Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/zWFnBYi2bDZbiA-mUuHFXQJuxq0.roa
File: zWFnBYi2bDZbiA-mUuHFXQJuxq0.roa (raw, json)
Hash identifier: 1OSU3XRWTzL8HY4BNHPOmUJFHXshesumGYGy5pbRMk8=
Subject key identifier: CD:61:67:05:88:B6:6C:36:5B:88:0F:A6:52:E1:C5:5D:02:6E:C6:AD
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 39C04B1D
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/zWFnBYi2bDZbiA-mUuHFXQJuxq0.roa
Signing time: Mon 20 Jun 2022 13:51:45 +0000
ROA not before: Mon 20 Jun 2022 13:51:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211279
IP address blocks: 178.175.178.0/23 maxlen: 23
178.175.177.0/24 maxlen: 24
178.175.176.0/23 maxlen: 23
178.175.176.0/24 maxlen: 24
178.175.175.0/24 maxlen: 24
178.175.174.0/23 maxlen: 23
178.175.174.0/24 maxlen: 24
178.175.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 968903453 (0x39c04b1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jun 20 13:51:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd61670588b66c365b880fa652e1c55d026ec6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:24:db:4b:4c:ad:f2:34:f5:79:ec:2b:67:
ea:9f:68:ff:b4:51:92:d7:2a:02:1c:73:de:63:ed:
58:a0:2c:d8:2c:2e:1a:29:70:9e:49:40:ad:e8:e7:
d5:15:66:80:2a:45:88:60:6f:56:c9:39:db:9d:9b:
30:66:89:20:02:14:85:16:8a:84:96:ba:61:71:23:
70:fa:b9:94:28:fa:57:44:d7:6c:31:1b:70:f2:48:
02:8d:87:54:ff:dd:fc:84:67:ac:60:c3:00:b5:be:
ee:6e:f1:de:b0:20:46:88:2a:73:33:59:e2:c0:d3:
52:7b:1f:e3:88:92:4b:d4:59:a0:85:11:44:87:51:
b0:4a:09:16:e2:ae:34:d5:9b:d1:8f:1a:42:3e:f8:
43:94:07:4c:77:a4:47:49:f0:a4:0e:db:f2:d5:b1:
4a:11:4a:d3:3f:36:8f:66:a7:72:22:38:6b:56:6c:
a8:90:34:60:54:5d:ad:40:60:c1:9f:04:fc:50:11:
6f:db:bf:c4:70:4a:1a:59:f3:bc:03:40:6e:a7:e6:
13:71:bd:d3:ae:cd:4a:99:62:9b:ee:2e:d8:d9:e7:
57:1f:af:44:cd:90:03:5c:9c:04:78:bf:e0:25:a0:
2f:6a:47:d4:7a:1f:bb:50:f6:26:f2:72:66:d9:17:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:61:67:05:88:B6:6C:36:5B:88:0F:A6:52:E1:C5:5D:02:6E:C6:AD
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/zWFnBYi2bDZbiA-mUuHFXQJuxq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.174.0-178.175.179.255
Signature Algorithm: sha256WithRSAEncryption
0c:53:eb:b7:1d:6f:a6:fa:ee:51:b8:de:53:bb:fa:f1:d5:a4:
99:a6:b8:c8:7b:00:02:ca:a8:4a:5d:1e:b6:f6:8e:cb:97:41:
ab:2e:ab:9e:58:60:e4:b7:ef:72:66:5f:eb:bc:92:78:3b:6f:
f0:ac:21:46:66:c7:21:fe:24:9f:5d:92:d8:22:0e:d6:26:7b:
ad:24:ac:2f:c0:4e:a4:fa:94:3a:b2:92:23:e3:27:5d:ff:4f:
ee:5d:13:39:66:19:8f:22:ba:4b:ef:4d:4e:db:0b:33:70:42:
5b:d9:ce:c5:bb:95:3e:4b:9a:76:64:b7:91:7d:5d:77:70:c2:
c0:67:16:a0:19:61:6d:12:40:d3:b1:f6:a4:bb:af:9a:20:c4:
aa:43:76:a0:b4:59:12:16:5c:ed:59:2f:e3:1d:30:25:6b:94:
3f:0f:38:cc:2b:6d:7a:5a:6f:01:8e:cd:3a:a7:01:40:2e:f0:
32:ce:a1:0b:8c:23:53:45:55:fa:70:ce:59:47:51:a2:ea:0b:
a4:e7:19:ce:0a:fa:e7:8a:a8:81:bd:30:71:f7:d3:32:68:0a:
a0:bf:63:10:80:2e:2a:15:13:a1:75:23:60:65:fb:ac:eb:3f:
78:ba:38:23:49:29:7f:8c:24:77:90:e6:dd:13:1b:9e:2a:ba:
8c:f4:91:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:38 2025 by rpki-client