Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/G6lV9_s8LSeiVKeKbr-QUX9J5xE.roa
File: G6lV9_s8LSeiVKeKbr-QUX9J5xE.roa (raw, json)
Hash identifier: xSU9ezCurb6F30k2udnN+VBeLy+VzWw185CkK8T99e0=
Subject key identifier: 1B:A9:55:F7:FB:3C:2D:27:A2:54:A7:8A:6E:BF:90:51:7F:49:E7:11
Certificate issuer: /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial: 018573F1ACB99470EB9AF09CF76D93552A0F
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/G6lV9_s8LSeiVKeKbr-QUX9J5xE.roa
Signing time: Mon 02 Jan 2023 19:24:56 +0000
ROA not before: Mon 02 Jan 2023 19:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 178.248.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:ac:b9:94:70:eb:9a:f0:9c:f7:6d:93:55:2a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Validity
Not Before: Jan 2 19:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ba955f7fb3c2d27a254a78a6ebf90517f49e711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5c:12:c2:83:1b:83:69:a9:d6:aa:0a:b1:f0:
dc:93:f4:fc:b8:36:54:a9:24:67:15:27:51:f6:be:
19:3f:f5:fe:fe:b6:42:ea:ea:ff:05:cd:8a:17:de:
f1:c7:a7:16:6d:57:ad:93:34:2f:00:0b:ff:da:4d:
80:dc:c5:67:84:bb:fa:43:e8:22:a0:20:8f:df:db:
0f:e5:24:87:48:b3:02:0c:6f:3c:89:90:1d:64:09:
f7:26:5f:0a:ea:f4:e7:2f:fe:a8:79:b7:06:02:99:
9f:c3:95:29:7e:f4:e6:45:ba:d8:ee:26:d4:23:48:
4c:db:ef:c2:bf:7a:62:4d:ce:38:a5:e2:47:00:4f:
93:33:c3:ce:65:fa:0f:d7:77:a4:e1:9d:74:68:84:
cb:40:d4:6d:29:b4:7d:bc:b4:cd:aa:82:27:be:9c:
85:1b:63:f8:1f:60:4d:fb:71:fc:ac:c8:a6:5e:2b:
75:70:cb:82:88:68:1a:ce:ce:b8:45:b0:65:a3:df:
a6:a1:71:1f:e6:cb:06:79:2f:eb:bb:72:5b:ed:e3:
f9:e3:76:0b:c3:9f:17:de:47:c4:b7:7e:84:5b:a4:
b6:1d:fa:d4:49:0c:a1:b5:76:c4:19:01:1f:b2:17:
04:7d:b5:a9:d2:35:b5:65:66:3d:28:d1:8c:7c:8f:
d7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A9:55:F7:FB:3C:2D:27:A2:54:A7:8A:6E:BF:90:51:7F:49:E7:11
X509v3 Authority Key Identifier:
keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/G6lV9_s8LSeiVKeKbr-QUX9J5xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.155.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c7:d5:1a:25:b8:f2:11:1c:fa:6b:a3:f1:7e:3a:0a:03:d9:
dd:5b:4d:a2:0a:2f:8f:fd:71:c5:a2:a9:c4:d6:ef:79:7b:30:
31:b4:d9:6f:7a:ed:88:ee:3d:d4:b9:96:a2:e7:b6:f5:71:87:
f5:40:19:c6:05:3a:59:a7:3f:91:28:ba:2c:fa:8f:ae:f2:d4:
84:ba:62:da:a3:01:dd:f8:05:eb:dd:1f:ab:f6:d2:10:69:fc:
5c:d6:68:25:e5:21:25:b3:45:3f:5c:ea:62:3d:3a:aa:93:02:
9e:c4:53:74:ee:83:44:f7:c9:27:a9:64:b6:ed:ca:6f:49:86:
42:b6:7e:62:45:49:cf:9d:4d:57:36:eb:90:e0:81:1a:89:6e:
13:6c:8d:49:d7:09:83:2d:2d:26:dd:47:a7:eb:5c:cb:e6:89:
2f:13:34:6b:7e:5c:fc:50:49:83:e1:09:f9:e3:61:cd:ef:eb:
ba:c5:f6:b8:80:91:e4:37:dd:33:8f:f8:e6:6b:08:d7:45:5f:
c7:40:63:a3:0d:e8:5d:65:d9:12:5c:5d:49:9e:27:76:bb:38:
da:3d:98:f3:5f:4b:40:bd:2d:0e:ae:85:70:92:fe:de:d1:1b:
0f:06:6d:0b:0a:24:ca:55:0e:ac:80:0d:d4:dc:85:48:42:67:
a5:84:5d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:48:00 2025 by rpki-client