Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ptS3TotxPPR3_Fn0MaKYXH2WJck.roa
File: ptS3TotxPPR3_Fn0MaKYXH2WJck.roa (raw, json)
Hash identifier: ooECjr6JJ6th3hXPw/oREY4o+0sWyJgSomRxlYzX5q0=
Subject key identifier: A6:D4:B7:4E:8B:71:3C:F4:77:FC:59:F4:31:A2:98:5C:7D:96:25:C9
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424452C01D66BF29053F96EFA251B6513
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ptS3TotxPPR3_Fn0MaKYXH2WJck.roa
Signing time: Wed 01 Jan 2025 23:48:20 +0000
ROA not before: Wed 01 Jan 2025 23:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64492
IP address blocks: 178.212.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2c:01:d6:6b:f2:90:53:f9:6e:fa:25:1b:65:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6d4b74e8b713cf477fc59f431a2985c7d9625c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:21:9e:d2:a0:67:9a:aa:b4:7a:23:c4:15:a0:
e5:79:7b:01:6f:c9:d6:22:a0:40:88:a4:69:c4:e7:
89:1e:9a:fb:5a:69:3e:00:61:a2:cf:94:39:49:73:
a2:fe:50:64:9e:45:23:a4:ab:6f:f4:c4:51:6b:8b:
46:72:b1:25:05:be:a1:4a:82:d9:09:53:dc:2b:77:
79:f9:4c:bd:96:c3:06:98:82:03:d3:79:01:a6:ad:
3d:a6:65:12:04:d3:9e:fc:c2:88:cb:28:e7:37:a4:
58:b3:05:56:b6:d0:34:96:84:c5:76:3d:db:97:89:
48:71:57:c1:7b:4d:c9:0b:2d:23:91:a9:bd:25:a3:
1e:c6:83:f7:e7:d0:02:c3:66:e7:5c:1c:7a:1b:30:
30:f8:e3:4f:60:10:e3:dd:f9:78:2f:8c:92:ab:6e:
d3:ba:b2:0c:cd:e8:5b:3f:da:c7:35:4c:52:71:06:
1a:c4:58:4b:90:e9:fb:f0:b2:96:b8:5c:c8:b0:99:
6d:25:26:ff:d6:96:bf:c6:1c:93:a8:7d:f7:48:06:
89:3a:7c:94:fe:df:ce:a1:1e:02:22:d3:c3:a5:d6:
d0:23:74:1d:80:45:f1:88:d3:e6:58:09:06:5c:4d:
ed:ed:99:e4:5f:9b:7f:92:49:44:a3:5f:95:61:82:
78:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D4:B7:4E:8B:71:3C:F4:77:FC:59:F4:31:A2:98:5C:7D:96:25:C9
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ptS3TotxPPR3_Fn0MaKYXH2WJck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.143.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b5:f3:c3:61:88:31:ea:e4:49:88:69:c7:e4:89:c5:9c:a5:
ed:06:19:1c:07:c5:bb:90:7e:09:ca:23:c7:4d:f0:6a:19:b3:
49:13:3a:b6:14:83:7a:23:71:81:a3:b2:9a:b6:36:47:1c:8b:
7d:cd:ae:a9:6c:5a:01:53:81:f3:59:5a:10:59:4c:ec:bf:76:
8a:2f:dc:c2:80:7a:6b:3b:59:24:42:0f:3f:12:74:2d:74:ab:
64:cf:8c:a9:28:33:bc:92:5e:2e:39:3e:a7:c1:ad:4b:88:da:
31:3d:42:47:c4:75:9b:60:16:cb:05:b4:a5:cf:45:0e:70:ac:
d7:50:b7:35:53:72:f9:43:89:10:10:75:b4:fc:31:f2:c6:e8:
74:e2:19:d8:e9:a3:cc:38:5e:2f:61:05:5d:50:7d:6f:2c:52:
71:22:eb:85:ab:31:f6:cc:dd:25:e9:f0:c1:95:f8:c4:35:65:
1a:88:f4:79:2b:fd:59:9e:d0:b8:00:23:78:d6:c4:4d:c8:18:
0c:6c:fd:0f:99:cf:f7:55:84:80:65:84:b5:50:32:b2:17:92:
28:21:7f:b0:44:14:bd:d0:7a:eb:05:3f:37:2c:48:03:6d:59:
97:68:bd:5f:0e:1d:1e:bc:3f:2f:99:99:96:9c:53:db:9f:99:
aa:a9:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:01:45 2025 by rpki-client