Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/gDx_EkaHuEb4LxSm5qDhRH-UdZM.roa
File: gDx_EkaHuEb4LxSm5qDhRH-UdZM.roa (raw, json)
Hash identifier: XHmtxgaP2vmqWx5qZWaBQh+bglRBX5m7TvdpxAwnTCs=
Subject key identifier: 80:3C:7F:12:46:87:B8:46:F8:2F:14:A6:E6:A0:E1:44:7F:94:75:93
Certificate issuer: /CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Certificate serial: 019421439026C3EF857AC938FF82E9F399C1
Authority key identifier: 56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/gDx_EkaHuEb4LxSm5qDhRH-UdZM.roa
Signing time: Wed 01 Jan 2025 09:47:43 +0000
ROA not before: Wed 01 Jan 2025 09:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201935
IP address blocks: 178.219.64.0/20 maxlen: 20
178.219.64.0/21 maxlen: 21
178.219.64.0/22 maxlen: 22
178.219.64.0/23 maxlen: 23
178.219.64.0/24 maxlen: 24
178.219.65.0/24 maxlen: 24
178.219.66.0/23 maxlen: 23
178.219.66.0/24 maxlen: 24
178.219.67.0/24 maxlen: 24
178.219.68.0/22 maxlen: 22
178.219.68.0/23 maxlen: 23
178.219.68.0/24 maxlen: 24
178.219.69.0/24 maxlen: 24
178.219.70.0/23 maxlen: 23
178.219.71.0/24 maxlen: 24
178.219.72.0/21 maxlen: 21
178.219.72.0/22 maxlen: 22
178.219.72.0/23 maxlen: 23
178.219.72.0/24 maxlen: 24
178.219.73.0/24 maxlen: 24
178.219.74.0/23 maxlen: 23
178.219.74.0/24 maxlen: 24
178.219.75.0/24 maxlen: 24
178.219.76.0/22 maxlen: 22
178.219.76.0/23 maxlen: 23
178.219.76.0/24 maxlen: 24
178.219.77.0/24 maxlen: 24
178.219.78.0/23 maxlen: 23
178.219.78.0/24 maxlen: 24
178.219.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:90:26:c3:ef:85:7a:c9:38:ff:82:e9:f3:99:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Validity
Not Before: Jan 1 09:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=803c7f124687b846f82f14a6e6a0e1447f947593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:50:4a:2b:1f:6e:ab:8e:85:7e:c9:8c:c0:ee:
a8:12:dc:ec:7b:d9:f4:0b:6b:36:75:3f:21:81:ea:
a7:9c:63:8a:2a:6c:35:bf:9e:1b:97:68:34:3c:11:
17:1e:6e:c6:38:16:3c:4e:8d:ef:13:6e:f4:ca:bd:
df:93:a2:1e:5e:84:52:0d:47:8e:b0:be:ae:5c:0c:
ba:53:74:94:a0:5d:52:77:e2:65:53:bd:66:4f:70:
fe:82:10:11:c1:59:92:55:14:68:16:c7:d9:b3:cf:
52:ee:6b:54:41:b0:da:d0:67:29:a3:c9:7d:c6:01:
32:af:8f:5c:83:c9:58:cc:37:fa:40:e9:60:35:a1:
29:94:a4:e0:da:a1:91:7e:6d:18:88:f3:3c:58:dc:
78:2d:63:ac:66:94:b0:3b:c5:25:d2:37:4d:11:ad:
f7:dd:40:6a:c6:3c:9d:28:d4:ac:dd:c4:2e:3f:6f:
8b:be:46:86:51:6d:1c:ba:02:de:78:b2:8d:df:6f:
6f:d5:b3:4e:05:6d:7b:96:6b:25:8b:59:aa:38:7a:
93:87:f0:b7:e6:2d:09:c4:d2:a0:73:c5:a8:b7:c4:
59:7f:37:7d:e0:92:78:18:ef:6f:b0:d2:15:83:db:
fc:84:07:08:de:65:6d:37:34:83:d0:72:10:a6:2a:
3d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3C:7F:12:46:87:B8:46:F8:2F:14:A6:E6:A0:E1:44:7F:94:75:93
X509v3 Authority Key Identifier:
keyid:56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/gDx_EkaHuEb4LxSm5qDhRH-UdZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.219.64.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:b7:84:62:9f:8d:74:b7:61:1c:71:cf:95:57:e5:34:98:cd:
5b:c3:cb:1f:49:73:6e:3d:86:a9:7c:a4:f1:6b:7e:4d:f9:12:
99:72:08:98:81:c5:17:48:31:6a:f1:55:e1:f9:e9:4a:2e:9a:
99:cb:45:cc:77:2e:42:1b:f3:09:ae:b2:ce:6e:5d:80:98:c9:
6b:96:ee:29:cc:3c:7b:fa:13:d7:2d:fc:f4:34:b8:ff:36:92:
30:9b:9f:dd:fd:f7:2a:43:43:a9:84:49:2e:9f:77:97:98:cc:
5b:09:78:70:ad:bd:7f:95:96:19:1c:00:d2:bf:a7:20:20:a9:
46:08:7a:6d:b9:d5:81:26:00:75:73:75:de:1c:b8:50:95:29:
c5:4b:2e:ed:80:92:8e:37:66:29:6e:ef:83:f6:d5:1e:2a:c2:
5f:c5:1d:46:79:09:1f:12:83:f9:5c:90:b7:09:5e:3a:34:d6:
4c:80:8a:3b:02:45:c5:62:cf:59:77:73:50:cd:bb:a6:b0:41:
8c:93:3a:1d:4d:3f:4c:35:7c:dc:dd:1b:36:5f:76:d6:79:32:
54:b1:19:23:c2:5e:7e:51:d0:26:43:3d:77:32:49:86:25:a5:
bd:e1:51:f0:b7:7c:06:92:dc:61:a3:5f:f2:f3:35:12:50:d4:
99:8d:27:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:42:58 2025 by rpki-client