Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/41kwTSa8H9b9pjrkUzwf85FQ470.roa
File: 41kwTSa8H9b9pjrkUzwf85FQ470.roa (raw, json)
Hash identifier: 6DgsyUX2uyntOPFl8yDMIgTXXXs0mzyQ219673BzCzU=
Subject key identifier: E3:59:30:4D:26:BC:1F:D6:FD:A6:3A:E4:53:3C:1F:F3:91:50:E3:BD
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 019425211BD7A21955CDAFBF2C8B92ECBFBF
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/41kwTSa8H9b9pjrkUzwf85FQ470.roa
Signing time: Thu 02 Jan 2025 03:48:34 +0000
ROA not before: Thu 02 Jan 2025 03:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51961
IP address blocks: 178.250.184.0/23 maxlen: 24
178.250.190.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:1b:d7:a2:19:55:cd:af:bf:2c:8b:92:ec:bf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Jan 2 03:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e359304d26bc1fd6fda63ae4533c1ff39150e3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:2a:35:22:89:cc:ab:32:97:1a:21:24:a1:
4f:0f:3c:1e:ae:75:52:31:fc:27:1e:61:38:07:b8:
60:6e:b3:51:2b:28:fd:76:df:af:19:d5:a7:d8:20:
6c:fa:a1:34:f6:ca:69:65:b8:8f:b1:71:32:cf:52:
b3:9c:4d:3c:88:05:38:ea:86:43:a2:3d:36:cc:cf:
e1:fc:21:d3:12:f4:67:f4:d0:79:ff:bb:4d:d7:ae:
04:d8:5b:e6:74:be:55:fb:ed:89:ba:1d:0c:9c:7f:
11:ec:24:e2:18:32:f5:70:24:91:4a:fa:16:74:8a:
bf:f0:60:90:8d:7d:52:f3:33:f6:4e:a6:00:7e:e2:
db:98:f2:26:fa:d0:ad:8c:db:6b:ab:4e:06:54:2e:
50:ca:64:23:fb:a7:14:a2:88:06:bd:c2:e1:98:95:
56:f1:c9:90:76:08:8e:76:79:a0:22:6f:33:a5:fb:
07:e7:88:13:47:79:9d:0d:29:69:71:8b:55:bd:43:
5e:d6:9b:d6:7a:f3:8f:8c:54:bc:ba:7e:74:44:5e:
88:ce:0c:e5:e9:85:96:d8:49:a3:4a:30:9f:28:e4:
90:c8:38:f6:3e:20:c7:e7:e1:bd:28:ca:00:39:10:
54:d8:cd:ad:35:03:9b:3b:c6:75:22:c8:c3:0d:18:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:30:4D:26:BC:1F:D6:FD:A6:3A:E4:53:3C:1F:F3:91:50:E3:BD
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/41kwTSa8H9b9pjrkUzwf85FQ470.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.184.0/23
178.250.190.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:3e:69:36:34:9a:ff:2c:5e:a8:ca:9d:45:7f:72:c0:b6:d1:
d5:ae:28:91:d7:f0:d9:4d:20:fe:3b:50:89:de:43:79:f6:f3:
b7:01:4e:d3:03:45:87:98:99:cc:e0:a7:ea:31:a0:60:a7:fd:
71:a6:e0:fd:36:cf:10:b5:d1:7f:27:07:f5:75:16:32:19:07:
b6:56:ed:0f:27:ef:57:79:88:de:58:0c:8f:88:6e:cc:83:13:
12:5e:eb:a4:70:02:ed:30:2d:2b:f4:4b:71:88:77:c1:50:8f:
f7:17:99:82:80:68:5c:83:88:63:4a:63:9b:b2:3b:07:a8:ab:
00:18:42:15:69:45:f6:0e:80:2d:5e:81:8c:df:e0:3d:35:2a:
dd:7b:ac:47:5c:93:50:6c:5c:da:eb:6e:32:59:5b:65:4f:2c:
ac:b7:1b:95:b0:e7:f9:47:92:c3:b4:31:12:8f:09:91:fd:43:
3e:17:44:1d:d5:6e:43:63:f3:f8:b0:27:98:8d:b5:66:87:4e:
ba:50:17:8b:9f:fc:60:d6:4f:c9:39:22:38:e9:7b:5a:78:23:
e6:f0:ae:cf:49:bd:93:d2:84:cc:56:98:f8:3c:6a:54:ee:43:
2a:c9:9d:2a:42:d9:e1:6a:4b:a2:34:c9:f5:59:c7:38:b5:e3:
ea:81:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:55:32 2025 by rpki-client