Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/A_zFagQocbb8Duq83zVDkqWR7ks.roa
File: A_zFagQocbb8Duq83zVDkqWR7ks.roa (raw, json)
Hash identifier: 7hjsAYmp/G45PaAL7Ghgi/Pp9R6ciH8AsFir8qgUvUM=
Subject key identifier: 03:FC:C5:6A:04:28:71:B6:FC:0E:EA:BC:DF:35:43:92:A5:91:EE:4B
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424448AD81C5759D4DEF79D6CF7C1E35F
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/A_zFagQocbb8Duq83zVDkqWR7ks.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 178.22.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8a:d8:1c:57:59:d4:de:f7:9d:6c:f7:c1:e3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03fcc56a042871b6fc0eeabcdf354392a591ee4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:a3:bb:cd:bd:aa:d4:c1:6e:2f:09:d1:60:
45:7a:24:1b:56:af:02:76:ff:43:63:1d:bc:73:cb:
17:4f:6c:a1:e6:df:61:52:be:00:ef:02:7d:75:4d:
3c:5a:40:72:fa:55:46:73:24:93:2a:6b:6b:fc:63:
27:99:1a:14:8a:fc:e3:ba:3e:8b:cf:f2:f3:3e:7a:
47:14:4e:dc:33:73:b5:53:43:a0:d9:aa:7b:8c:cf:
d5:16:ac:b6:6b:98:a3:19:67:a5:d5:3e:98:96:6f:
d1:c8:0e:44:8b:8c:80:04:93:57:35:9d:e5:0d:23:
8f:5d:04:a4:0a:3d:3f:87:b7:2c:60:33:06:74:2c:
59:6e:80:95:9c:8a:4c:93:ab:bb:49:01:a8:ef:85:
d7:ae:72:f8:7f:75:ba:b9:9d:a7:b0:9e:09:c2:85:
56:b0:1e:23:f5:bb:ee:99:5e:eb:3a:8a:33:39:bd:
3c:61:b3:61:d8:a3:83:db:cb:ca:6c:5f:8a:18:f3:
50:7f:15:f2:02:ca:9e:72:4c:91:cf:c1:c2:96:f0:
77:48:29:90:2e:62:46:d1:b3:8c:d9:4e:3a:3e:da:
51:f9:d3:ed:58:e0:06:bd:2d:02:68:15:48:87:40:
c5:21:f8:4e:8d:3f:9c:cb:9b:1f:61:31:11:fa:0a:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FC:C5:6A:04:28:71:B6:FC:0E:EA:BC:DF:35:43:92:A5:91:EE:4B
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/A_zFagQocbb8Duq83zVDkqWR7ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.26.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c6:ab:f0:f2:44:5a:40:de:09:75:ba:e4:98:99:c6:ea:84:
6b:4d:2a:7b:38:82:cb:68:68:42:7e:61:fd:ed:a2:a1:40:ad:
a3:99:27:7e:ba:4d:5d:4e:d4:6c:65:db:d7:96:a9:5d:fe:01:
6e:55:f6:3f:5f:97:61:02:3e:3f:9c:3f:fe:7f:94:e6:3d:8d:
4f:45:ad:a4:12:c4:8c:17:05:2e:d6:02:15:40:97:6c:20:84:
f1:3b:74:f5:27:8e:f8:f2:eb:7e:c9:0e:af:8f:bd:47:9a:3a:
66:8a:ca:08:11:bc:8a:da:94:8a:7d:6e:9d:62:ff:7a:42:b9:
97:a4:e7:55:28:7d:88:3d:67:6e:0e:eb:4f:0d:33:4a:f5:0e:
b0:75:50:aa:40:8e:60:62:ff:b5:ce:88:bf:fe:63:e8:22:e0:
10:a2:aa:43:a1:26:72:a2:fd:20:96:9f:50:d3:bd:ab:f0:83:
d0:f1:ce:7e:d3:58:ff:46:be:35:29:78:9c:32:69:79:2a:2d:
77:f5:61:34:1e:3c:1e:a3:88:3a:2d:20:d0:0d:84:a2:7f:c6:
1f:5f:a7:4a:e4:f7:8b:5b:27:cd:be:bc:28:db:0e:1c:70:67:
fb:61:53:eb:f1:f5:e6:0a:3a:7c:3c:87:b0:e7:27:25:86:4c:
32:e8:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:03:08 2025 by rpki-client