Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/itTVy05KXbjBfmcjzdcEDVdPSEA.roa
File: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (raw, json)
Hash identifier: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=
Subject key identifier: 8A:D4:D5:CB:4E:4A:5D:B8:C1:7E:67:23:CD:D7:04:0D:57:4F:48:40
Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial: 019428273AFD64E365112C0AC227F922DD11
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/itTVy05KXbjBfmcjzdcEDVdPSEA.roa
Signing time: Thu 02 Jan 2025 17:54:06 +0000
ROA not before: Thu 02 Jan 2025 17:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198916
IP address blocks: 178.23.200.0/24 maxlen: 24
178.23.201.0/24 maxlen: 24
178.23.202.0/23 maxlen: 24
178.23.204.0/23 maxlen: 24
178.23.206.0/23 maxlen: 24
178.23.206.0/24 maxlen: 24
178.23.207.0/24 maxlen: 24
185.109.68.0/22 maxlen: 24
2a01:6080::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:3a:fd:64:e3:65:11:2c:0a:c2:27:f9:22:dd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Validity
Not Before: Jan 2 17:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ad4d5cb4e4a5db8c17e6723cdd7040d574f4840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:e2:d8:fd:bd:b8:c4:24:74:c1:5a:32:8a:
f9:02:36:42:ce:5c:0d:7e:a0:b8:fa:af:d3:91:7b:
76:05:4a:00:3c:12:ce:c6:21:d2:0c:36:5d:49:f0:
7d:ad:73:55:81:44:eb:86:69:48:a0:0c:f0:ce:c3:
4b:ec:25:c2:b2:b2:e8:7b:7e:59:70:4f:ac:5c:34:
84:03:bb:d1:9b:ec:48:83:70:8a:43:f6:81:c9:a3:
3e:7b:cd:d2:a2:96:57:3f:0a:de:e6:9f:ae:56:20:
d5:39:c9:c9:3e:e8:33:81:c8:81:f5:44:85:5e:ec:
3b:3b:85:39:03:f7:b5:58:c0:a4:46:a1:92:2c:7a:
27:ac:66:04:f1:56:d7:df:ac:93:70:27:96:7d:a9:
2a:79:9c:e4:c2:cb:a9:31:e6:0f:c2:f0:33:d3:56:
91:26:80:1b:8b:32:d0:7f:78:c8:ea:00:21:91:3e:
3a:ee:37:b4:61:52:65:79:07:07:77:50:d9:43:32:
f0:4f:42:4f:37:a9:25:de:1c:3b:3f:30:40:fc:9a:
74:e8:5f:4d:b8:4c:4b:b4:be:f0:a1:47:fe:93:98:
98:d6:b3:e2:ec:85:3a:4a:b5:60:89:3b:ea:73:1c:
fd:70:fd:be:4d:f0:2a:e9:9e:f1:bc:d3:be:82:46:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D4:D5:CB:4E:4A:5D:B8:C1:7E:67:23:CD:D7:04:0D:57:4F:48:40
X509v3 Authority Key Identifier:
keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/itTVy05KXbjBfmcjzdcEDVdPSEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.200.0/21
185.109.68.0/22
IPv6:
2a01:6080::/32
Signature Algorithm: sha256WithRSAEncryption
0a:77:56:d8:ce:ed:c1:0f:9d:6a:7d:eb:5e:78:ce:3e:32:19:
3f:61:5a:e3:27:5b:84:b9:8a:20:1b:f6:23:94:5c:d6:85:58:
cc:51:ba:76:9d:ef:ab:a9:76:f7:fb:45:a2:a5:7f:5b:9d:3b:
be:3e:a3:5c:02:2e:ec:e0:62:06:c7:e9:6c:53:9f:f8:f8:4b:
30:de:a3:93:7d:7b:a7:de:47:81:74:33:64:29:a5:00:4d:53:
16:2b:0b:dd:d0:b1:9d:0a:3b:78:3f:df:0f:dc:14:4a:72:a3:
7b:6a:47:88:df:20:ce:60:4d:25:6d:0d:bb:7b:67:65:b8:78:
24:1d:62:55:1d:0f:11:39:26:c6:6f:ad:97:e8:8a:3a:3e:38:
ab:8a:6a:c6:a1:1c:dd:c9:5d:5f:84:53:13:d2:6f:65:76:76:
23:b2:66:0c:f6:63:76:dd:79:83:e9:6e:fb:c2:2a:c2:06:57:
c7:b7:00:aa:bf:cc:80:42:e3:11:7d:dd:b9:3f:1f:76:34:79:
99:ab:08:d8:c6:e3:35:b7:da:68:97:42:12:47:32:1e:ff:de:
52:17:e8:b8:ac:f2:ca:86:3d:f3:bd:08:06:b0:95:3b:18:42:
14:07:1d:05:14:93:38:df:49:39:4a:a7:6c:d9:38:bb:97:f6:
05:b6:ae:f6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQoJzr9ZONlESwKwif5It0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmNlOGYwOGI1ZWZjNDRhZmFmOGQ3MDYzZTFhZTk1MTgy
NTE0MmIwHhcNMjUwMTAyMTc1NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWQ0ZDVjYjRlNGE1ZGI4YzE3ZTY3MjNjZGQ3MDQwZDU3NGY0ODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B7i2P29uMQkdMFaMor5AjZCzlwN
fqC4+q/TkXt2BUoAPBLOxiHSDDZdSfB9rXNVgUTrhmlIoAzwzsNL7CXCsrLoe35Z
cE+sXDSEA7vRm+xIg3CKQ/aByaM+e83SopZXPwre5p+uViDVOcnJPugzgciB9USF
Xuw7O4U5A/e1WMCkRqGSLHonrGYE8VbX36yTcCeWfakqeZzkwsupMeYPwvAz01aR
JoAbizLQf3jI6gAhkT467je0YVJleQcHd1DZQzLwT0JPN6kl3hw7PzBA/Jp06F9N
uExLtL7woUf+k5iY1rPi7IU6SrVgiTvqcxz9cP2+TfAq6Z7xvNO+gkbZjQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIrU1ctOSl24wX5nI83XBA1XT0hAMB8GA1UdIwQY
MBaAFHW86PCLXvxEr6+NcGPhrpUYJRQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zYTNlOWQtNmQ3Zi00OTIzLWFmZWYt
MTM2YzlmZmNiODJjLzEvaXRUVnkwNUtYYmpCZm1janpkY0VEVmRQU0VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zYTNlOWQtNmQ3Zi00OTIzLWFmZWYtMTM2YzlmZmNiODJj
LzEvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDshfIAwQC
uW1EMA0EAgACMAcDBQAqAWCAMA0GCSqGSIb3DQEBCwUAA4IBAQAKd1bYzu3BD51q
feteeM4+Mhk/YVrjJ1uEuYogG/YjlFzWhVjMUbp2ne+rqXb3+0WipX9bnTu+PqNc
Ai7s4GIGx+lsU5/4+Esw3qOTfXun3keBdDNkKaUATVMWKwvd0LGdCjt4P98P3BRK
cqN7akeI3yDOYE0lbQ27e2dluHgkHWJVHQ8ROSbGb62X6Io6PjirimrGoRzdyV1f
hFMT0m9ldnYjsmYM9mN23XmD6W77wirCBlfHtwCqv8yAQuMRfd25Px92NHmZqwjY
xuM1t9pol0ISRzIe/95SF+i4rPLKhj3zvQgGsJU7GEIUBx0FFJM430k5Sqds2Ti7
l/YFtq72
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:52 2025 by rpki-client