Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa
File: 4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa (raw, json)
Hash identifier: xjVxZUWWNj0H8HPJGRtdhqp5nG1AYywGPAoN+0SYdO8=
Subject key identifier: E3:FA:0D:E6:DD:95:48:83:AA:FF:E5:F9:83:70:9E:F9:08:81:94:A6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 019421B1DC5ED7E02BA8E071550A840680CC
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 178.251.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:dc:5e:d7:e0:2b:a8:e0:71:55:0a:84:06:80:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3fa0de6dd954883aaffe5f983709ef9088194a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:a7:2a:24:f7:d2:f6:d7:3c:7d:f4:e8:40:
ba:a5:02:ff:a1:cc:9e:15:10:5d:19:38:92:5f:27:
aa:06:41:d5:6e:a7:11:1a:28:87:df:ac:e8:a0:86:
eb:26:b3:1e:9c:16:8b:07:7f:72:84:43:fc:4e:0e:
14:93:e2:58:77:54:d0:fd:b3:e1:f3:fc:5d:5c:8b:
75:16:4a:4c:a8:b5:d4:5d:c3:92:ca:7a:49:dc:54:
6d:f2:a4:b7:e2:62:80:22:9c:72:c9:51:da:c3:d5:
56:a4:2d:3d:a5:22:a9:bd:c4:ea:93:ef:81:a2:a2:
c4:42:a6:95:ba:d8:95:76:e5:68:a6:d1:9e:2b:cc:
19:e9:f5:28:8f:5a:5e:75:23:a9:b1:36:9b:aa:53:
75:a5:78:25:37:27:fc:2e:69:97:11:e8:91:98:01:
68:a8:eb:7e:f8:7b:91:23:48:5e:73:7a:d4:99:81:
86:69:b1:79:3d:d5:af:b2:83:92:d9:28:39:21:e1:
67:e9:69:7c:b7:2c:d9:e8:79:c8:e1:53:86:7e:f3:
d7:b9:00:e8:77:a3:f8:41:45:22:1d:c7:d2:12:17:
40:9a:09:97:d6:66:a4:28:4d:15:38:08:c7:ce:c0:
47:b9:09:80:bc:8c:71:10:79:0e:62:09:85:a0:5f:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FA:0D:E6:DD:95:48:83:AA:FF:E5:F9:83:70:9E:F9:08:81:94:A6
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:be:8c:de:39:95:ed:85:2c:de:f4:51:0c:37:f6:02:c0:9d:
cc:d4:53:15:e7:cd:4d:48:1b:af:98:93:b8:73:f8:32:23:e5:
3f:23:a4:ec:7d:f1:2c:c1:9a:f6:91:4a:28:20:b6:75:1e:2f:
c1:7f:58:ac:5a:78:8c:dd:46:b3:5e:f6:3a:be:9f:ec:da:cd:
92:1e:5f:f8:72:a5:14:38:02:e4:8f:22:41:6b:c7:3e:00:a4:
ce:3a:5c:01:ea:16:b3:74:be:83:61:45:24:50:51:e7:31:63:
b1:58:de:1c:d4:c6:4a:31:c7:7e:77:37:e7:81:0b:4a:ca:01:
fd:97:0e:c2:20:5e:3e:36:6d:d6:be:33:93:3e:5b:a8:b3:fb:
20:4c:50:e3:ce:0f:68:0f:bb:54:4c:53:a1:cd:ee:d0:6a:7d:
07:fa:f5:b5:9d:f9:ca:b6:87:f2:e0:db:77:3f:a3:64:fe:04:
56:cc:58:6e:cb:e3:15:59:00:6c:63:58:af:88:4e:e1:0d:47:
e2:f4:01:4c:31:89:9b:09:2e:fd:12:3e:7c:41:52:cf:07:a0:
35:1f:2e:21:10:22:3a:a3:c4:51:e2:9e:be:a9:79:a6:a4:28:
39:b5:da:c0:f2:60:ee:9a:cc:a6:9b:20:ed:52:fc:8d:85:32:
dc:7b:c6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:54 2025 by rpki-client