Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i9ZUtXoXEARWY19wiPnoU2Prjy0.roa
File: i9ZUtXoXEARWY19wiPnoU2Prjy0.roa (raw, json)
Hash identifier: EXjd/4hwSjRbSgxLXXmu+jRsAefKay83zv0M+i9UQtc=
Subject key identifier: 8B:D6:54:B5:7A:17:10:04:56:63:5F:70:88:F9:E8:53:63:EB:8F:2D
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0193F3FA5F34615ABAEA59775CC0CE768D04
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i9ZUtXoXEARWY19wiPnoU2Prjy0.roa
Signing time: Mon 23 Dec 2024 14:44:51 +0000
ROA not before: Mon 23 Dec 2024 14:44:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205835
IP address blocks: 178.175.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:fa:5f:34:61:5a:ba:ea:59:77:5c:c0:ce:76:8d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Dec 23 14:44:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bd654b57a17100456635f7088f9e85363eb8f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:7d:bd:a8:6a:8f:76:2b:bc:73:3e:30:9f:
71:1a:ac:f3:2d:e9:b9:a7:2d:50:87:f6:03:64:4c:
07:d6:20:fb:8e:06:31:ef:bf:cb:8c:60:97:ca:ff:
50:89:d3:b9:04:51:35:1c:9d:ab:51:a4:eb:40:d7:
d8:c6:a6:c9:ba:ed:6c:ee:71:14:a3:83:84:c7:ec:
14:bb:5e:17:9b:ef:b3:d7:06:f8:88:74:0e:eb:ee:
38:06:5f:15:2b:60:48:ec:82:7d:3e:0a:65:45:da:
8a:51:75:08:a7:b7:ee:9c:23:ff:c3:eb:60:98:4f:
73:8b:6f:a6:59:0e:8f:d1:00:6a:71:98:91:f3:a4:
49:04:d9:5f:dd:b8:50:af:e3:0f:5d:16:0f:70:79:
24:fe:6f:c4:ed:90:96:71:0b:a7:5e:a8:60:6e:5e:
b9:97:13:c6:e2:f2:31:f1:bc:bd:dc:88:37:e2:a2:
2c:d0:fb:74:05:8e:35:47:27:e6:ab:44:47:ed:9e:
c4:b5:5d:cd:fb:ad:5b:00:13:10:ae:23:4e:59:43:
1e:a9:26:3e:d8:35:80:26:0c:86:58:6e:1d:da:af:
4e:45:c9:ab:93:57:f3:db:2e:1d:66:5d:91:32:17:
c1:3d:f9:d4:92:bd:81:f5:88:fc:ae:5e:b2:f1:66:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D6:54:B5:7A:17:10:04:56:63:5F:70:88:F9:E8:53:63:EB:8F:2D
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i9ZUtXoXEARWY19wiPnoU2Prjy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.176.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:d6:cd:29:d3:f9:6f:51:c6:4f:9e:c3:35:8c:30:91:4a:1e:
21:82:8e:3d:3f:92:ea:eb:64:57:f9:a5:ee:fe:b8:de:cb:73:
4c:62:de:c2:81:75:81:7e:e1:ed:83:f6:c8:03:7f:b0:ba:a5:
f3:fe:0f:db:b5:64:6e:08:47:39:ac:81:04:e8:30:62:f4:5f:
73:26:6c:b1:69:a3:8e:30:a7:fa:bd:76:30:d5:55:f7:bf:3a:
2c:4d:90:91:e8:aa:be:ec:4b:ed:96:bb:ef:96:df:f5:ce:7a:
13:92:a4:7a:d8:20:02:be:45:43:ed:39:01:5c:90:30:d5:7a:
1f:15:85:f3:17:0b:85:c7:d7:54:68:ec:64:74:2a:c8:10:2a:
c8:30:b9:c7:97:04:fb:a5:7a:b5:b6:61:66:88:16:90:5d:4c:
6f:dd:f3:fc:73:37:97:77:5b:f3:27:bc:33:6f:e7:8c:c9:7a:
2b:ff:1d:18:b0:68:b8:7d:9c:b5:00:6e:4c:83:23:8e:f0:f3:
5b:dd:f0:b9:00:e8:af:1c:ff:54:54:f7:01:87:9f:92:53:d0:
b0:8d:b0:0b:1f:b1:d2:01:ff:23:d0:ed:02:bf:f1:55:9d:5f:
f0:d9:a3:ac:33:aa:ce:82:b0:47:d2:81:cb:c6:9e:3c:9f:ff:
67:e9:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:26:08 2025 by rpki-client