Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/7bkiaxj1mJyn5f4KlBTJLur42vQ.roa
File: 7bkiaxj1mJyn5f4KlBTJLur42vQ.roa (raw, json)
Hash identifier: roAqW3cn2LtovgFslg2PIXk4GMEbNrgZKpv5sOiiSXE=
Subject key identifier: ED:B9:22:6B:18:F5:98:9C:A7:E5:FE:0A:94:14:C9:2E:EA:F8:DA:F4
Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial: 01941F8C8B0A36BC3DB934B702292256679A
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/7bkiaxj1mJyn5f4KlBTJLur42vQ.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51665
IP address blocks: 178.237.192.0/21 maxlen: 21
178.237.192.0/24 maxlen: 24
178.237.193.0/24 maxlen: 24
178.237.194.0/24 maxlen: 24
178.237.195.0/24 maxlen: 24
178.237.196.0/24 maxlen: 24
178.237.197.0/24 maxlen: 24
178.237.198.0/24 maxlen: 24
178.237.199.0/24 maxlen: 24
178.237.200.0/22 maxlen: 22
178.237.200.0/24 maxlen: 24
178.237.201.0/24 maxlen: 24
178.237.202.0/24 maxlen: 24
178.237.203.0/24 maxlen: 24
178.237.204.0/24 maxlen: 24
178.237.205.0/24 maxlen: 24
178.237.207.0/24 maxlen: 24
2a04:7e01::/32 maxlen: 32
2a04:7e02::/32 maxlen: 32
2a04:7e03::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8b:0a:36:bc:3d:b9:34:b7:02:29:22:56:67:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edb9226b18f5989ca7e5fe0a9414c92eeaf8daf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:7b:4d:0f:41:3b:92:fa:e7:2a:fa:f7:61:
cb:4c:2a:74:0b:91:e0:07:9e:ee:7d:bc:d6:a2:8a:
d6:dc:7d:08:c8:4d:d4:f8:5e:d8:53:07:7d:30:5e:
ce:99:70:4e:cd:f4:cb:46:c7:50:ca:fe:40:89:55:
21:1c:9c:88:e2:a8:9b:fa:d8:06:d3:d4:69:2b:72:
91:fb:5c:11:8a:ef:14:e3:a6:ae:48:7f:87:4e:73:
ed:7a:b9:2e:5e:8f:cf:2b:d9:15:25:6d:23:27:0d:
aa:a1:80:00:21:e9:00:ac:fe:eb:a9:07:c3:90:b2:
45:0e:9d:9b:e8:b5:20:9b:35:c2:df:f1:da:39:aa:
43:e2:d4:83:82:97:fa:f8:cb:4f:b5:5a:dd:c4:f2:
b5:bc:6d:19:49:ed:be:79:e9:75:3b:c3:42:b2:46:
aa:e3:d6:3d:6a:66:29:9b:c1:33:e2:0a:80:fa:53:
49:bf:8e:37:28:48:85:13:2d:70:61:fa:00:5a:ad:
07:45:a6:bb:07:f4:04:33:65:c8:9c:a4:27:f6:2d:
6a:7d:a6:cb:a2:17:d2:27:97:03:3a:c7:22:96:cb:
71:ea:81:fb:80:e6:89:c2:6f:10:be:81:76:7c:18:
09:43:0d:90:0a:11:6f:bb:63:2e:80:b9:b1:8b:40:
af:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B9:22:6B:18:F5:98:9C:A7:E5:FE:0A:94:14:C9:2E:EA:F8:DA:F4
X509v3 Authority Key Identifier:
keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/7bkiaxj1mJyn5f4KlBTJLur42vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.192.0-178.237.205.255
178.237.207.0/24
IPv6:
2a04:7e01::-2a04:7e03:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
63:a7:a1:d9:11:17:ec:6f:da:b5:69:79:14:52:49:b2:dd:ad:
91:a1:83:e5:d3:15:e2:bb:07:c2:8e:73:ea:f7:d0:56:45:8c:
c4:ae:0f:e2:4c:ff:b3:98:b3:96:8a:f2:8c:36:f6:d2:63:7f:
72:f0:dd:ff:e5:cb:6e:f8:76:82:4a:f3:34:cf:b9:9e:f4:dc:
8d:d6:76:bb:52:20:30:0c:b7:24:91:6c:e0:f4:7c:e2:63:59:
77:f1:cd:9b:d5:c8:67:82:f1:c8:27:0d:2d:ad:a6:33:eb:b6:
f9:3b:cb:15:e2:29:c6:24:23:22:c7:36:18:3a:fa:25:7b:42:
a5:e9:5b:a5:75:5f:36:75:7c:54:a0:e6:fb:97:c2:7e:fe:3f:
28:8e:ac:b6:60:07:13:e6:8f:16:90:2e:81:6b:b3:9c:a9:b0:
33:2e:a4:a9:de:de:b5:f3:9e:6e:a9:a0:14:88:07:8d:39:f3:
8b:ed:f5:f5:a3:e3:c0:6a:70:88:f0:a2:15:e7:60:d0:0b:4b:
36:33:4c:92:c1:ab:97:a5:1a:50:a8:9b:f0:fb:2c:30:e8:ef:
07:53:94:f9:2e:f1:22:32:42:5f:9c:31:b0:2e:ba:ab:e1:8c:
eb:2e:cf:f0:ac:ce:59:54:dc:a2:48:be:83:b5:d1:21:6b:2e:
d9:b7:d8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:30:35 2025 by rpki-client