Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/NH3eFCO2z6iD8tqKH5j3jRrAVkU.roa
File: NH3eFCO2z6iD8tqKH5j3jRrAVkU.roa (raw, json)
Hash identifier: ZXJCvBm8BnALLLtPx8hXRUmbjYU517MofZBHTTPZwAM=
Subject key identifier: 34:7D:DE:14:23:B6:CF:A8:83:F2:DA:8A:1F:98:F7:8D:1A:C0:56:45
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 01941F8C1FD607BA46F2143D9DE2BD85105E
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/NH3eFCO2z6iD8tqKH5j3jRrAVkU.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48728
IP address blocks: 213.178.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1f:d6:07:ba:46:f2:14:3d:9d:e2:bd:85:10:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=347dde1423b6cfa883f2da8a1f98f78d1ac05645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:c6:56:57:27:36:5c:36:8e:eb:e8:0d:7b:
0b:c7:53:55:09:63:6a:47:14:bc:93:ff:ca:8c:93:
f2:06:00:c8:22:a7:ef:1d:4a:da:ae:a7:fc:65:1e:
a2:83:af:fe:cf:6a:4b:40:80:3e:4a:65:fc:9b:aa:
95:3a:c2:e9:d2:78:d1:60:22:29:6e:68:36:32:6b:
2d:a7:f2:ee:c3:f6:18:73:25:65:45:9b:47:0f:3d:
c5:62:fe:09:4d:ac:c1:da:21:16:28:8c:64:4c:76:
15:34:02:9b:0f:5f:ff:4e:f0:97:b2:c3:7a:7b:af:
22:fb:14:f5:0e:e1:66:b9:a4:08:39:33:64:2b:9d:
21:39:0f:2c:de:de:01:90:42:f4:23:7a:91:f3:99:
47:45:2c:af:3f:69:0d:16:86:bf:c4:ee:be:9f:96:
24:c8:c6:01:91:b2:74:78:88:b2:82:e6:aa:7f:7d:
4f:64:ec:79:c4:9b:b9:b8:1d:37:5c:3b:6c:a9:8d:
86:08:3f:18:55:3f:b0:74:34:6a:4e:49:93:48:68:
76:69:33:f2:b8:1b:b5:d5:b5:8d:f2:1f:d2:2d:f0:
fa:92:64:08:9c:41:f6:dc:a0:26:fc:e4:dd:e5:81:
3f:3d:57:be:c6:bd:e1:21:f5:8f:c9:cc:f4:bb:06:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7D:DE:14:23:B6:CF:A8:83:F2:DA:8A:1F:98:F7:8D:1A:C0:56:45
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/NH3eFCO2z6iD8tqKH5j3jRrAVkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.136.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:79:02:e2:eb:b4:ab:11:16:e7:e5:80:a1:b5:95:2b:c2:4a:
57:b9:9a:49:93:10:88:fa:3e:d3:21:b7:db:96:4b:01:ab:6d:
83:e7:3d:95:01:9b:12:17:71:d5:ae:d8:ac:39:6a:b7:d6:63:
f1:6d:24:ec:82:50:79:64:80:2c:16:0e:3b:8d:fa:cb:59:89:
90:d6:88:10:c5:99:3a:d7:d7:73:de:e7:59:20:13:d5:2d:7c:
c2:0c:4a:6e:12:dc:ac:19:d0:a8:ef:4c:b4:73:b7:a3:fb:83:
5f:d6:e7:b6:6a:c2:cc:8f:b5:4f:bf:ec:07:c0:75:2b:4d:ed:
f9:57:26:75:3e:13:4d:b1:a0:3f:2b:4c:bc:6b:dd:47:0a:af:
71:c0:55:e5:4d:70:46:78:38:05:cd:fe:10:5a:2f:80:63:4f:
99:aa:f2:93:c2:8a:a2:8b:ff:26:f9:3d:4d:f7:b5:84:4f:10:
49:fb:4b:54:8a:83:b1:ce:3a:02:f7:9c:27:13:5a:0a:9b:5a:
52:83:d9:3b:f4:bf:b7:17:5a:ab:8e:80:5b:e8:e4:30:0a:ca:
76:43:9a:48:8e:05:ca:20:ab:ce:74:f9:b9:31:5e:24:79:b2:
c1:5d:29:d1:bb:91:15:37:0f:b5:8d:a4:64:51:bb:16:66:0a:
9f:00:d2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:44:03 2025 by rpki-client