Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/xPCjYERP2iSrA1MGEKbWefwn_2M.roa
File: xPCjYERP2iSrA1MGEKbWefwn_2M.roa (raw, json)
Hash identifier: AgF9BrIVcK3ElhOD5b8SzwldRj3mMNOHu+nmrI4c3B0=
Subject key identifier: C4:F0:A3:60:44:4F:DA:24:AB:03:53:06:10:A6:D6:79:FC:27:FF:63
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F8C21B7D0842B1DF4B62F8A46AA08
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/xPCjYERP2iSrA1MGEKbWefwn_2M.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213129
IP address blocks: 195.178.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8c:21:b7:d0:84:2b:1d:f4:b6:2f:8a:46:aa:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4f0a360444fda24ab03530610a6d679fc27ff63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:e8:eb:3c:62:ba:75:fb:fa:6e:41:06:43:
bc:30:e2:af:87:48:01:bb:71:79:7a:70:35:39:6f:
87:da:cf:70:fa:9e:79:0e:df:d8:e2:56:c8:3b:76:
5c:b0:ab:1f:8c:54:e3:8f:c3:af:9c:2b:a0:02:25:
c1:23:e0:6b:1f:18:1b:52:1f:5c:bf:d0:51:bd:ad:
bd:b8:a7:9c:c2:89:e9:f2:f3:a4:44:89:3e:59:7c:
51:bd:6c:f7:f4:35:6e:f4:8f:b5:71:de:03:ac:30:
59:bb:a6:04:d1:c3:24:72:95:f8:d9:47:e2:52:56:
19:b2:98:b9:93:74:70:f1:11:6e:cd:ab:90:64:e5:
09:f4:c0:f5:d0:da:45:08:63:9e:22:7c:22:69:85:
64:84:15:96:4d:2f:9e:49:0c:61:f4:b8:60:00:ff:
86:12:82:bc:91:a0:9b:79:3b:be:8e:5f:08:b7:41:
52:85:ff:7f:ea:c3:65:c3:77:e9:97:b8:02:5b:d8:
18:aa:4a:77:b4:69:c7:1b:d2:a1:2c:eb:a9:e5:52:
46:de:af:69:26:d5:4e:8d:20:79:ce:b2:40:91:6c:
2a:c5:9c:90:4c:b3:e7:8c:8f:88:fe:bc:1d:37:3b:
63:04:4b:2e:d6:bb:bf:70:81:f1:58:2b:cd:2d:c7:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F0:A3:60:44:4F:DA:24:AB:03:53:06:10:A6:D6:79:FC:27:FF:63
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/xPCjYERP2iSrA1MGEKbWefwn_2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:53:43:b3:45:02:ca:50:d0:de:01:78:e4:ec:95:6b:31:02:
e6:ab:6d:fb:98:3e:09:c5:65:2d:c9:3c:d0:7c:30:a8:97:22:
4e:58:96:e3:40:6e:a9:67:f4:f2:b3:48:e1:6b:97:11:c2:ad:
d5:f4:20:08:e9:44:6e:c2:59:3f:7c:26:31:63:2a:3e:83:94:
aa:95:fa:bf:bb:41:42:e1:ec:2c:d6:d1:28:0b:64:05:06:67:
df:c3:a4:f3:48:6c:55:fd:46:b5:cd:2e:45:56:2f:42:85:84:
64:8c:50:16:ec:f9:db:1a:d8:fd:08:f0:ed:49:c7:4d:47:c9:
e9:0c:08:71:c3:bc:c7:92:34:3f:4f:f4:6a:72:2a:99:b2:59:
d4:d4:66:96:ae:cb:90:58:f4:ca:80:3b:6f:4c:89:16:77:2c:
cd:3b:bc:c6:de:1e:d6:98:71:a3:6e:1a:86:1b:67:2a:d8:b4:
9e:6e:21:fc:bd:8f:8c:92:85:28:a9:84:3e:96:17:ce:ed:ec:
ec:34:ba:4a:68:94:0c:74:74:fa:dc:6d:77:54:5b:0b:7d:b6:
a1:1f:b4:0f:a1:36:56:c9:35:7e:fe:78:57:6b:c3:c3:6e:67:
3a:8e:77:e9:77:ff:e1:27:58:b0:4a:2f:08:39:18:b4:99:91:
4a:48:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:59 2025 by rpki-client