Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/cb17f8-36b2-4646-b08e-bb5636bdd53e/1/eOpQbyJgdCdezWOyHYdrSUcg4eQ.roa
File: eOpQbyJgdCdezWOyHYdrSUcg4eQ.roa (raw, json)
Hash identifier: 618maAMGTYtNyHVTZlTT1TLQDK3lo3qzm0HwIxtsuXs=
Subject key identifier: 78:EA:50:6F:22:60:74:27:5E:CD:63:B2:1D:87:6B:49:47:20:E1:E4
Certificate issuer: /CN=912d60e8d7aa41258823cd81abc11bda642ef40b
Certificate serial: 01856C0A4338DBFA81D917EB7DB5A08F21CC
Authority key identifier: 91:2D:60:E8:D7:AA:41:25:88:23:CD:81:AB:C1:1B:DA:64:2E:F4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS1g6NeqQSWII82Bq8Eb2mQu9As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/cb17f8-36b2-4646-b08e-bb5636bdd53e/1/eOpQbyJgdCdezWOyHYdrSUcg4eQ.roa
Signing time: Sun 01 Jan 2023 06:34:49 +0000
ROA not before: Sun 01 Jan 2023 06:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197518
IP address blocks: 176.126.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:43:38:db:fa:81:d9:17:eb:7d:b5:a0:8f:21:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912d60e8d7aa41258823cd81abc11bda642ef40b
Validity
Not Before: Jan 1 06:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78ea506f226074275ecd63b21d876b494720e1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:bd:3d:cf:d5:78:dc:35:b9:7a:ed:70:3f:
79:fd:25:bd:f9:71:d2:00:c4:88:1a:e4:29:15:e3:
b7:c4:38:94:97:75:c5:91:ff:82:2e:b5:5b:23:11:
b9:32:80:b7:be:1e:c3:7c:41:d2:9b:de:74:26:c4:
c5:03:1c:69:df:23:bc:3d:5f:d7:ec:ed:ab:0b:65:
c6:89:14:e5:23:7b:41:50:49:40:61:c0:78:ad:fd:
70:b9:1b:f2:de:ed:d5:c9:a0:5a:9d:14:65:77:b7:
c9:e3:3b:1f:67:5e:fa:5c:0b:8a:56:58:9b:ff:19:
6b:d8:7b:17:55:45:fe:bf:8e:58:34:7e:e5:a3:09:
76:7e:1b:26:9b:b3:3a:75:98:d4:64:c5:f9:b8:09:
38:d8:04:10:d4:86:e1:ff:b7:d4:95:21:1b:0a:d6:
01:89:f8:28:22:11:dc:db:e7:24:0a:36:49:a5:b8:
81:22:05:a1:0f:98:d5:9e:79:76:e6:79:8c:d3:62:
7c:33:dd:33:95:c2:1e:9b:95:d7:fa:de:06:2d:f8:
01:af:1a:73:a7:b4:0a:9d:a5:3a:75:37:3d:3d:62:
52:64:89:d1:9c:e7:6c:b1:57:4f:c2:8a:a9:10:f7:
18:d2:48:10:09:03:fe:17:4e:84:97:42:52:a3:67:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EA:50:6F:22:60:74:27:5E:CD:63:B2:1D:87:6B:49:47:20:E1:E4
X509v3 Authority Key Identifier:
keyid:91:2D:60:E8:D7:AA:41:25:88:23:CD:81:AB:C1:1B:DA:64:2E:F4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS1g6NeqQSWII82Bq8Eb2mQu9As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cb17f8-36b2-4646-b08e-bb5636bdd53e/1/eOpQbyJgdCdezWOyHYdrSUcg4eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cb17f8-36b2-4646-b08e-bb5636bdd53e/1/kS1g6NeqQSWII82Bq8Eb2mQu9As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.110.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7d:53:8b:08:8d:8d:c2:72:b9:f8:45:49:c5:5e:07:a8:b5:
2a:b5:bc:e7:f4:54:b8:64:68:fa:e7:7f:9c:19:43:b9:eb:28:
9e:5c:e5:9c:2c:42:ef:27:a7:83:66:6a:10:b0:64:37:1f:75:
bb:2a:7d:7a:23:5c:ac:5f:07:78:de:56:b6:32:48:92:fc:f5:
63:5d:f5:20:53:b5:cd:fd:6c:27:5f:88:9d:53:15:65:c0:d4:
cc:09:17:c1:fe:cb:73:3d:c4:e4:5f:ce:f1:93:05:8f:23:18:
78:d4:c6:b3:53:ec:d6:f6:c4:91:ba:3f:39:17:75:84:f9:15:
4d:8e:16:89:e0:69:21:b7:d2:2d:9a:a3:16:d5:be:14:73:18:
bb:aa:54:66:5c:d3:ee:6d:8b:6e:47:f0:ed:22:ff:76:cd:fe:
65:6e:5b:c7:19:01:c4:0b:a4:ce:d0:79:8a:3c:09:a7:2a:9f:
4a:56:4e:ba:79:47:76:e8:82:35:da:09:3b:f8:33:6b:61:3a:
5f:f3:62:1d:74:43:7f:3e:03:bf:a3:84:70:b2:d2:21:f9:46:
83:09:57:11:81:97:04:00:7e:5e:52:41:06:fe:49:3d:1a:ec:
f2:e9:3a:09:ff:f6:57:80:ff:98:25:e9:a8:d8:c0:5f:88:e2:
76:5f:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:32 2025 by rpki-client