Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/hWhQmpu94Py-NoZ59qqhb0xapWI.roa
File: hWhQmpu94Py-NoZ59qqhb0xapWI.roa (raw, json)
Hash identifier: p5iceNlN51GU8kqn5ZRXOtEngkwWe2v/OwEjGbS2YtA=
Subject key identifier: 85:68:50:9A:9B:BD:E0:FC:BE:36:86:79:F6:AA:A1:6F:4C:5A:A5:62
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0195296F1E065B91C1B6D3DBCC7C051CF580
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/hWhQmpu94Py-NoZ59qqhb0xapWI.roa
Signing time: Fri 21 Feb 2025 16:55:02 +0000
ROA not before: Fri 21 Feb 2025 16:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213355
IP address blocks: 178.212.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:29:6f:1e:06:5b:91:c1:b6:d3:db:cc:7c:05:1c:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 21 16:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8568509a9bbde0fcbe368679f6aaa16f4c5aa562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:67:6d:79:a4:0b:90:27:b3:39:2e:49:71:
2d:8d:75:73:4f:4b:31:5d:08:e7:5a:fe:4e:68:ea:
6a:19:e4:a5:60:e3:58:5d:a0:b9:ae:59:e3:65:f6:
c9:79:74:e4:2f:df:5b:b0:d5:5a:69:6e:74:c7:90:
52:87:32:9d:e1:7a:19:f8:0b:f3:b5:a4:78:f3:1d:
fd:a8:81:5a:c7:72:96:22:30:3e:65:92:90:65:f3:
ab:b7:da:da:3c:d4:97:80:d8:03:b6:5c:26:1c:f4:
e5:7f:d4:0b:e2:f2:38:47:cf:af:16:c8:0b:4c:a9:
46:66:6e:8f:93:0d:73:8f:99:72:d1:91:1b:2f:72:
42:3a:5e:f1:0e:3b:3f:a7:03:f3:9d:d9:0c:d4:1e:
8e:5c:78:d2:1c:c8:2f:11:41:59:81:b4:38:ce:11:
4b:1f:f6:4a:b7:8c:13:84:a9:9c:ee:9b:55:de:de:
00:87:1b:1d:6d:23:07:72:6b:7a:20:40:b9:b7:94:
ed:b1:08:8a:35:09:09:c9:83:a5:ec:ed:8e:5d:59:
c1:25:38:8d:36:6c:ad:38:37:8f:5b:5f:6e:aa:23:
2e:4c:1f:78:06:f3:eb:a8:ac:a6:da:d0:5d:51:32:
d4:36:d4:9b:eb:19:fe:42:64:fb:b1:96:49:b2:0d:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:50:9A:9B:BD:E0:FC:BE:36:86:79:F6:AA:A1:6F:4C:5A:A5:62
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/hWhQmpu94Py-NoZ59qqhb0xapWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.143.0/24
Signature Algorithm: sha256WithRSAEncryption
21:95:a9:bb:38:ae:1c:9c:82:d3:d7:36:14:00:5e:59:56:1c:
45:32:98:ca:eb:44:ec:75:e5:09:6d:51:8c:8a:bf:33:25:26:
39:c0:d8:c8:4f:c2:86:3e:8f:d3:31:1d:37:1f:40:4d:b8:ac:
db:eb:d2:78:01:9f:5b:bf:34:27:fe:ab:a9:fb:fb:67:34:47:
b6:86:86:31:51:9a:04:1c:11:91:c8:85:56:38:0c:50:bf:6f:
da:22:7e:86:76:f7:65:6a:16:d8:2f:46:1f:b6:52:d8:85:75:
fd:30:ed:b9:2a:84:39:8e:03:c7:63:5f:05:f8:78:9f:91:29:
a4:13:41:7e:95:91:ac:86:eb:44:6f:97:ff:45:f0:a4:c3:50:
b8:36:13:4e:ca:9c:ce:ba:da:8c:3d:cd:47:49:be:df:f4:39:
9a:7e:aa:ff:91:ba:26:80:2c:e4:9a:b3:87:4c:d4:11:b5:7f:
98:c9:32:68:81:c2:35:9c:b3:8d:20:97:38:f4:ce:cd:31:8c:
64:0f:8e:d1:1c:6e:a1:06:f6:be:23:9a:a1:74:fa:c2:8a:0e:
20:75:a1:4d:11:d8:7d:55:3e:f0:84:d2:7f:da:e7:5f:e1:cd:
5a:7c:e2:64:d0:45:19:2f:a2:b1:e5:7a:37:1b:28:f9:5d:65:
83:13:78:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:47:25 2025 by rpki-client