Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/i3ynHTtcANlGnUFO-0EED6f0b0U.roa
File: i3ynHTtcANlGnUFO-0EED6f0b0U.roa (raw, json)
Hash identifier: YctreESjy3iWsF0ruDo4e3ey9IWrQ0AR7eAUo+pD7SI=
Subject key identifier: 8B:7C:A7:1D:3B:5C:00:D9:46:9D:41:4E:FB:41:04:0F:A7:F4:6F:45
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BF8F5518A4DC31BDDF3B99DEE3FB7
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/i3ynHTtcANlGnUFO-0EED6f0b0U.roa
Signing time: Thu 02 Jan 2025 09:49:57 +0000
ROA not before: Thu 02 Jan 2025 09:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208750
IP address blocks: 178.16.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f8:f5:51:8a:4d:c3:1b:dd:f3:b9:9d:ee:3f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b7ca71d3b5c00d9469d414efb41040fa7f46f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:cc:e7:8f:96:9d:78:f8:66:8f:bc:2e:a0:
8f:13:17:04:f2:c3:fb:44:ab:46:87:2e:6a:51:32:
a4:3a:9c:6e:15:ad:1e:d5:c0:65:d9:49:aa:2e:a5:
a6:f8:ee:2b:c6:84:aa:a4:5b:10:be:c0:df:85:a7:
bb:c6:67:ff:3d:e1:72:04:5b:4b:db:43:90:49:71:
49:a8:19:f4:8e:0c:b8:37:7e:4f:2c:71:e5:42:9f:
d4:2e:07:1b:01:2f:45:f4:31:71:c2:cc:0e:90:da:
eb:46:18:e8:52:63:9e:a4:e7:f5:cc:8e:55:f7:50:
41:d8:e3:7a:6e:70:cb:a4:6b:01:f5:91:82:01:c8:
cd:3b:a1:e0:36:1b:58:25:16:58:3a:9d:84:08:1f:
d0:08:43:7c:ae:e4:70:61:e4:81:d6:99:63:63:44:
aa:1c:ce:b8:ce:b3:85:20:46:3f:47:be:f1:f0:03:
03:ee:43:91:ec:99:59:c2:9d:59:08:7e:48:62:88:
30:8f:37:fc:e4:a9:99:f4:4d:bd:4a:97:21:5c:f7:
bc:23:f9:8a:18:24:19:1c:f0:7f:7e:c0:39:d3:73:
a5:0e:be:2c:64:9e:46:b1:99:d5:87:c2:c7:31:c0:
a8:ce:8a:a7:57:31:fa:de:e1:07:a4:45:c7:f9:fb:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7C:A7:1D:3B:5C:00:D9:46:9D:41:4E:FB:41:04:0F:A7:F4:6F:45
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/i3ynHTtcANlGnUFO-0EED6f0b0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.124.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:56:5a:8a:82:0a:ec:53:5f:d8:88:7c:70:99:28:a1:29:17:
ad:77:11:5b:80:be:dc:e6:e7:a2:7e:3d:bc:a5:9b:b3:8a:73:
ab:ee:d3:98:9c:80:7b:be:c1:58:13:77:34:b2:2f:e9:64:99:
11:3f:25:d5:22:f6:8d:7d:d4:68:42:db:4c:46:16:3b:3e:99:
3b:b2:12:8c:58:71:8d:75:9e:07:23:18:69:97:1a:f2:e5:cc:
6a:9c:4b:85:8f:dc:b3:74:0a:5d:66:d1:93:1a:36:bc:00:7d:
d2:17:6d:6e:0d:41:d1:27:a6:2d:49:db:8b:a2:d7:ee:38:47:
5c:7f:6f:e7:ec:f9:67:08:a5:b9:12:26:b0:b9:c9:00:2e:a7:
b3:91:e5:0b:75:32:48:52:fc:8e:24:ad:70:2e:55:1f:7f:a5:
af:3b:dc:43:26:18:41:17:61:a1:60:b2:51:28:61:8d:7f:3d:
ee:e4:83:73:55:91:00:b4:b6:d8:97:0a:1c:6f:16:06:b3:e3:
41:5c:43:de:83:45:cc:71:08:ab:e0:26:69:40:c5:ff:35:de:
e7:fb:67:ef:14:7e:b6:13:8d:60:37:7f:d4:49:74:64:af:af:
85:81:7a:ae:d6:b0:48:50:95:df:6e:61:6c:96:bb:07:1b:1b:
df:31:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:24 2025 by rpki-client