Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/V-ySkVo6AJD2k7bi0FwLmTw722g.roa
File: V-ySkVo6AJD2k7bi0FwLmTw722g.roa (raw, json)
Hash identifier: ZQrxU4+RIDKWDuYxdvlV6VUP5fCT7nrPCzOEdrO784k=
Subject key identifier: 57:EC:92:91:5A:3A:00:90:F6:93:B6:E2:D0:5C:0B:99:3C:3B:DB:68
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01941FFA572B215C99A6EF5628BEF4553400
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/V-ySkVo6AJD2k7bi0FwLmTw722g.roa
Signing time: Wed 01 Jan 2025 03:48:07 +0000
ROA not before: Wed 01 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216303
IP address blocks: 178.175.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:57:2b:21:5c:99:a6:ef:56:28:be:f4:55:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57ec92915a3a0090f693b6e2d05c0b993c3bdb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:5e:d1:f5:a0:d8:e2:7d:f3:7f:24:07:de:
4b:26:8a:9c:9d:2e:25:b4:fa:5f:d2:31:b2:ed:e8:
78:0c:ce:74:d6:aa:4a:43:98:aa:47:fc:e9:18:06:
59:22:25:a1:89:ee:85:a6:ac:6a:ea:ac:fe:ed:f4:
61:fc:96:68:89:ea:02:f2:fe:93:36:11:03:f7:e6:
5d:62:16:50:98:0f:70:13:08:5c:fe:0c:41:18:9f:
af:25:ca:2d:7e:39:0f:4b:4f:20:fb:5a:37:88:c4:
34:0c:88:85:35:4b:d1:a0:ac:09:e1:44:ef:c8:31:
71:d0:60:18:9e:c9:e9:c2:b8:58:15:2c:64:a9:30:
17:9f:aa:1f:b6:81:a0:60:8e:a3:de:7d:2b:08:57:
7a:fd:e1:e9:ff:86:36:b0:01:c4:03:a3:5a:30:d3:
fa:39:60:5e:1e:83:80:3f:e5:b1:89:87:a1:fa:23:
d9:a8:45:e4:b7:4f:bd:08:36:3b:fd:b7:22:e9:9e:
c8:12:6f:23:94:da:60:74:4b:a1:75:54:c3:13:83:
72:45:48:f7:eb:98:b6:ba:f6:70:b7:87:21:f2:e8:
62:f8:6b:6e:fb:c8:ca:06:21:66:6f:7f:4e:6d:75:
0a:c1:e1:75:39:21:e5:03:a9:f7:d4:2c:3e:02:55:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EC:92:91:5A:3A:00:90:F6:93:B6:E2:D0:5C:0B:99:3C:3B:DB:68
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/V-ySkVo6AJD2k7bi0FwLmTw722g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.173.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:dc:6d:b0:fc:5a:4f:f3:45:1b:22:40:7c:1e:0f:51:28:eb:
69:3a:fc:c3:10:0e:b4:ed:fe:8d:31:6a:da:1f:e4:76:92:d1:
b8:c3:ff:15:8d:0b:7d:47:81:35:66:d0:27:01:36:15:6c:90:
df:79:34:9c:73:05:8d:62:27:42:d3:5c:39:93:d0:51:d9:39:
4f:36:97:52:90:a5:cf:5c:c8:ce:b7:bd:19:3e:88:5a:77:bf:
ce:55:08:0a:3d:7d:bc:10:95:62:df:e1:c3:cf:af:49:79:34:
63:f7:14:0f:b4:8c:b9:1a:90:64:10:c3:33:d2:48:ea:a0:60:
01:4d:45:56:e3:83:6e:ba:bc:c7:6f:12:0a:53:c0:01:86:12:
b3:a0:e4:c8:b2:4d:15:1d:d4:42:b6:d0:ae:cb:f8:fe:1d:b3:
f6:f9:5d:21:ea:31:df:ea:56:61:45:b8:61:6f:5f:58:37:ae:
98:0f:c6:b9:95:ef:a4:11:97:f6:9c:65:0b:1e:16:bf:98:23:
3e:de:e0:28:76:0a:04:f0:20:36:90:99:52:9a:de:a0:90:5c:
dc:45:79:1f:82:f2:d9:eb:30:66:87:ee:46:39:b4:7b:c9:77:
bc:5a:88:dd:a8:71:12:3d:c2:4d:52:17:a4:3f:ce:2a:1b:cf:
88:50:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:06 2025 by rpki-client