Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/9cE7vjT6DzlEjW81UqTEgPCC5kk.roa
File: 9cE7vjT6DzlEjW81UqTEgPCC5kk.roa (raw, json)
Hash identifier: YeyZuOMLUCYoKrtFyEejrMk173P/JZ9uykjJbI6/Rr0=
Subject key identifier: F5:C1:3B:BE:34:FA:0F:39:44:8D:6F:35:52:A4:C4:80:F0:82:E6:49
Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial: 0194221FEAFACDC9046F525414FAE95D4EEB
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/9cE7vjT6DzlEjW81UqTEgPCC5kk.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1756
IP address blocks: 178.173.128.0/24 maxlen: 24
178.173.129.0/24 maxlen: 24
178.173.130.0/24 maxlen: 24
178.173.131.0/24 maxlen: 24
178.173.132.0/24 maxlen: 24
178.173.133.0/24 maxlen: 24
178.173.134.0/24 maxlen: 24
178.173.135.0/24 maxlen: 24
178.173.136.0/24 maxlen: 24
178.173.137.0/24 maxlen: 24
178.173.138.0/24 maxlen: 24
178.173.139.0/24 maxlen: 24
178.173.140.0/24 maxlen: 24
178.173.141.0/24 maxlen: 24
178.173.142.0/24 maxlen: 24
178.173.143.0/24 maxlen: 24
178.173.144.0/24 maxlen: 24
178.173.145.0/24 maxlen: 24
178.173.146.0/24 maxlen: 24
178.173.147.0/24 maxlen: 24
178.173.148.0/24 maxlen: 24
178.173.149.0/24 maxlen: 24
178.173.150.0/24 maxlen: 24
178.173.151.0/24 maxlen: 24
178.173.160.0/24 maxlen: 24
178.173.161.0/24 maxlen: 24
178.173.162.0/24 maxlen: 24
178.173.163.0/24 maxlen: 24
178.173.164.0/24 maxlen: 24
178.173.165.0/24 maxlen: 24
178.173.166.0/24 maxlen: 24
178.173.167.0/24 maxlen: 24
178.173.168.0/24 maxlen: 24
178.173.169.0/24 maxlen: 24
178.173.170.0/24 maxlen: 24
178.173.171.0/24 maxlen: 24
178.173.172.0/24 maxlen: 24
178.173.173.0/24 maxlen: 24
178.173.174.0/24 maxlen: 24
178.173.175.0/24 maxlen: 24
178.173.176.0/24 maxlen: 24
178.173.177.0/24 maxlen: 24
178.173.178.0/24 maxlen: 24
178.173.179.0/24 maxlen: 24
178.173.180.0/24 maxlen: 24
178.173.181.0/24 maxlen: 24
178.173.182.0/24 maxlen: 24
178.173.183.0/24 maxlen: 24
178.173.184.0/24 maxlen: 24
178.173.185.0/24 maxlen: 24
178.173.186.0/24 maxlen: 24
178.173.187.0/24 maxlen: 24
178.173.188.0/24 maxlen: 24
178.173.189.0/24 maxlen: 24
178.173.190.0/24 maxlen: 24
178.173.191.0/24 maxlen: 24
178.173.192.0/24 maxlen: 24
178.173.193.0/24 maxlen: 24
178.173.194.0/24 maxlen: 24
178.173.195.0/24 maxlen: 24
178.173.196.0/24 maxlen: 24
178.173.197.0/24 maxlen: 24
178.173.198.0/24 maxlen: 24
178.173.199.0/24 maxlen: 24
178.173.200.0/24 maxlen: 24
178.173.201.0/24 maxlen: 24
178.173.202.0/24 maxlen: 24
178.173.203.0/24 maxlen: 24
178.173.204.0/24 maxlen: 24
178.173.205.0/24 maxlen: 24
178.173.206.0/24 maxlen: 24
178.173.207.0/24 maxlen: 24
178.173.208.0/24 maxlen: 24
178.173.209.0/24 maxlen: 24
178.173.210.0/24 maxlen: 24
178.173.211.0/24 maxlen: 24
178.173.212.0/24 maxlen: 24
178.173.213.0/24 maxlen: 24
178.173.214.0/24 maxlen: 24
178.173.215.0/24 maxlen: 24
178.173.216.0/24 maxlen: 24
178.173.217.0/24 maxlen: 24
178.173.218.0/24 maxlen: 24
178.173.219.0/24 maxlen: 24
178.173.220.0/24 maxlen: 24
178.173.221.0/24 maxlen: 24
178.173.222.0/24 maxlen: 24
178.173.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ea:fa:cd:c9:04:6f:52:54:14:fa:e9:5d:4e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5c13bbe34fa0f39448d6f3552a4c480f082e649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:53:5f:28:c5:b1:c8:ec:40:f0:dc:b5:bc:
5d:8f:f0:74:75:f3:49:80:c6:04:64:ff:b8:15:3d:
88:a5:5c:99:45:21:fc:e6:c3:30:dc:91:ad:46:c1:
fe:97:aa:28:af:35:92:71:e5:f3:bf:27:db:9d:02:
05:1d:bb:40:33:61:5c:52:6e:8b:65:f9:5f:63:39:
bb:7b:d9:f3:7b:a7:f2:e2:f5:97:04:be:5c:96:48:
53:09:0d:54:3a:e2:ab:d0:fc:bf:98:94:8d:6f:28:
e8:d6:95:46:a5:7c:55:72:d5:4c:7f:ad:92:28:e5:
c7:93:9f:67:0e:35:cb:3d:a2:a9:bf:5e:70:8b:65:
0e:ee:b9:f2:ef:31:d7:cd:cc:09:08:52:b4:c3:3c:
d5:87:df:e5:b1:08:98:d0:b3:3e:b3:64:0a:12:bf:
47:da:21:30:4a:5c:a7:c5:dd:66:63:8c:56:8b:00:
81:f5:65:22:6e:05:78:bc:20:4c:d3:26:e5:30:7d:
79:57:7c:cf:72:2e:0c:72:df:ba:a3:b0:18:a3:82:
10:63:73:0e:76:f4:a0:70:ee:11:cf:3c:91:f2:fd:
5a:2d:94:86:5b:34:07:fc:5e:99:5a:62:a1:6c:81:
e4:cc:33:f6:16:9a:6a:16:39:10:63:fd:83:f9:46:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C1:3B:BE:34:FA:0F:39:44:8D:6F:35:52:A4:C4:80:F0:82:E6:49
X509v3 Authority Key Identifier:
keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/9cE7vjT6DzlEjW81UqTEgPCC5kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.128.0-178.173.151.255
178.173.160.0-178.173.223.255
Signature Algorithm: sha256WithRSAEncryption
84:d4:6e:29:0b:36:25:bc:cc:a2:47:c3:19:6c:e9:c8:db:fb:
b7:aa:2e:61:69:74:5c:77:b0:c5:34:b4:40:28:ae:ab:d5:db:
53:23:c7:e2:4f:ae:18:71:00:6c:66:f4:07:21:66:23:a6:65:
9b:2e:2b:65:b2:6d:98:38:59:74:0c:50:24:4b:5a:56:7b:6d:
b7:02:b8:95:f1:3f:91:6b:b8:f3:3b:28:64:49:d0:09:e5:ac:
e7:9a:83:9f:8d:e9:3e:95:7c:e9:bc:89:ad:14:3f:65:69:0c:
06:59:31:e5:49:a4:17:71:de:93:2c:10:41:a4:f4:24:c3:3d:
23:d5:c8:f6:b3:42:17:c3:97:20:f2:9b:03:48:66:81:fe:2a:
f9:1c:1e:08:59:98:cf:cf:c7:da:cb:24:7e:66:2a:23:bd:c2:
e6:9f:a1:a6:8a:fe:e7:df:32:b0:cf:61:cc:2f:eb:72:0c:51:
af:2e:61:db:38:38:32:88:18:85:e3:cd:b1:a9:45:d0:ff:95:
7e:45:58:78:b1:19:27:6b:d2:ee:3a:ef:e4:94:e6:84:ed:e9:
6c:d0:02:c8:ef:88:a6:f4:84:41:db:b0:81:1c:ee:f3:4e:78:
a4:b4:eb:34:ec:45:fe:b6:36:36:08:db:62:60:e9:61:cd:30:
bd:c3:c5:cc
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZQiH+r6zckEb1JUFPrpXU7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTU5MjFmNWJhNmJkMTQ3ZmY0MDAxMTdhYTk3Mzg2MzNm
MTU4N2QwHhcNMjUwMTAxMTM0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWMxM2JiZTM0ZmEwZjM5NDQ4ZDZmMzU1MmE0YzQ4MGYwODJlNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPtTXyjFscjsQPDctbxdj/B0dfNJ
gMYEZP+4FT2IpVyZRSH85sMw3JGtRsH+l6oorzWSceXzvyfbnQIFHbtAM2FcUm6L
ZflfYzm7e9nze6fy4vWXBL5clkhTCQ1UOuKr0Py/mJSNbyjo1pVGpXxVctVMf62S
KOXHk59nDjXLPaKpv15wi2UO7rny7zHXzcwJCFK0wzzVh9/lsQiY0LM+s2QKEr9H
2iEwSlynxd1mY4xWiwCB9WUibgV4vCBM0yblMH15V3zPci4Mct+6o7AYo4IQY3MO
dvSgcO4RzzyR8v1aLZSGWzQH/F6ZWmKhbIHkzDP2FppqFjkQY/2D+UbW7QIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFPXBO740+g85RI1vNVKkxIDwguZJMB8GA1UdIwQY
MBaAFLwVkh9bpr0Uf/QAEXqpc4Yz8Vh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAt
MDk5MGNlNzQ4MWU3LzEvOWNFN3ZqVDZEemxFalc4MVVxVEVnUENDNWtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAtMDk5MGNlNzQ4MWU3
LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAeyrYAD
BAOyrZAwDAMEBbKtoAMEBbKtwDANBgkqhkiG9w0BAQsFAAOCAQEAhNRuKQs2JbzM
okfDGWzpyNv7t6ouYWl0XHewxTS0QCiuq9XbUyPH4k+uGHEAbGb0ByFmI6Zlmy4r
ZbJtmDhZdAxQJEtaVntttwK4lfE/kWu48zsoZEnQCeWs55qDn43pPpV86byJrRQ/
ZWkMBlkx5UmkF3HekywQQaT0JMM9I9XI9rNCF8OXIPKbA0hmgf4q+RweCFmYz8/H
2sskfmYqI73C5p+hpor+598ysM9hzC/rcgxRry5h2zg4MogYhePNsalF0P+VfkVY
eLEZJ2vS7jrv5JTmhO3pbNACyO+IpvSEQduwgRzu8054pLTrNOxF/rY2NgjbYmDp
Yc0wvcPFzA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:42:19 2025 by rpki-client