Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/TunP0FWmuXrf5YzoJj5ZZR9Zd2Q.roa
File: TunP0FWmuXrf5YzoJj5ZZR9Zd2Q.roa (raw, json)
Hash identifier: 7wLHBrznfSkPVYQc5aPKo1rNMxi/Eci6q/qG+jPd+nE=
Subject key identifier: 4E:E9:CF:D0:55:A6:B9:7A:DF:E5:8C:E8:26:3E:59:65:1F:59:77:64
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 0194282730DF5EF29A91E106C930C81277B5
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/TunP0FWmuXrf5YzoJj5ZZR9Zd2Q.roa
Signing time: Thu 02 Jan 2025 17:54:04 +0000
ROA not before: Thu 02 Jan 2025 17:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 178.18.20.0/22 maxlen: 22
178.18.21.0/24 maxlen: 24
178.18.22.0/24 maxlen: 24
178.18.23.0/24 maxlen: 24
178.18.24.0/23 maxlen: 23
178.18.24.0/24 maxlen: 24
178.18.27.0/24 maxlen: 24
178.18.30.0/24 maxlen: 24
178.18.31.0/24 maxlen: 24
185.211.154.0/24 maxlen: 24
185.211.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:30:df:5e:f2:9a:91:e1:06:c9:30:c8:12:77:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Jan 2 17:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ee9cfd055a6b97adfe58ce8263e59651f597764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:6d:8c:1c:40:da:be:48:8f:f3:ec:8d:c6:
55:16:6c:8e:ba:21:89:fe:82:43:bb:87:14:b2:e1:
4b:13:88:11:17:d7:a6:48:6c:72:1e:d1:9a:0c:1e:
b1:20:59:e4:53:22:a3:3a:be:54:91:a0:db:1b:9b:
89:14:95:e1:e9:21:e7:c0:13:64:12:d5:5c:e0:13:
0f:f2:ca:54:05:b3:4d:99:b9:aa:41:cf:a1:f1:50:
ac:de:60:38:82:dd:1a:0d:46:f8:ea:7e:cb:1b:18:
27:87:2d:23:94:aa:63:62:5a:40:97:51:ba:5b:94:
85:f5:34:9d:d2:14:18:ba:32:15:c8:de:58:2c:11:
83:95:3b:d1:9b:0f:73:d2:37:c5:d3:e3:66:b4:dd:
b5:35:a4:54:8c:9c:5f:48:d9:ec:f4:c1:9a:27:64:
40:7a:a7:ea:39:54:63:fa:ab:7d:39:b0:6a:42:25:
f4:00:37:2d:63:43:85:40:ba:f9:6e:87:92:a1:45:
25:37:5d:f2:0b:2b:8f:74:a0:f3:d2:ac:80:5a:49:
70:4b:a8:88:c9:96:53:aa:d4:72:d6:54:89:6a:ec:
30:1e:25:ae:0d:c6:43:3b:54:d1:cf:f8:06:e5:ee:
81:f5:8b:e5:c4:1d:57:63:6f:01:41:cf:83:a8:cb:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E9:CF:D0:55:A6:B9:7A:DF:E5:8C:E8:26:3E:59:65:1F:59:77:64
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/TunP0FWmuXrf5YzoJj5ZZR9Zd2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.20.0-178.18.25.255
178.18.27.0/24
178.18.30.0/23
185.211.154.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:5c:07:90:f4:a8:d8:e6:df:4c:0d:5d:74:37:d8:4d:3c:c8:
b9:8f:43:ce:e6:c8:15:d5:ba:59:a8:03:ea:3b:6b:ba:d1:3d:
58:9c:5b:de:5c:98:bb:c5:c5:03:ef:54:95:f1:89:5e:be:84:
0d:5b:ca:aa:8f:0c:8e:b0:15:24:bb:32:b8:a2:cf:e5:68:23:
9a:5f:8d:d3:5f:f8:e9:6c:56:16:92:b2:a4:3a:87:ed:3c:b0:
f5:45:59:a9:4f:37:8f:44:f7:51:bf:c8:87:51:1e:f6:7a:e3:
ee:22:f3:cd:26:ce:9a:5c:fe:ec:b7:f9:d4:c2:cd:8f:2a:70:
80:17:07:21:2d:53:6e:15:fd:69:b7:d9:a4:e6:36:d4:1f:0a:
1a:4b:10:cf:77:f1:df:9a:19:23:66:e3:52:1a:b1:45:c1:c8:
86:03:5c:28:04:09:b2:b3:7c:c5:50:65:57:ea:4e:c1:9d:d8:
99:fc:c0:cf:ce:33:b6:2d:6b:e8:6b:5d:40:70:c7:e8:17:d1:
90:73:49:12:75:32:04:0b:76:a4:93:46:67:84:94:62:f7:6d:
b1:18:24:75:89:4c:87:fe:a9:af:e3:56:99:86:cd:ca:c4:f7:
20:ee:00:0d:0a:4b:e5:bd:c7:f3:28:1e:31:b1:f0:11:ab:72:
ac:2c:99:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:54:59 2025 by rpki-client