Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/LlpmohAmlwPDVLc6qlIrlvl1gbI.roa
File: LlpmohAmlwPDVLc6qlIrlvl1gbI.roa (raw, json)
Hash identifier: WzafKZcKWanwf6pl/Fio+TSNZOq1ysNo9fsVMwaEB2A=
Subject key identifier: 2E:5A:66:A2:10:26:97:03:C3:54:B7:3A:AA:52:2B:96:F9:75:81:B2
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC1A2DEBDC85BA9BE6383AA27C7997
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/LlpmohAmlwPDVLc6qlIrlvl1gbI.roa
Signing time: Wed 01 Jan 2025 17:48:54 +0000
ROA not before: Wed 01 Jan 2025 17:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205835
IP address blocks: 178.175.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1a:2d:eb:dc:85:ba:9b:e6:38:3a:a2:7c:79:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e5a66a210269703c354b73aaa522b96f97581b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:5a:01:7e:a6:2c:11:28:33:9e:c8:b1:a0:
63:6f:42:51:52:fa:d4:be:c5:9e:52:8c:a9:97:6b:
51:c0:8a:dc:d2:34:08:41:1c:e7:df:03:6e:98:48:
c0:44:a8:10:a4:f3:3a:2c:13:8b:a5:2a:82:2a:3d:
f9:08:a6:b3:3a:67:3f:4a:f7:a7:a9:92:8b:76:31:
92:ed:28:0f:2b:1e:a7:a3:07:51:e2:2d:39:7f:b3:
29:0d:26:8c:78:b1:91:44:62:8e:21:e0:da:cd:94:
17:91:f1:76:63:82:c6:7a:1b:f5:44:d1:ec:a6:f7:
0d:1f:55:ad:8d:26:52:65:d8:0d:1e:58:55:0e:5e:
7a:81:c4:2e:be:4b:07:f4:93:c1:a4:d7:cc:f1:23:
a6:c3:e4:e4:c4:f9:eb:00:69:2c:46:82:67:ac:27:
ac:74:84:c1:56:65:b7:76:80:7f:de:66:38:53:c6:
43:b0:1e:96:81:f8:9a:29:e8:cd:48:35:bf:c7:f6:
94:e6:b0:ba:a7:71:6a:48:00:51:98:72:02:b3:9f:
60:be:6c:14:87:3f:cd:ce:d9:ee:a9:a4:aa:9a:46:
f3:43:a6:d5:b2:23:27:2c:8e:e8:19:23:3f:74:57:
e1:03:8a:8c:0b:06:b4:44:c8:9e:ab:20:8c:31:85:
e8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5A:66:A2:10:26:97:03:C3:54:B7:3A:AA:52:2B:96:F9:75:81:B2
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/LlpmohAmlwPDVLc6qlIrlvl1gbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:87:b3:95:a5:67:24:1d:cc:00:73:0e:e2:71:9f:ae:e5:4c:
a7:40:92:b3:94:f1:c1:5c:5c:ff:2e:a5:1c:4e:6c:75:00:1a:
1a:52:77:e8:91:37:31:3a:a9:8b:17:95:25:af:78:7a:f0:bf:
64:47:df:cf:06:1e:a5:4c:d7:e4:fa:6a:ad:93:e8:0a:36:1d:
42:62:07:82:5c:bf:fb:58:f6:bf:e6:a0:7c:63:cd:01:33:9d:
41:60:6d:89:bc:be:0f:60:a3:e9:ba:aa:1b:45:e9:f4:f5:49:
c5:82:55:6d:c4:24:b8:ae:ea:0d:87:8a:70:b1:d4:78:15:d5:
d1:34:d6:35:49:66:89:c6:93:82:7b:86:da:30:41:a9:9a:01:
d6:3d:a2:b3:d5:bf:3b:66:7c:97:00:04:79:b4:52:8d:a4:77:
17:12:81:68:10:06:a6:07:07:ef:ad:d3:6e:af:88:c1:ab:16:
e5:c6:fc:a3:c0:26:25:73:de:2a:f6:12:35:8b:94:94:2c:bc:
74:ed:af:6f:b2:70:31:5f:db:79:e4:48:00:bb:77:21:15:f3:
ce:5b:20:01:6d:41:f1:27:2d:65:a8:7c:30:63:a5:7d:4f:c6:
03:47:24:cc:2a:00:cc:d2:4c:b6:d6:ad:6a:5a:c1:0e:3a:26:
cf:d8:85:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:57 2025 by rpki-client