Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/z4Rtmz6t6c3uqXsk7WGqLCCEERI.roa
File: z4Rtmz6t6c3uqXsk7WGqLCCEERI.roa (raw, json)
Hash identifier: JZepL6D/k4nJl6/C5sz18t6zxYuNfxZeSTEwoJkeNs8=
Subject key identifier: CF:84:6D:9B:3E:AD:E9:CD:EE:A9:7B:24:ED:61:AA:2C:20:84:11:12
Certificate issuer: /CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a
Certificate serial: 019420D632C8DC29E0A55F573F1BBAECBF0F
Authority key identifier: AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/z4Rtmz6t6c3uqXsk7WGqLCCEERI.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210393
IP address blocks: 178.211.158.0/24 maxlen: 24
2a12:f480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:32:c8:dc:29:e0:a5:5f:57:3f:1b:ba:ec:bf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf846d9b3eade9cdeea97b24ed61aa2c20841112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9f:97:bf:b2:d5:90:cd:94:bc:45:b1:19:d3:
71:45:47:15:d5:69:c0:14:84:00:3e:ab:87:69:8f:
cc:63:db:d0:44:df:74:59:ee:3d:ea:bd:7f:71:8e:
f3:93:72:de:0f:79:e5:f7:96:5c:2e:02:61:39:e6:
e5:57:e6:3f:13:22:fe:46:cd:60:2b:d1:54:2a:1d:
58:66:8f:48:f7:74:fc:5e:2d:bc:1c:ea:1b:d3:50:
5f:42:7b:2d:04:40:e6:8b:ee:dd:a6:d1:00:1b:2d:
d2:c9:7e:c6:19:36:2e:6a:03:41:73:94:b4:90:91:
73:0c:44:72:a8:d1:d6:67:2d:d5:f9:2b:31:4d:1b:
86:a7:6a:aa:7f:5c:33:00:ba:fc:c1:9b:d9:2e:96:
15:f2:2f:f8:34:7e:34:07:60:0d:5b:f0:63:81:ae:
4d:d7:94:fa:42:b4:f9:b2:12:22:95:90:ff:a5:62:
37:54:48:f8:3e:1f:33:85:43:c2:be:57:15:c4:a8:
2d:3a:8c:92:24:75:50:58:51:af:f9:2f:9f:dc:d8:
04:8f:44:0c:c6:d6:3c:4c:a2:62:e0:4c:0e:a0:db:
46:a9:0f:1d:5e:fc:99:d9:45:50:1b:fc:d1:84:3f:
5b:46:90:e0:e7:6a:24:08:68:b7:b7:a9:a2:ba:e7:
d1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:84:6D:9B:3E:AD:E9:CD:EE:A9:7B:24:ED:61:AA:2C:20:84:11:12
X509v3 Authority Key Identifier:
keyid:AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/z4Rtmz6t6c3uqXsk7WGqLCCEERI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.158.0/24
IPv6:
2a12:f480::/29
Signature Algorithm: sha256WithRSAEncryption
a0:a5:53:60:47:52:ee:6f:2b:43:b3:a2:28:cf:bf:cb:ed:e1:
6e:67:cb:9e:f6:d2:fc:6b:db:45:57:7c:86:b2:e2:1b:39:53:
a4:f2:66:a9:af:60:d7:f4:f9:bc:bf:d5:a0:3e:3c:75:fa:a2:
f9:57:e0:2a:50:21:ba:bc:5d:f3:9a:ec:14:3b:18:be:84:97:
12:d8:a7:f5:48:a8:41:0f:4e:a7:6e:19:a8:91:5a:7e:b8:cf:
28:62:b3:f7:c5:51:8b:74:7f:63:32:de:c8:0d:22:53:3a:03:
2d:1a:3d:2c:92:f5:90:e6:92:97:aa:34:76:9a:f0:74:73:cf:
fe:42:62:22:72:f5:07:0b:25:e6:90:2d:b0:af:45:fa:9e:93:
a9:2c:79:01:db:fe:10:93:50:74:7b:ae:2f:56:6e:29:f3:ee:
6a:f1:65:19:39:fa:ac:02:84:20:4f:2b:f0:a6:d3:64:b9:cf:
d4:5c:64:73:9f:cf:10:c3:b8:7e:b9:5c:2d:8b:47:dc:9b:47:
49:d8:64:57:88:d3:d8:ef:40:48:c2:80:19:52:5a:de:d6:e6:
28:25:dc:a0:53:7a:1b:63:2c:c8:af:8a:a0:ce:01:33:c0:a5:
14:16:8a:05:7c:06:eb:69:45:e8:82:df:3e:6c:e6:47:f9:24:
6b:87:cd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:26 2025 by rpki-client