Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/d_rxGd3exqjA5PYdcH8Oo5zannU.roa
File: d_rxGd3exqjA5PYdcH8Oo5zannU.roa (raw, json)
Hash identifier: nn2jsjulXnQp221hYRp0BPRUofh92jgMLKVN4nAAo7s=
Subject key identifier: 77:FA:F1:19:DD:DE:C6:A8:C0:E4:F6:1D:70:7F:0E:A3:9C:DA:9E:75
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019585F390B457FE856F91EF3270B6B974C9
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/d_rxGd3exqjA5PYdcH8Oo5zannU.roa
Signing time: Tue 11 Mar 2025 16:04:46 +0000
ROA not before: Tue 11 Mar 2025 16:04:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213021
IP address blocks: 178.212.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:f3:90:b4:57:fe:85:6f:91:ef:32:70:b6:b9:74:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 11 16:04:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77faf119dddec6a8c0e4f61d707f0ea39cda9e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:af:9b:d6:33:d2:31:1b:06:d4:66:49:08:
0b:bb:33:e0:83:7c:7a:3f:11:51:0d:47:87:2a:f2:
16:26:08:e4:30:ba:78:22:de:09:e1:9f:b6:4a:1a:
4d:4f:74:0b:e6:4f:48:1b:a2:4a:78:1d:85:9f:9d:
b9:22:1d:ad:90:b8:c2:1f:d1:3d:39:bb:0d:9d:53:
d4:78:1a:2c:85:89:7e:47:94:c4:a3:53:34:e2:02:
47:f5:4c:1d:5d:01:39:ab:f3:37:1b:b3:a3:5d:cd:
8b:59:7d:52:31:a0:d2:1e:b2:f1:db:64:28:3a:d7:
0f:93:4c:58:00:14:fb:35:d2:0b:6f:5e:52:04:62:
a4:61:25:72:c0:a4:ad:f7:eb:97:e3:b5:f7:6e:38:
12:f8:18:cc:93:a2:e2:ac:d1:9c:32:ad:aa:ce:1f:
63:6e:6e:ba:40:b5:e5:d2:ea:0c:7e:86:c0:28:23:
13:c6:f0:9e:43:71:db:80:c9:7f:73:a7:52:b6:58:
7d:26:62:76:f3:fe:59:c8:f7:fb:68:24:f0:c5:e5:
26:5b:c7:04:84:8b:40:82:4c:4a:86:5a:29:f3:4b:
aa:01:7f:7f:eb:1c:6c:df:36:9e:cb:00:7a:b7:8e:
25:02:91:a2:97:de:91:e2:3f:64:1b:db:ec:66:e1:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FA:F1:19:DD:DE:C6:A8:C0:E4:F6:1D:70:7F:0E:A3:9C:DA:9E:75
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/d_rxGd3exqjA5PYdcH8Oo5zannU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.143.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:31:81:99:ad:99:e0:0d:84:83:67:34:f2:67:36:cf:75:f0:
c6:11:23:4b:90:fe:00:df:7f:79:63:86:44:61:da:fa:1b:3f:
85:86:69:08:5d:c1:25:80:56:d4:48:ad:70:80:98:3a:08:51:
f6:3a:9f:e2:56:6f:30:a0:a1:d9:93:83:2f:9b:d7:4b:f6:8b:
19:c5:93:b9:89:7c:7b:24:a7:29:8c:48:1a:6b:c1:d4:57:15:
c2:b0:48:ec:8d:89:05:85:a9:ba:bd:13:3b:91:ea:d5:bc:c1:
21:de:30:09:81:f2:0b:ec:51:26:9c:18:88:5a:f0:bb:18:80:
2d:15:9c:cd:19:5d:bd:65:50:c7:89:35:97:d1:59:c5:cf:cb:
ca:e5:3f:69:7e:fc:c9:93:5e:92:bf:b1:e4:05:ae:c2:92:cb:
2a:13:d2:01:b9:5a:c2:b8:14:c3:32:28:31:e5:8c:36:a6:cb:
17:7d:ac:39:07:7a:fb:4a:ba:fc:c8:44:ac:5e:0c:75:7f:21:
dd:db:85:21:21:15:d6:6f:de:8c:df:cd:b4:95:7d:38:bc:d6:
28:4d:2e:a9:3c:b4:0d:75:3f:35:a2:74:4e:a2:ed:64:c3:1f:
a6:76:7a:ad:45:26:73:a0:f7:2e:55:ce:ae:df:46:31:66:31:
bc:31:1a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:36:40 2025 by rpki-client