Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/1-i7nGTwXEwybr4Pzt1yuXERVK6c.roa
File: 1-i7nGTwXEwybr4Pzt1yuXERVK6c.roa (raw, json)
Hash identifier: 6WebZuQEVFb53qv4JdObZh7gRJmnrMnS1KiKHpMOHA8=
Subject key identifier: FA:2E:E7:19:3C:17:13:0C:9B:AF:83:F3:B7:5C:AE:5C:44:55:2B:A7
Certificate issuer: /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Certificate serial: 0194266ACCB35FCAB04A4C2FDBD3A3CF7440
Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/1-i7nGTwXEwybr4Pzt1yuXERVK6c.roa
Signing time: Thu 02 Jan 2025 09:48:40 +0000
ROA not before: Thu 02 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43824
IP address blocks: 78.40.176.0/24 maxlen: 24
78.40.177.0/24 maxlen: 24
78.40.178.0/24 maxlen: 24
78.40.179.0/24 maxlen: 24
78.40.180.0/24 maxlen: 24
78.40.181.0/24 maxlen: 24
78.40.182.0/24 maxlen: 24
78.40.183.0/24 maxlen: 24
185.87.168.0/24 maxlen: 24
185.87.170.0/24 maxlen: 24
185.87.171.0/24 maxlen: 24
185.160.224.0/24 maxlen: 24
185.160.225.0/24 maxlen: 24
185.160.226.0/24 maxlen: 24
185.160.227.0/24 maxlen: 24
2a0b:8e80::/48 maxlen: 48
2a0b:8e80:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:cc:b3:5f:ca:b0:4a:4c:2f:db:d3:a3:cf:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Validity
Not Before: Jan 2 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa2ee7193c17130c9baf83f3b75cae5c44552ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:6d:e6:85:ef:fd:63:0c:ef:80:d3:05:88:
17:58:90:4c:2b:b4:68:ac:8b:3d:09:1d:e2:40:81:
56:66:99:89:05:8c:c7:ec:ff:b4:8f:1b:9c:a4:56:
53:9a:73:d2:cd:97:e3:13:55:ad:25:ac:78:7d:b2:
37:4d:dc:db:a2:83:0e:ab:21:bc:2e:4e:30:53:fe:
3e:4e:9b:4f:23:d3:8e:3e:ba:71:94:de:54:5b:48:
1c:26:23:c0:26:0a:3d:c2:b4:01:2c:f9:ea:01:e1:
fa:97:ea:cd:84:53:ea:66:3b:5a:f5:d9:24:4e:89:
38:c0:80:d3:e0:1f:e6:d9:ce:b9:a6:cd:89:2f:33:
ea:2c:ad:13:8c:60:23:74:d2:c5:1d:83:b9:8c:1f:
a1:1a:18:7f:30:80:86:32:b0:cc:10:c9:86:c3:a0:
27:e4:30:77:d8:74:1b:86:f8:44:17:66:93:85:76:
e0:1d:b0:6a:04:60:47:f9:14:4c:25:8e:4c:e5:0c:
2d:8f:82:ac:6a:68:49:70:3c:7b:29:8a:b9:0f:15:
90:07:a3:29:d4:d5:59:cd:13:1c:71:4d:0b:c4:71:
3f:d9:84:6a:06:3e:90:9f:d3:dd:97:d4:34:a7:46:
24:8f:12:31:6e:d5:59:84:43:f8:a6:ee:44:b2:a8:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2E:E7:19:3C:17:13:0C:9B:AF:83:F3:B7:5C:AE:5C:44:55:2B:A7
X509v3 Authority Key Identifier:
keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/1-i7nGTwXEwybr4Pzt1yuXERVK6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.176.0/21
185.87.168.0/24
185.87.170.0/23
185.160.224.0/22
IPv6:
2a0b:8e80::/47
Signature Algorithm: sha256WithRSAEncryption
2c:7b:08:5c:ec:eb:67:fe:17:0d:98:49:3e:f4:7e:99:5f:58:
ef:79:b3:b7:10:fb:2b:29:5c:82:9e:2e:69:2b:db:68:d6:d3:
47:29:82:d1:98:a1:e1:1a:50:5e:61:c5:5a:6f:ad:24:05:5c:
55:13:ea:cc:b7:06:21:be:36:79:42:5e:a8:3c:24:9a:8e:bd:
61:5f:9c:28:a5:82:dd:b8:db:26:90:bd:38:4d:d2:9a:04:31:
d5:27:f9:7a:13:df:14:89:f6:c0:e0:00:f0:cc:3c:71:ed:bf:
8e:35:b7:78:73:d7:2e:64:4b:65:54:2d:59:64:2b:80:6c:90:
01:50:c8:7d:e3:b8:7b:91:44:d0:d5:49:73:67:7d:c7:7d:b4:
0a:94:48:06:74:32:21:39:27:79:d1:5f:37:fd:a6:50:2d:66:
dd:1f:b6:d9:4c:cb:b9:c0:1f:6e:e5:70:56:94:b8:ab:09:34:
87:eb:57:59:09:df:32:fd:da:8a:ef:24:11:6f:7c:14:7c:8c:
21:15:1a:67:b1:ad:d9:5e:b8:e3:5f:eb:7c:a3:49:2f:91:0e:
20:ba:9c:e0:60:39:0f:6c:ec:fc:12:f5:12:a4:ef:f8:71:1a:
30:e8:fc:f1:5b:e2:94:9d:a6:76:94:fa:27:9c:44:04:62:19:
9c:bb:9c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:01:18 2025 by rpki-client