Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/aG6vs5La6aMx_hwb3mRdvIpM0TU.roa
File: aG6vs5La6aMx_hwb3mRdvIpM0TU.roa (raw, json)
Hash identifier: vdd93Y05eV451vK3FXQ74I3qVTw+Vjj/OGc+FJmUsrk=
Subject key identifier: 68:6E:AF:B3:92:DA:E9:A3:31:FE:1C:1B:DE:64:5D:BC:8A:4C:D1:35
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0194B88BA352B500C63A97352A7962453975
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/aG6vs5La6aMx_hwb3mRdvIpM0TU.roa
Signing time: Thu 30 Jan 2025 18:49:06 +0000
ROA not before: Thu 30 Jan 2025 18:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 178.254.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b8:8b:a3:52:b5:00:c6:3a:97:35:2a:79:62:45:39:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 30 18:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=686eafb392dae9a331fe1c1bde645dbc8a4cd135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:d2:40:f0:e2:68:92:4a:54:e7:98:2d:95:
94:92:be:8e:e9:a1:aa:96:e0:5c:ff:b8:56:a0:27:
c3:e0:cd:7b:77:7f:b2:a7:34:7e:a8:10:86:78:2d:
56:b2:92:ce:44:c0:8d:fa:31:03:e5:57:c2:79:fe:
08:e0:6c:68:e9:53:f0:5f:c3:4f:de:d8:b9:07:70:
53:65:6e:da:96:86:91:c9:8d:03:3f:11:e6:6b:3b:
b7:5f:c9:ec:67:d9:d8:fe:24:cc:b5:c8:11:d9:cc:
d2:e7:6a:11:dd:60:7f:99:49:3e:05:fe:54:ec:bb:
1e:c6:9c:58:14:c7:84:3b:ec:a5:93:a8:0a:4f:71:
c0:98:14:a3:05:05:ae:e5:56:dc:18:98:ec:31:c9:
c2:80:b2:c4:28:61:90:15:51:56:d2:37:8b:96:05:
ae:f2:84:a7:a2:a4:fb:80:1b:6c:fc:24:70:81:44:
9e:cd:3d:26:a1:f5:08:f8:ab:c4:88:b8:a2:ab:58:
55:18:b8:31:52:e6:0b:6b:e7:a8:d2:30:bd:2f:fd:
0a:52:6f:f0:65:8f:e3:1c:c6:1b:2c:a8:a2:2f:a3:
98:ae:1a:28:2a:7a:ef:ac:24:be:95:1b:43:76:6a:
f9:d0:5b:78:61:3b:db:3c:b7:98:96:46:03:f0:18:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6E:AF:B3:92:DA:E9:A3:31:FE:1C:1B:DE:64:5D:BC:8A:4C:D1:35
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/aG6vs5La6aMx_hwb3mRdvIpM0TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:74:2b:7b:cf:55:f7:67:6a:17:3b:81:36:47:95:85:bb:fa:
ed:d2:62:c6:51:1f:18:c6:87:64:af:cf:81:0b:3f:f7:22:f9:
4d:b5:f5:70:6f:b9:7a:7c:e4:a9:9d:a4:bc:fa:fe:e3:19:07:
2d:7c:3e:7f:34:d9:4f:d9:bc:75:9e:8d:c2:ee:88:ca:4f:41:
34:19:6e:80:85:f2:07:cd:8e:d1:9a:99:6c:f1:1a:25:0a:77:
45:5a:bf:3b:13:4d:80:b6:8a:36:ba:f9:5e:c6:8a:be:61:d9:
67:cf:f6:5a:f1:63:4b:60:0d:38:fd:07:03:37:20:31:78:ba:
b6:14:1a:75:2f:60:db:1e:2b:5d:73:86:69:93:3c:4e:fc:70:
21:48:13:3f:fa:77:d7:8c:31:01:77:6c:b2:8b:f2:8c:dc:a8:
e1:ff:83:b4:bb:59:a4:54:27:53:22:90:da:a1:6d:ee:23:4e:
64:f0:06:9c:b4:c3:e7:71:5b:74:27:c5:76:ef:e3:96:22:95:
26:9c:67:f4:23:1f:b9:5e:45:5e:50:1a:1b:7c:6a:97:31:5e:
56:82:28:86:1b:35:ef:f4:f0:da:15:5c:6d:54:1e:d1:b6:a8:
59:0e:2b:01:00:3e:45:bf:3e:9e:7f:5a:c4:78:4b:2a:84:59:
af:31:ad:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:14:27 2025 by rpki-client