Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/wxYcvuiVYPBnIIHcytdFYVNI-mM.roa
File: wxYcvuiVYPBnIIHcytdFYVNI-mM.roa (raw, json)
Hash identifier: lbR6Sfwm9uTEWwPEzCyPUjKeObkDkLel71RkLT7h6OY=
Subject key identifier: C3:16:1C:BE:E8:95:60:F0:67:20:81:DC:CA:D7:45:61:53:48:FA:63
Certificate issuer: /CN=a580fe47b417c8730f857b6536f0df1a635ea852
Certificate serial: E45603
Authority key identifier: A5:80:FE:47:B4:17:C8:73:0F:85:7B:65:36:F0:DF:1A:63:5E:A8:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYD-R7QXyHMPhXtlNvDfGmNeqFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/wxYcvuiVYPBnIIHcytdFYVNI-mM.roa
Signing time: Sun 20 Feb 2022 14:37:14 +0000
ROA not before: Sun 20 Feb 2022 14:37:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10103
IP address blocks: 178.22.30.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14964227 (0xe45603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a580fe47b417c8730f857b6536f0df1a635ea852
Validity
Not Before: Feb 20 14:37:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3161cbee89560f0672081dccad745615348fa63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:4b:40:81:ac:78:0c:eb:b8:e3:d6:14:ba:
7d:22:a4:77:21:73:93:63:18:f5:b1:98:f0:b0:64:
17:c2:7d:d1:b4:b7:e1:93:41:38:24:f8:72:c4:f4:
5f:a4:32:0f:36:12:05:b0:64:12:58:c1:d0:af:a0:
60:ea:fb:b6:6b:49:11:b9:42:60:d4:6c:b7:84:89:
84:11:bc:ea:f5:67:fc:98:4a:06:c9:db:e3:9b:dc:
9b:3e:b2:c8:07:b6:f5:99:a7:f0:af:68:ac:71:dc:
a1:68:81:f1:43:7f:b8:51:43:38:a5:df:5b:5f:3f:
00:d4:b1:f8:50:60:a1:46:ee:0e:88:b5:dc:de:6f:
93:1e:ec:eb:80:89:cd:c9:1b:47:5d:eb:7f:65:40:
b0:c8:4f:a5:bf:74:b1:25:dd:17:11:96:3c:35:56:
a1:df:c8:ee:3a:99:03:48:02:5b:ba:cf:7e:ff:c3:
c8:9f:5d:ff:c8:80:6c:85:30:dc:d2:45:ae:62:8e:
91:fc:96:2a:46:75:a7:b1:85:19:68:d8:4f:a2:bd:
4f:2c:70:c0:bc:4e:11:31:7e:6f:95:2d:b9:7b:0b:
1a:1d:e3:ab:19:2e:d3:54:9e:9a:43:be:60:af:9d:
3e:0e:36:e3:55:da:67:bc:95:2e:f7:0b:7a:80:05:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:16:1C:BE:E8:95:60:F0:67:20:81:DC:CA:D7:45:61:53:48:FA:63
X509v3 Authority Key Identifier:
keyid:A5:80:FE:47:B4:17:C8:73:0F:85:7B:65:36:F0:DF:1A:63:5E:A8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYD-R7QXyHMPhXtlNvDfGmNeqFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/wxYcvuiVYPBnIIHcytdFYVNI-mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/49af8e-881c-4212-9336-a6e53026852d/1/pYD-R7QXyHMPhXtlNvDfGmNeqFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:23:29:28:13:5b:7d:90:a8:3d:78:9f:f7:51:bc:b8:b9:f6:
b8:cc:b2:ff:fb:0a:ca:76:81:7d:77:6b:13:dd:a2:66:c4:8f:
6d:5a:1f:61:db:86:42:bc:02:e5:9f:ab:71:90:02:a2:e5:33:
3a:91:cf:8d:85:09:99:3f:7c:f9:7c:47:c9:df:ca:b2:4e:02:
4f:37:78:15:f1:8e:57:1c:82:f4:24:32:90:37:64:c5:a0:96:
9b:29:0b:c8:87:0c:34:94:f4:91:cc:0e:00:75:58:89:28:c7:
b2:56:72:23:cd:f4:aa:0f:64:0e:49:51:89:ac:91:a6:a1:66:
1f:a6:d2:c5:4d:ce:f8:8a:2b:53:0f:ef:4b:9c:c9:8c:94:c8:
81:7d:e1:ef:51:ba:98:5c:57:12:c2:a0:0d:88:2d:e0:c6:32:
34:bf:b9:68:9e:dd:17:d3:ca:1b:a8:e6:3f:57:f8:7e:58:c3:
9e:e7:83:9a:62:0c:65:7f:df:70:82:32:62:9a:c6:3e:05:da:
63:f5:05:c9:64:7f:de:87:c9:63:b1:06:45:b6:78:af:4d:f7:
57:ec:ec:09:71:a1:d8:fe:99:2e:2c:cd:9c:9d:7e:d6:7a:d4:
83:dc:e8:ea:5c:38:ff:b8:45:8b:6a:61:55:8e:85:8c:33:52:
df:be:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:18 2025 by rpki-client