Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/CkF_shnLM2M31f9NtC6ofpAehWk.roa
File: CkF_shnLM2M31f9NtC6ofpAehWk.roa (raw, json)
Hash identifier: 9XHscVm5GJVGw7mr6oC1JuCI9DQ/dY6py+7xzxUKvgw=
Subject key identifier: 0A:41:7F:B2:19:CB:33:63:37:D5:FF:4D:B4:2E:A8:7E:90:1E:85:69
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01941FFA550B80FDCE33484E0AE74E4BD937
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/CkF_shnLM2M31f9NtC6ofpAehWk.roa
Signing time: Wed 01 Jan 2025 03:48:06 +0000
ROA not before: Wed 01 Jan 2025 03:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57776
IP address blocks: 178.175.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:55:0b:80:fd:ce:33:48:4e:0a:e7:4e:4b:d9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a417fb219cb336337d5ff4db42ea87e901e8569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:bf:1a:f3:34:26:bd:a4:e1:06:9a:12:e6:
e7:0d:fc:15:f1:f6:3d:3e:9d:57:1c:84:19:4b:16:
dd:28:f6:59:69:38:c6:21:a2:95:b7:cd:ac:a2:94:
bf:61:b9:8c:f4:59:a8:19:42:7b:3f:91:c0:48:e4:
3c:bd:6d:3e:da:d3:d2:19:1f:ed:ad:70:17:f4:07:
8b:36:e2:24:92:83:31:8a:c8:91:b7:46:a4:55:73:
e6:61:12:6d:00:24:90:24:8b:98:f6:e2:e8:5d:cf:
b6:18:85:42:a4:c0:6c:42:29:51:8e:b8:b0:e0:93:
31:b2:bf:06:90:12:1f:b9:92:d5:20:69:8b:af:b8:
b4:a4:06:d1:87:4c:00:50:2f:f7:56:ff:cb:6f:76:
65:ad:73:c3:ec:a9:3c:bb:a3:ec:a4:f8:e0:5a:9f:
11:55:b9:db:b6:e1:c5:5e:80:d4:5a:e7:9a:c2:df:
e6:d1:36:b6:eb:f9:32:5f:08:62:3a:ff:a0:59:02:
38:6f:64:c9:60:90:52:ac:dc:22:71:0a:8d:06:05:
9e:c4:c2:f5:15:fe:17:d5:b5:82:99:bf:5c:1a:c8:
a8:79:4c:8a:23:c8:50:db:81:d6:8f:a1:98:2c:b1:
75:87:9f:a0:27:89:62:b2:e4:7e:e3:6a:e9:eb:ee:
3d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:41:7F:B2:19:CB:33:63:37:D5:FF:4D:B4:2E:A8:7E:90:1E:85:69
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/CkF_shnLM2M31f9NtC6ofpAehWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.156.0/23
Signature Algorithm: sha256WithRSAEncryption
14:f2:6e:b5:f8:ee:09:23:e5:a8:30:ff:97:10:eb:86:cc:b8:
40:54:85:f1:15:75:15:a6:3a:ef:22:6e:fe:e2:4d:62:b5:ce:
66:84:98:63:8e:63:e8:6c:ec:a6:c4:29:8b:69:54:e8:b7:9a:
c9:43:7f:81:45:d7:59:7e:3a:ea:d2:5c:13:ee:12:5c:58:8c:
27:5d:ff:d8:8d:a8:a7:60:1e:be:7d:d1:11:a6:fe:d4:96:e4:
2e:9e:14:8c:49:52:24:0c:e6:b0:b4:f0:e1:be:d6:68:5a:fc:
56:df:a6:fd:ca:c3:fe:0b:aa:8f:f1:32:fb:f9:a3:40:7b:1e:
c2:1d:e2:d7:a9:46:99:01:30:2b:b6:d4:55:c4:38:c8:69:73:
62:91:b4:bf:5a:ae:e1:a1:c6:de:bb:5a:ef:e2:88:1a:7d:6f:
1e:0e:99:13:a2:fb:fe:61:b1:85:f4:97:a3:d7:d8:a2:f9:f2:
60:5c:f4:53:2d:b2:d4:71:40:d8:f1:fd:7a:03:cb:b4:90:9d:
f8:05:6d:c5:c0:34:ca:67:54:df:44:92:2b:c2:fc:2c:05:4f:
51:a9:c3:ae:a8:e3:18:45:1c:8e:8a:7d:33:c0:72:8b:96:4b:
3d:40:0e:1e:dc:2c:3c:57:19:21:89:74:17:d8:a6:4b:d3:25:
5d:e3:d5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:39 2025 by rpki-client