Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/CkJjv0vYoRHvbkRXlkiWZ0-_O2w.roa
File: CkJjv0vYoRHvbkRXlkiWZ0-_O2w.roa (raw, json)
Hash identifier: sn3GvdltPLasZQw3sHAj9RA9PaVADblnC7vtnVoU5qc=
Subject key identifier: 0A:42:63:BF:4B:D8:A1:11:EF:6E:44:57:96:48:96:67:4F:BF:3B:6C
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01942068760D7536691077B4D6A1FAE7C06B
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/CkJjv0vYoRHvbkRXlkiWZ0-_O2w.roa
Signing time: Wed 01 Jan 2025 05:48:24 +0000
ROA not before: Wed 01 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202749
IP address blocks: 178.254.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:76:0d:75:36:69:10:77:b4:d6:a1:fa:e7:c0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 1 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a4263bf4bd8a111ef6e4457964896674fbf3b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cd:e0:73:4d:0f:59:63:3d:f4:a8:b1:8f:b2:
8f:27:28:52:76:17:05:ff:ce:38:42:cf:c2:67:0d:
75:2e:59:94:40:e8:19:ec:d1:6e:cf:1f:48:5b:5e:
df:22:d5:6f:cd:9c:4b:e3:01:ad:bd:1d:4d:9c:69:
01:fc:7a:36:5c:4e:b9:44:71:a5:84:64:42:ef:2a:
e3:c5:96:48:9b:89:93:70:18:67:53:9b:4f:2b:91:
91:13:5c:38:a4:68:a3:25:33:10:6b:10:8a:c9:31:
fa:25:21:85:d8:21:99:04:9a:f3:7d:83:dd:bb:a0:
4d:2b:af:64:7f:6f:b5:4f:e0:12:f1:cc:d5:65:61:
9d:38:c7:41:c5:05:bb:0d:67:26:0f:fe:2c:76:2a:
df:14:62:ee:22:49:69:b4:86:26:71:44:2e:7f:24:
1d:84:39:4f:da:0e:48:af:28:ef:1e:d9:b2:7f:03:
fd:96:fb:6f:a0:19:50:f7:38:d8:37:ee:cb:0f:3a:
85:49:e9:b6:7c:13:d9:3a:4f:6c:31:e6:31:39:39:
76:64:b5:e5:b0:66:ec:e7:66:c6:14:9a:fc:44:f1:
c4:e8:e9:23:64:c7:36:96:4f:dd:99:cf:6c:21:88:
f1:d3:0c:8c:25:0f:a9:ca:a3:eb:22:70:61:7c:7f:
62:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:42:63:BF:4B:D8:A1:11:EF:6E:44:57:96:48:96:67:4F:BF:3B:6C
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/CkJjv0vYoRHvbkRXlkiWZ0-_O2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.147.0/24
Signature Algorithm: sha256WithRSAEncryption
80:41:ae:1a:3b:c2:c9:cc:c7:d8:96:c6:6a:c8:e6:0c:1a:90:
4b:d4:c9:bd:eb:1c:ed:70:e7:be:60:b8:ee:3e:d4:90:c5:9f:
8c:7a:db:19:d0:1e:57:fe:89:54:cb:ff:e8:e1:57:19:f4:b0:
09:39:b4:5e:85:10:63:00:77:19:90:8c:b3:18:e1:56:49:08:
d7:69:4b:61:16:e9:99:dc:15:93:17:38:a6:3a:31:14:42:b3:
da:1d:b9:34:e7:34:a1:d5:d0:87:24:2b:04:a1:f9:72:5c:4e:
d3:73:6d:56:0e:f3:17:5c:2f:f8:8a:67:d4:27:d6:31:38:6a:
88:e3:f2:3a:7e:61:0c:ab:c6:52:b2:14:5f:d0:86:36:35:41:
04:4a:0e:c5:aa:24:bc:d2:6a:b6:9f:67:06:42:31:d6:79:7e:
b5:f2:84:0c:7b:39:4a:26:cb:f6:eb:7c:d5:e3:5f:56:fd:5b:
00:2d:89:2d:ed:98:4c:86:11:1a:86:51:f4:18:94:82:a6:e6:
84:48:ae:9e:5b:67:b7:4a:1d:1b:ef:34:6d:4b:3f:d8:15:aa:
3f:9b:70:ec:e0:12:32:c9:c0:2f:2a:58:98:dd:ef:14:1d:02:
bf:74:9e:fd:f5:3b:0c:6c:28:a9:3e:a7:8b:a1:fb:88:87:d4:
00:12:34:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:16:34 2025 by rpki-client