Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1rOh4H-jgNWf43VSCk5TyRYPeaI.roa
File: 1rOh4H-jgNWf43VSCk5TyRYPeaI.roa (raw, json)
Hash identifier: 9N1xA1Jdf2gPPO01Bj8AMLgsBsrvbWhzjwTJoU3tKVo=
Subject key identifier: D6:B3:A1:E0:7F:A3:80:D5:9F:E3:75:52:0A:4E:53:C9:16:0F:79:A2
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 03218702
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1rOh4H-jgNWf43VSCk5TyRYPeaI.roa
Signing time: Wed 08 Jun 2022 13:12:02 +0000
ROA not before: Wed 08 Jun 2022 13:12:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139660
IP address blocks: 178.208.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52528898 (0x3218702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jun 8 13:12:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6b3a1e07fa380d59fe375520a4e53c9160f79a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:33:c7:6b:75:06:24:61:37:13:31:ed:27:3c:
6d:e7:cd:02:72:b8:a2:1a:c6:3b:c2:79:39:5f:89:
8b:75:50:1a:2e:f5:53:16:b1:fb:53:c6:ee:9a:96:
7e:9a:86:b5:12:e1:32:05:f6:fa:e9:50:21:ce:64:
4a:3f:31:f1:1a:40:9a:6c:4a:9b:16:ed:1c:e6:50:
e4:c8:d5:2c:6c:26:56:cc:84:93:49:fe:cc:1c:0f:
de:cd:87:fd:8e:70:0a:91:64:17:9a:f6:cf:0f:bc:
b5:c7:f0:d1:46:ee:91:b7:f0:66:74:50:d0:58:7a:
72:43:df:08:4d:1f:0e:95:44:1b:25:96:cf:02:1a:
4b:99:fe:fb:28:71:fe:ba:16:43:ba:18:db:45:50:
2f:2a:ee:17:eb:fe:23:6a:63:b4:f5:d0:16:6c:cf:
11:3f:73:ed:60:0e:54:48:52:0e:ca:19:c7:47:71:
e3:af:a2:ac:b8:5d:6b:de:e0:d2:76:b4:14:2f:ac:
13:d0:22:d2:ba:28:1f:eb:cc:f6:61:2b:a9:74:67:
39:8c:30:09:1f:a1:2b:35:58:92:69:91:3a:7e:47:
cc:9a:0f:8c:9f:ed:63:c8:86:32:cc:ce:5e:43:00:
4e:43:42:a7:8a:0e:5f:7b:83:4c:d7:74:67:e4:c0:
2a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B3:A1:E0:7F:A3:80:D5:9F:E3:75:52:0A:4E:53:C9:16:0F:79:A2
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1rOh4H-jgNWf43VSCk5TyRYPeaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.184.0/24
Signature Algorithm: sha256WithRSAEncryption
16:fa:27:f6:3f:21:ef:16:03:d0:e9:79:3b:30:dc:78:b3:50:
fd:8f:66:6b:05:6a:71:2b:ae:15:e5:24:c7:c6:3c:e7:3f:6e:
16:fb:19:0d:da:6c:18:a7:5a:79:69:46:96:45:ad:d3:4b:af:
6a:00:05:27:40:13:30:1f:bd:fb:e4:ac:77:3b:7b:b2:26:f4:
22:cb:ba:71:ba:a4:58:d7:54:51:8f:a7:c5:35:23:30:de:07:
e7:ab:c5:41:cb:e6:81:09:d7:f3:bf:41:71:16:a4:c6:71:7c:
24:ef:e8:9f:2d:d8:08:4c:e6:a1:dd:0c:8b:16:7d:b9:15:d5:
7b:81:2a:87:38:4a:c5:ad:50:1e:20:ca:c7:cf:5d:b3:3d:e1:
56:e8:90:dc:21:68:7f:cb:1f:69:7d:09:41:5a:0c:02:f6:74:
dd:11:b0:e8:16:be:7f:47:e4:71:42:a7:8c:e0:97:1c:dc:d7:
66:f3:19:a1:34:5c:f5:3d:1e:8c:f3:90:48:ca:4c:4a:c0:5b:
1c:37:5d:27:bb:43:c4:2f:29:6d:b4:58:c4:59:07:b1:8d:24:
30:be:77:ec:8b:0d:30:a6:aa:49:e3:52:04:d5:31:f7:e4:91:
f7:70:cc:0f:1a:f3:b7:79:4d:8a:48:3b:2a:bb:50:17:9d:1c:
7b:b3:b8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:05:00 2025 by rpki-client