Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/PRbVUZjr_tkSSfi-FIib8fG3_W4.roa
File: PRbVUZjr_tkSSfi-FIib8fG3_W4.roa (raw, json)
Hash identifier: R/yOtXW0WE4pVF/egFcgM9bF5ysyARX6cwaf9x9/hSc=
Subject key identifier: 3D:16:D5:51:98:EB:FE:D9:12:49:F8:BE:14:88:9B:F1:F1:B7:FD:6E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC6FFFC6E36F82479B2415E43AA6EC
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/PRbVUZjr_tkSSfi-FIib8fG3_W4.roa
Signing time: Thu 02 Jan 2025 07:48:08 +0000
ROA not before: Thu 02 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18464
IP address blocks: 178.173.224.0/24 maxlen: 24
178.173.225.0/24 maxlen: 24
178.173.226.0/24 maxlen: 24
178.173.227.0/24 maxlen: 24
178.173.228.0/24 maxlen: 24
178.173.230.0/24 maxlen: 24
178.173.231.0/24 maxlen: 24
178.173.232.0/22 maxlen: 22
178.173.236.0/24 maxlen: 24
178.173.241.0/24 maxlen: 24
2001:16c0:16c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:6f:ff:c6:e3:6f:82:47:9b:24:15:e4:3a:a6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d16d55198ebfed91249f8be14889bf1f1b7fd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:1c:67:08:15:b1:5a:b2:ad:64:6b:cd:ff:
15:ae:cf:0c:37:9c:b2:ef:18:4f:48:98:a6:67:21:
37:28:36:f5:8d:e4:8c:34:0a:9b:28:4a:49:e4:f6:
01:09:d2:0a:a7:c7:e8:6c:d0:10:b8:33:b4:e8:5d:
69:2c:57:eb:85:fb:4e:27:4c:17:1f:4d:23:cf:d7:
98:ab:a6:35:23:67:fa:46:6a:9f:90:e5:70:7e:07:
13:76:dc:74:b6:25:7c:c8:d8:a8:b8:a2:05:aa:25:
da:ef:00:8a:1b:53:5c:68:02:52:06:14:12:85:00:
f4:06:fa:0f:c1:ea:62:7f:e4:90:a8:13:4f:16:da:
e0:9c:6c:c0:0d:f7:d8:ff:18:37:80:6a:fb:9f:8d:
7d:02:fd:87:04:3d:6a:d8:c7:7a:40:92:38:06:e9:
f5:25:a7:72:36:cf:21:13:84:92:c6:9a:6d:14:21:
a6:3a:b2:e8:93:0f:4b:8e:44:e6:52:3e:5a:b1:23:
7b:0c:bb:91:b6:01:23:09:bc:9f:e1:6d:2b:26:25:
bf:00:17:1b:28:b0:65:ee:1f:c2:67:5e:85:a2:b5:
b0:1e:89:e9:cf:72:fb:42:4d:34:f1:11:b8:7d:d9:
84:96:67:92:26:03:73:ef:d1:d4:5f:00:92:fa:c0:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:16:D5:51:98:EB:FE:D9:12:49:F8:BE:14:88:9B:F1:F1:B7:FD:6E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/PRbVUZjr_tkSSfi-FIib8fG3_W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.224.0-178.173.228.255
178.173.230.0-178.173.236.255
178.173.241.0/24
IPv6:
2001:16c0:16c0::/48
Signature Algorithm: sha256WithRSAEncryption
62:b2:55:1c:18:28:cf:29:64:ee:8f:83:90:4e:ec:43:2f:80:
37:ed:a7:78:8f:6a:01:30:45:15:e3:79:06:31:87:67:85:5a:
a7:9d:1e:e8:90:7d:a1:19:56:f5:3b:b6:7c:90:1e:61:2c:9a:
0e:ce:da:0a:ab:84:68:54:4b:d7:57:64:c3:1e:b7:59:3f:f6:
b8:5a:1b:db:22:2a:48:be:5e:a2:93:d6:50:0d:f2:1b:18:ed:
e3:d8:15:ea:6b:49:ec:50:ce:b9:a0:0b:24:bd:61:b4:7e:0a:
b1:79:b3:60:f9:2d:3a:9f:83:fa:b0:ea:c3:71:97:f7:7d:30:
ea:b4:a2:e9:de:9b:6b:20:40:f4:36:e4:57:31:59:26:36:85:
9a:68:45:18:e6:4c:3d:25:9a:24:15:df:6e:be:12:c2:3b:17:
a3:e6:f3:b6:8a:d6:7f:48:dc:39:8b:a0:44:53:94:ac:bc:42:
af:b2:4a:f2:c0:c4:fd:fe:c5:68:82:e8:01:72:86:7f:97:2a:
ee:de:c1:17:06:c2:c0:9c:65:3f:83:59:47:7a:74:6f:62:e5:
98:54:9a:45:13:b6:3a:2e:be:f4:ef:0e:ec:dc:40:c0:fc:b0:
6d:1e:30:91:2a:0c:84:2d:15:51:a3:d9:f2:6f:ca:56:dc:a2:
b3:79:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:43:06 2025 by rpki-client