Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0z-5_9_k7mu1zft1IHltuYmfooM.roa
File: 0z-5_9_k7mu1zft1IHltuYmfooM.roa (raw, json)
Hash identifier: eICx3MiRIDKdKPpDiJqZi7Lw2b4w94LOMxfHGEXRTzs=
Subject key identifier: D3:3F:B9:FF:DF:E4:EE:6B:B5:CD:FB:75:20:79:6D:B9:89:9F:A2:83
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC040E79353E4A5515586E09040E51
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0z-5_9_k7mu1zft1IHltuYmfooM.roa
Signing time: Wed 01 Jan 2025 17:48:48 +0000
ROA not before: Wed 01 Jan 2025 17:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 178.175.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:04:0e:79:35:3e:4a:55:15:58:6e:09:04:0e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d33fb9ffdfe4ee6bb5cdfb7520796db9899fa283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:9a:b9:ed:0f:17:d9:9f:8f:6f:69:98:4f:
e3:a2:c1:24:b1:4a:2d:84:86:36:ba:cc:8f:78:62:
c8:5b:29:1d:61:e7:77:21:88:63:0a:9b:4d:49:76:
7d:7b:9e:c0:41:8b:0a:92:6e:b8:09:44:2f:14:e9:
97:18:e4:53:1c:a1:f8:1b:f3:b6:91:2e:69:bc:f5:
88:df:77:87:0e:c6:00:4b:2c:db:23:36:1f:6e:87:
04:d9:76:d5:8c:86:28:d5:a6:cc:e9:17:8f:52:ce:
eb:16:53:ae:9b:3e:82:4f:15:50:fc:63:97:ea:7b:
1d:59:8b:33:0c:0a:30:f3:10:ed:f8:9a:cb:14:ba:
a2:e7:73:33:0d:a6:8f:46:f8:94:07:e6:8c:34:a3:
6e:91:63:be:18:55:94:5e:ed:ed:75:17:e6:f6:5c:
d1:9a:57:50:e4:ae:97:ca:63:b4:df:ad:05:ba:b6:
a3:54:0e:ee:96:ca:e0:f0:e0:05:b1:77:e5:22:26:
73:6c:26:35:64:34:b8:c5:d3:47:ac:4b:58:72:69:
f0:4b:bd:22:a3:80:49:29:f3:32:83:53:a7:f3:63:
76:44:c1:86:dc:9b:a3:98:43:3e:55:97:00:b2:e9:
49:5f:00:98:a8:90:dc:90:69:44:7e:4b:30:75:2b:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3F:B9:FF:DF:E4:EE:6B:B5:CD:FB:75:20:79:6D:B9:89:9F:A2:83
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/0z-5_9_k7mu1zft1IHltuYmfooM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:cb:e6:0f:79:9e:19:02:00:2a:ea:5f:26:4b:bb:3b:00:57:
ea:13:e7:46:ad:0b:b8:64:46:14:c5:80:ea:04:f2:3d:11:96:
07:aa:5d:bc:a4:8e:b6:b1:46:ce:ee:ff:d3:cd:99:78:e3:de:
0b:25:00:90:9c:50:31:f3:7e:11:80:ac:21:6c:e7:a3:f1:05:
41:95:1f:6f:f6:d5:99:6c:81:b9:b4:e9:73:57:8b:5c:8f:43:
19:ee:d2:8a:ed:4f:f5:a5:04:40:d1:5f:75:5a:45:56:88:3c:
ab:a0:06:e7:2f:ce:4f:3b:67:9a:c5:53:c3:3b:e3:11:9f:dc:
bd:91:15:43:cf:8a:57:8d:44:bb:ee:7a:cc:47:5b:bd:22:41:
a2:0d:bd:94:24:b4:22:df:6f:0c:4d:ff:47:7d:57:d1:58:46:
b5:c4:d2:81:34:58:3c:3f:8d:36:82:40:0d:7a:8a:e5:c1:4f:
a5:eb:69:c1:c4:15:19:fb:52:8c:74:8a:72:b0:20:70:36:a2:
36:bc:44:99:80:7a:a5:64:5d:ee:c5:29:d5:c7:fa:6b:76:0b:
ba:fc:6f:75:c4:e7:cd:db:3e:52:e3:38:27:38:e5:04:7d:4f:
d5:ef:1e:b7:8d:67:8d:d9:dc:bf:18:60:d6:b2:af:e4:34:a7:
66:e5:3f:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/AQOeTU+SlUVWG4JBA5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjUwMTAxMTc0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzNmYjlmZmRmZTRlZTZiYjVjZGZiNzUyMDc5NmRiOTg5OWZhMjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x2aue0PF9mfj29pmE/josEksUot
hIY2usyPeGLIWykdYed3IYhjCptNSXZ9e57AQYsKkm64CUQvFOmXGORTHKH4G/O2
kS5pvPWI33eHDsYASyzbIzYfbocE2XbVjIYo1abM6RePUs7rFlOumz6CTxVQ/GOX
6nsdWYszDAow8xDt+JrLFLqi53MzDaaPRviUB+aMNKNukWO+GFWUXu3tdRfm9lzR
mldQ5K6XymO0360FurajVA7ulsrg8OAFsXflIiZzbCY1ZDS4xdNHrEtYcmnwS70i
o4BJKfMyg1On82N2RMGG3JujmEM+VZcAsulJXwCYqJDckGlEfkswdSsjKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNM/uf/f5O5rtc37dSB5bbmJn6KDMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvMHotNV85X2s3bXUxemZ0MUlIbHR1WW1mb29NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsq+wMA0G
CSqGSIb3DQEBCwUAA4IBAQBPy+YPeZ4ZAgAq6l8mS7s7AFfqE+dGrQu4ZEYUxYDq
BPI9EZYHql28pI62sUbO7v/TzZl4494LJQCQnFAx834RgKwhbOej8QVBlR9v9tWZ
bIG5tOlzV4tcj0MZ7tKK7U/1pQRA0V91WkVWiDyroAbnL85PO2eaxVPDO+MRn9y9
kRVDz4pXjUS77nrMR1u9IkGiDb2UJLQi328MTf9HfVfRWEa1xNKBNFg8P402gkAN
eorlwU+l62nBxBUZ+1KMdIpysCBwNqI2vESZgHqlZF3uxSnVx/prdgu6/G91xOfN
2z5S4zgnOOUEfU/V7x63jWeN2dy/GGDWsq/kNKdm5T+j
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:53 2025 by rpki-client