Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/aJIXBbPLnepyS_zQ0K4f2fYzrd8.roa
File: aJIXBbPLnepyS_zQ0K4f2fYzrd8.roa (raw, json)
Hash identifier: uajXF8wPDrA7tyDz+rch74VXbHZ7gEBlBm3eFHJf2SY=
Subject key identifier: 68:92:17:05:B3:CB:9D:EA:72:4B:FC:D0:D0:AE:1F:D9:F6:33:AD:DF
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAA584BB8B75819E64B2FADC414E7E
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/aJIXBbPLnepyS_zQ0K4f2fYzrd8.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201797
IP address blocks: 178.170.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a5:84:bb:8b:75:81:9e:64:b2:fa:dc:41:4e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68921705b3cb9dea724bfcd0d0ae1fd9f633addf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:06:28:0f:19:f7:b2:e0:06:7a:01:93:e3:
52:1f:6c:f8:41:87:d3:49:2c:95:03:4f:f5:d6:30:
5b:52:ca:7a:71:88:86:e4:58:2d:ca:45:bf:bd:6e:
0c:01:1f:3b:0c:4d:c0:e9:f8:4b:86:50:c8:28:f4:
51:0d:ef:e7:bb:06:33:9a:7c:ea:83:0a:e3:9a:d1:
06:5b:ad:f5:d5:17:0a:b9:f6:23:99:fe:0b:72:af:
c6:b8:8e:a1:2f:e6:3a:21:95:ff:95:b6:5b:17:3a:
7a:54:aa:ad:71:a9:14:05:fb:46:a4:d9:51:0b:dd:
ef:f5:c8:11:fd:f9:51:c2:ee:cb:36:ff:19:a3:36:
35:7e:22:53:ad:52:90:31:8d:c0:f2:16:7a:72:e5:
56:91:b5:7c:9e:42:ec:34:fd:53:ca:55:c0:6a:b0:
b0:98:75:9b:f6:08:bf:c0:cf:ee:d6:16:72:11:cd:
74:a2:43:fb:37:be:40:e0:40:ff:3c:99:ee:1c:a9:
fb:75:ad:cf:f4:13:b2:04:74:b6:e5:47:b1:bd:25:
bb:9b:2c:b0:92:e9:03:2e:29:a4:71:38:00:e2:6a:
e6:87:b4:ba:54:b3:73:7f:0e:06:7e:33:2e:70:bc:
ef:03:00:d9:52:00:12:53:51:ad:f9:28:68:d2:e3:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:92:17:05:B3:CB:9D:EA:72:4B:FC:D0:D0:AE:1F:D9:F6:33:AD:DF
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/aJIXBbPLnepyS_zQ0K4f2fYzrd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:83:1a:52:11:48:ff:2a:41:8f:cb:57:6f:cb:de:b3:9b:c7:
9e:dc:43:e3:0d:aa:46:70:95:ba:7a:5b:5f:9a:60:01:e1:9f:
c4:a4:4b:b2:e7:21:c1:50:f8:f2:df:5c:f9:d6:eb:5d:14:ba:
c2:38:27:26:08:d0:2d:3d:81:d5:62:d1:4d:11:54:96:7d:c2:
8a:fd:43:43:8f:ec:aa:66:ff:39:5d:e2:73:7a:91:a2:50:93:
74:b9:3a:a1:d5:95:0d:38:d1:7b:dc:d6:c7:b9:27:c0:f9:7c:
c4:19:27:76:20:db:68:36:ee:2a:55:7c:24:cd:04:f1:d8:1c:
3b:13:14:bb:4f:21:bd:72:b0:25:0e:20:37:00:06:20:78:9d:
1d:60:0e:33:27:a6:e9:ec:48:ec:fc:e9:5e:0e:84:59:60:d3:
e4:7a:e1:ab:09:73:f6:63:e6:66:98:8f:d2:a9:31:e0:74:b6:
c5:4a:fd:84:e6:1a:fa:26:9d:46:93:6f:d7:8c:84:29:7a:46:
b9:60:b8:bc:bf:59:83:8d:7c:fd:de:7d:c7:b4:bc:84:d9:3f:
0b:d4:da:c7:57:83:30:f7:c5:70:d8:53:3c:80:fb:64:3a:df:
0d:07:22:79:68:3b:55:60:fc:cb:91:27:be:ce:b9:ea:0f:27:
12:53:ff:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:00:20 2025 by rpki-client