Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/rtvmUiEFAGraA8LMtebghXJ9LG4.roa
File: rtvmUiEFAGraA8LMtebghXJ9LG4.roa (raw, json)
Hash identifier: 5ydgssUOzvp+y74MMFHRUelT79L7+HT8BCWAeT0jOc4=
Subject key identifier: AE:DB:E6:52:21:05:00:6A:DA:03:C2:CC:B5:E6:E0:85:72:7D:2C:6E
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC74C38CB74DC52F8D2DD431888483
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/rtvmUiEFAGraA8LMtebghXJ9LG4.roa
Signing time: Thu 02 Jan 2025 07:48:09 +0000
ROA not before: Thu 02 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49304
IP address blocks: 178.173.232.0/23 maxlen: 23
178.173.232.0/24 maxlen: 24
178.173.233.0/24 maxlen: 24
178.173.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:74:c3:8c:b7:4d:c5:2f:8d:2d:d4:31:88:84:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aedbe6522105006ada03c2ccb5e6e085727d2c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:3a:63:10:a3:9a:9a:30:41:8d:12:b2:35:
f3:0d:6d:d4:02:89:fc:93:c9:ad:48:3f:74:cb:35:
5d:d0:db:b2:b9:ac:8a:72:bd:2c:ea:85:9f:59:4d:
bc:e6:7d:f1:1c:fe:f3:9b:18:51:fa:8b:02:c0:e5:
f7:cb:59:ef:0f:69:6a:84:d0:fa:62:eb:a9:dc:6c:
a8:08:16:a0:d7:a2:58:c8:23:3d:ba:2e:eb:04:b7:
ac:05:11:ed:bf:38:a0:a9:e0:71:f8:42:b2:ed:3b:
71:08:d3:b3:9b:a7:7b:d8:3d:85:8c:36:e8:97:b7:
a6:a7:c2:59:69:2e:f3:f6:fa:cc:e6:00:3f:2e:00:
6e:4a:05:c4:37:92:01:17:bf:fd:85:0b:f5:2c:e5:
99:37:51:56:e8:a9:0d:ad:b4:4b:df:ed:c9:c8:82:
5e:91:95:87:f1:48:91:8e:29:12:40:75:e8:6c:04:
64:5e:a2:26:bf:ba:bd:b7:7e:67:30:6d:62:ab:ce:
c1:12:ee:94:9f:29:72:57:26:a4:b7:21:9f:dd:be:
23:4d:82:77:3b:d9:a8:42:a4:17:af:d1:36:ef:be:
b1:54:ee:9d:ef:8c:93:c9:43:ca:4f:63:4e:5f:8d:
62:2d:d8:f6:37:9f:09:9d:a7:e8:55:55:9b:55:58:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DB:E6:52:21:05:00:6A:DA:03:C2:CC:B5:E6:E0:85:72:7D:2C:6E
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/rtvmUiEFAGraA8LMtebghXJ9LG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.232.0/23
178.173.235.0/24
Signature Algorithm: sha256WithRSAEncryption
db:f2:4b:19:13:8a:7a:91:46:9e:fd:8f:f5:9c:7a:aa:dc:ff:
e6:69:10:85:49:d5:dd:00:43:aa:42:c0:f4:0f:fd:d2:df:5d:
9c:ca:4f:a2:eb:67:65:4b:19:4c:85:1e:09:d2:b1:a4:5b:41:
9a:34:e1:4c:60:ca:4a:6a:a5:16:4b:f3:a6:05:cf:10:cf:bb:
c2:b0:ad:63:84:52:b6:7a:9c:8c:78:aa:f0:85:73:5a:6a:ad:
a1:84:de:aa:94:65:4b:32:e2:bf:66:62:d1:7a:48:b4:50:64:
5e:d9:f2:6f:5a:00:11:2a:ba:3d:a0:0b:29:80:e8:42:54:bc:
33:76:32:48:3f:62:fa:48:f8:33:41:76:45:d7:61:c7:1f:44:
7e:cb:22:d0:c9:cf:96:23:1b:21:b9:36:fb:ec:e3:de:72:a7:
d5:59:fe:3c:ac:c8:51:c8:5c:17:d1:fc:b2:93:a3:8e:10:98:
e5:71:bb:2a:0d:1e:46:61:e4:c7:ae:8d:7f:5b:1d:82:ff:6d:
7e:7a:8b:c7:bf:c8:4a:b2:b0:10:79:24:29:11:eb:da:8d:8f:
80:7f:7b:2b:67:11:09:80:c0:7d:27:db:64:2c:e1:d9:29:d3:
f9:8e:4c:e1:7d:95:bb:2c:39:dd:98:bf:d4:30:1c:66:33:39:
a1:de:8c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:40:18 2025 by rpki-client