Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/W9C9nkbMtuG9_gG2sTGB_V7COD8.roa
File: W9C9nkbMtuG9_gG2sTGB_V7COD8.roa (raw, json)
Hash identifier: CLsk3PyvD6v1wvu3wT5LxQNtviCSV3ZGz45paYgNtTs=
Subject key identifier: 5B:D0:BD:9E:46:CC:B6:E1:BD:FE:01:B6:B1:31:81:FD:5E:C2:38:3F
Certificate issuer: /CN=a580fe47b417c8730f857b6536f0df1a635ea852
Certificate serial: 0184A8AC5378C5C5D1535E740BB170EA4704
Authority key identifier: A5:80:FE:47:B4:17:C8:73:0F:85:7B:65:36:F0:DF:1A:63:5E:A8:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYD-R7QXyHMPhXtlNvDfGmNeqFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/W9C9nkbMtuG9_gG2sTGB_V7COD8.roa
Signing time: Thu 24 Nov 2022 08:06:16 +0000
ROA not before: Thu 24 Nov 2022 08:06:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201106
IP address blocks: 178.22.30.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a8:ac:53:78:c5:c5:d1:53:5e:74:0b:b1:70:ea:47:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a580fe47b417c8730f857b6536f0df1a635ea852
Validity
Not Before: Nov 24 08:06:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bd0bd9e46ccb6e1bdfe01b6b13181fd5ec2383f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:18:73:6f:6c:da:3a:b8:44:3d:14:fc:d5:
19:c7:e7:f6:86:3b:f4:ba:80:27:84:24:9f:1b:71:
ce:29:09:31:3d:ce:12:e6:65:f4:f9:23:91:be:ef:
93:f3:e7:df:b7:4e:86:1f:a4:20:0f:d9:f7:fd:12:
2f:25:6a:ed:cc:38:96:a9:ce:dc:d5:04:88:a8:5f:
48:d4:60:f0:a7:49:bc:49:11:c2:f5:97:a6:00:3e:
f7:85:a5:cb:f3:95:21:02:e6:a0:d1:df:87:01:e8:
45:87:e2:70:9a:c0:24:98:7d:67:75:58:e3:c9:d3:
59:4b:b7:2c:60:76:83:26:18:21:b3:f6:89:3b:22:
fe:31:c6:5c:bb:76:1f:0e:23:e4:e0:b8:ae:e5:45:
04:f8:62:bc:b8:bd:cf:6b:87:62:d5:b6:fd:17:cb:
6d:4b:af:e8:00:36:0d:6b:e6:95:cb:16:37:60:d7:
c6:c8:ae:fc:13:7f:45:c6:b0:ea:ac:96:61:fe:15:
b7:7d:54:c7:ec:bb:17:76:1e:2f:8b:07:d4:5d:ca:
64:b4:f5:5a:3e:08:f8:91:66:be:1c:e7:48:66:b7:
8f:79:14:e4:4e:1b:a7:f0:d9:95:0d:2e:a3:c9:31:
27:11:db:5c:f2:5b:59:06:0e:21:2e:43:8c:f4:f4:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D0:BD:9E:46:CC:B6:E1:BD:FE:01:B6:B1:31:81:FD:5E:C2:38:3F
X509v3 Authority Key Identifier:
keyid:A5:80:FE:47:B4:17:C8:73:0F:85:7B:65:36:F0:DF:1A:63:5E:A8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYD-R7QXyHMPhXtlNvDfGmNeqFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/W9C9nkbMtuG9_gG2sTGB_V7COD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/pYD-R7QXyHMPhXtlNvDfGmNeqFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.30.0/24
Signature Algorithm: sha256WithRSAEncryption
37:6a:01:3a:0b:04:b1:8e:dd:b2:36:29:7d:e2:c7:fc:b8:21:
dc:21:86:7b:fe:35:66:aa:be:a3:d6:09:cb:f7:ea:0c:96:32:
a2:7b:2d:98:91:5f:2c:7e:53:da:9d:16:77:9b:9f:6c:21:03:
be:86:02:e4:e3:b1:4a:a0:99:3f:1e:0c:4d:10:5f:1c:38:c1:
2c:e8:a9:c2:5d:1b:84:99:b5:3d:8d:0b:13:7e:3b:3c:42:1d:
62:79:b2:b6:26:80:64:60:3a:b6:fa:b9:50:fe:64:16:66:d0:
8f:74:ef:2d:66:43:5c:d8:f1:4e:97:86:52:70:c9:cc:25:ed:
4e:a7:00:d2:fb:19:f8:07:43:2b:55:b3:42:a6:55:fc:80:da:
b5:d7:9b:bb:cb:ac:ab:b3:db:61:c8:1c:e9:29:4e:65:ad:d1:
a7:e7:45:6c:42:4b:7d:76:7a:9b:23:dc:d2:42:e1:30:30:24:
40:c3:a4:b5:ed:b3:43:0a:e3:79:0c:4d:c7:c8:43:ba:c2:df:
b2:b4:5c:ff:40:1a:fa:15:59:9b:69:d9:61:49:9f:2e:d9:4c:
ae:ca:8c:36:89:27:f5:15:2f:3e:aa:9f:30:2a:ae:14:4f:bf:
db:ec:ca:77:4c:2b:49:1a:bf:89:d1:13:3e:3f:88:6e:3b:6e:
72:f7:0f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:40 2025 by rpki-client