Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/L-9VyOYlqSWygtYYz3dyI-D1TKg.roa
File: L-9VyOYlqSWygtYYz3dyI-D1TKg.roa (raw, json)
Hash identifier: eLeNJkfdi4Ruf965cuzs10Cb4FBJoGJu0S0WA25YjEM=
Subject key identifier: 2F:EF:55:C8:E6:25:A9:25:B2:82:D6:18:CF:77:72:23:E0:F5:4C:A8
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827B57A4D7015E48E471FC63D45B0EA
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/L-9VyOYlqSWygtYYz3dyI-D1TKg.roa
Signing time: Thu 02 Jan 2025 17:54:38 +0000
ROA not before: Thu 02 Jan 2025 17:54:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5483
IP address blocks: 178.238.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:b5:7a:4d:70:15:e4:8e:47:1f:c6:3d:45:b0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fef55c8e625a925b282d618cf777223e0f54ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:6c:20:96:90:79:dc:f1:97:2f:05:9d:f5:
e7:eb:d2:ba:32:96:d7:08:af:b0:80:1a:22:cd:33:
ed:ac:bd:de:77:49:03:ea:c6:5a:16:7a:ef:49:40:
a5:7e:9f:ad:b0:2d:7e:a3:0a:93:89:48:7c:b4:56:
c0:0e:b4:81:6f:99:ae:0f:82:e1:ea:20:aa:6b:2f:
88:f3:28:40:f7:74:fd:2f:13:96:a7:7e:8d:8b:37:
99:f8:c2:6e:b5:63:ec:9c:34:12:be:a4:00:b1:97:
9c:ec:be:1a:eb:c7:e9:d2:39:62:ae:9f:10:60:82:
33:5a:2d:b0:58:0f:cd:77:10:d9:bf:d4:57:ed:54:
8c:de:77:dc:67:0b:f0:0c:20:d2:0f:78:26:57:5f:
b1:bb:3d:df:12:5b:ad:24:39:7b:9b:b3:dc:fd:b3:
3a:b5:f1:6e:eb:7b:88:42:4b:e1:40:b0:e7:36:70:
47:9d:97:b2:4d:fa:e7:c4:cc:ea:68:35:b6:6a:dd:
e5:ab:f8:4d:74:9f:33:36:14:ff:2d:65:a0:bb:84:
15:95:7d:2a:f5:37:bd:e4:58:0e:04:32:3e:23:8b:
b8:b8:a4:f9:02:0a:6e:40:9b:f6:41:95:bc:79:f6:
2b:ad:75:8a:23:dc:8c:41:13:56:ad:19:15:17:2e:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EF:55:C8:E6:25:A9:25:B2:82:D6:18:CF:77:72:23:E0:F5:4C:A8
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/L-9VyOYlqSWygtYYz3dyI-D1TKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.238.221.0/24
Signature Algorithm: sha256WithRSAEncryption
13:83:24:60:61:1d:2f:4c:de:63:8d:c5:27:8d:70:4a:58:33:
81:14:1f:fb:f5:14:f8:20:3c:17:e1:6d:5e:f9:e0:4a:32:ab:
f7:97:e9:85:53:71:99:3f:8e:eb:6b:43:9b:31:0e:de:23:a4:
02:d0:52:3f:45:85:b7:74:14:90:20:e0:40:48:86:44:0b:51:
1c:0d:74:a7:0a:d9:6d:27:eb:ae:16:16:50:07:08:bc:79:c6:
56:d9:59:19:f1:98:c1:c7:3a:6b:fe:43:bd:68:9a:7f:5f:75:
9a:ac:bb:c7:44:12:1b:6d:fe:0d:8c:ed:ee:5a:c9:f8:3e:b4:
c9:16:4c:09:4f:c1:1c:f7:5a:b3:63:25:69:5c:3b:13:f4:2c:
85:e4:94:e5:c6:d9:c7:c3:57:38:e1:04:cd:c1:26:7d:50:18:
c2:82:3f:c3:e8:ff:d8:78:ca:44:23:1b:ab:a4:70:a3:f3:3a:
94:68:a5:4b:c2:e3:3c:86:b0:ba:c6:53:3b:0f:a1:81:ac:19:
4c:ee:97:08:e0:00:89:80:7d:43:f1:94:29:5e:cc:b4:ae:e5:
a1:9c:8b:92:5d:cc:1d:1b:2d:a2:e9:c8:50:23:e2:30:38:fd:
5d:40:f0:12:b4:66:3c:fe:05:c1:e3:c4:be:a8:8c:05:f0:fe:
a6:36:8c:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ7V6TXAV5I5HH8Y9RbDqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjUwMTAyMTc1NDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmVmNTVjOGU2MjVhOTI1YjI4MmQ2MThjZjc3NzIyM2UwZjU0Y2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjxsIJaQedzxly8FnfXn69K6MpbX
CK+wgBoizTPtrL3ed0kD6sZaFnrvSUClfp+tsC1+owqTiUh8tFbADrSBb5muD4Lh
6iCqay+I8yhA93T9LxOWp36NizeZ+MJutWPsnDQSvqQAsZec7L4a68fp0jlirp8Q
YIIzWi2wWA/NdxDZv9RX7VSM3nfcZwvwDCDSD3gmV1+xuz3fElutJDl7m7Pc/bM6
tfFu63uIQkvhQLDnNnBHnZeyTfrnxMzqaDW2at3lq/hNdJ8zNhT/LWWgu4QVlX0q
9Te95FgOBDI+I4u4uKT5AgpuQJv2QZW8efYrrXWKI9yMQRNWrRkVFy4k7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC/vVcjmJaklsoLWGM93ciPg9UyoMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvTC05VnlPWWxxU1d5Z3RZWXozZHlJLUQxVEtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu7dMA0G
CSqGSIb3DQEBCwUAA4IBAQATgyRgYR0vTN5jjcUnjXBKWDOBFB/79RT4IDwX4W1e
+eBKMqv3l+mFU3GZP47ra0ObMQ7eI6QC0FI/RYW3dBSQIOBASIZEC1EcDXSnCtlt
J+uuFhZQBwi8ecZW2VkZ8ZjBxzpr/kO9aJp/X3WarLvHRBIbbf4NjO3uWsn4PrTJ
FkwJT8Ec91qzYyVpXDsT9CyF5JTlxtnHw1c44QTNwSZ9UBjCgj/D6P/YeMpEIxur
pHCj8zqUaKVLwuM8hrC6xlM7D6GBrBlM7pcI4ACJgH1D8ZQpXsy0ruWhnIuSXcwd
Gy2i6chQI+IwOP1dQPAStGY8/gXB48S+qIwF8P6mNoxO
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:27 2025 by rpki-client