Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/pBGZNx_OAmMdbFc_db_0hiPmyn0.roa
File: pBGZNx_OAmMdbFc_db_0hiPmyn0.roa (raw, json)
Hash identifier: QFrjKNE3vTim3+tyZdQRJX7MRvsrfcNJr7UDy9LbkxY=
Subject key identifier: A4:11:99:37:1F:CE:02:63:1D:6C:57:3F:75:BF:F4:86:23:E6:CA:7D
Certificate issuer: /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial: 019421438D9EF5476C31EAB4748589F47383
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/pBGZNx_OAmMdbFc_db_0hiPmyn0.roa
Signing time: Wed 01 Jan 2025 09:47:42 +0000
ROA not before: Wed 01 Jan 2025 09:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 178.175.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:8d:9e:f5:47:6c:31:ea:b4:74:85:89:f4:73:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Validity
Not Before: Jan 1 09:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a41199371fce02631d6c573f75bff48623e6ca7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:d5:84:02:10:4d:60:ff:2d:89:44:09:e5:
de:3e:b8:30:61:98:82:37:0f:9b:d9:55:b4:76:fc:
02:bd:9e:44:35:fa:92:f4:3d:52:74:38:0e:5b:8f:
c3:93:25:61:39:33:40:0a:b9:3c:91:8a:8e:72:e7:
dd:96:48:8b:0e:89:b5:b2:61:03:2f:58:18:dc:42:
ab:8c:39:de:b1:12:f2:73:17:09:4f:96:18:d1:ee:
9e:d0:bc:73:5f:f9:6a:26:c6:bf:c3:60:68:ea:b6:
e3:ac:6f:9b:8b:8e:82:07:20:db:34:85:e2:a8:d5:
31:8b:f0:a5:42:f4:f9:26:21:3f:c2:c6:7b:e8:ae:
93:04:d4:38:bd:76:3e:be:e2:5b:86:9b:fd:4e:48:
24:3e:92:cf:0b:35:dd:3b:ae:8f:4c:b8:a2:3a:80:
16:69:b0:94:ad:65:02:ca:c3:23:01:e3:9e:01:fc:
67:58:42:33:9b:1b:df:5c:9a:56:ad:6e:5e:bf:44:
f1:d1:6c:6b:e5:d8:d0:74:fd:55:52:f0:8f:2d:37:
cd:6d:f1:6e:c9:38:b9:f6:3b:dc:15:f1:c7:bd:89:
f5:d7:c7:0c:53:dc:bd:50:a5:a3:eb:81:7a:9e:b9:
12:9a:c8:67:63:11:9d:57:6a:97:8d:a6:c3:97:4b:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:11:99:37:1F:CE:02:63:1D:6C:57:3F:75:BF:F4:86:23:E6:CA:7D
X509v3 Authority Key Identifier:
keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/pBGZNx_OAmMdbFc_db_0hiPmyn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.182.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7e:84:0d:9c:88:7f:43:dc:a8:c9:36:24:ab:00:49:d9:f2:
60:61:8d:13:e9:70:7e:66:22:0d:54:c9:d1:0a:75:ac:c3:fe:
56:ed:9f:6c:fb:f7:59:ae:82:68:83:eb:76:a7:41:7a:9e:ee:
45:2c:cb:c6:ac:31:a4:68:e5:7d:4e:4a:af:93:15:ef:93:aa:
a8:9e:7b:d6:1c:db:fe:d6:c7:82:ce:c4:83:31:ea:f8:81:5e:
79:0a:52:9b:73:4a:a0:73:99:94:2f:b3:2e:63:f5:97:1f:03:
32:bf:0e:52:e9:95:82:4f:01:93:3b:28:e6:7c:81:92:f1:41:
15:76:a5:41:f3:b7:39:3f:9a:c9:3a:6e:69:ad:06:b5:07:ea:
80:06:e3:78:50:e5:a1:6d:40:9b:32:b1:13:6c:6a:53:0c:a5:
e9:16:c9:40:51:77:c7:55:6f:b4:5e:58:5d:90:c9:a8:81:be:
98:76:5a:96:e9:08:c4:63:0c:5f:2d:07:61:62:79:27:d6:d8:
e6:01:dd:5a:f0:94:03:fe:ba:c5:7e:3b:e5:a3:a0:97:9f:78:
45:af:7f:49:7d:b9:df:95:5f:17:d5:fc:ee:ca:90:60:bb:06:
c1:0d:29:dd:a0:3c:be:82:36:b9:9f:17:a8:ea:9b:a4:b3:bd:
ed:d7:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:25:44 2025 by rpki-client