dc:90:
60:b8:14:b2:f9:b7:c4:62:16:81:30:c7:48:c9:db:e4:b5:cf:
9b:ce:2c:ef:6b:10:51:23:7a:df:82:17:d8:cd:c9:50:c4:ec:
f7:5c:07:a1:4b:02:56:db:9b:84:92:b6:de:68:9e:28:3f:9a:
59:45:3a:54:fa:07:6a:e2:0f:e5:ed:7d:d2:66:2a:09:8d:bc:
54:51:84:bd:da:f7:03:ca:8f:be:d3:a6:b0:e8:d5:12:47:15:
f0:46:11:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:51 2025 by rpki-client