Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/cVpmuHdAZzlijHGAjGSKkGw9RjA.roa
File: cVpmuHdAZzlijHGAjGSKkGw9RjA.roa (raw, json)
Hash identifier: qNHNU4vOIkFIe1aGqstJlXjPN0jdP5RduNW12cDiCyg=
Subject key identifier: 71:5A:66:B8:77:40:67:39:62:8C:71:80:8C:64:8A:90:6C:3D:46:30
Certificate issuer: /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial: 01941F8C1BFC4904C60980C5C6169363A89D
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/cVpmuHdAZzlijHGAjGSKkGw9RjA.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56754
IP address blocks: 178.217.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1b:fc:49:04:c6:09:80:c5:c6:16:93:63:a8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=715a66b877406739628c71808c648a906c3d4630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:9d:13:e1:9b:aa:f9:a7:68:32:e4:61:da:
7d:69:0b:68:d9:eb:48:67:e8:0a:e7:e1:c8:8a:45:
63:29:92:ce:07:a4:04:e9:c2:58:55:eb:c6:a9:59:
2e:99:d1:62:c8:63:37:ca:9a:4f:29:fe:fe:95:96:
ba:30:86:c3:7b:75:e6:f8:bf:26:0e:db:3f:75:1e:
0a:75:da:3c:f8:ad:a0:4d:f7:a1:18:ae:7b:64:ea:
9c:05:80:a7:1d:5c:74:d6:08:e0:af:2f:3a:7d:29:
94:4d:fd:d6:a4:93:9d:c2:2b:af:15:04:0b:f2:58:
2a:89:7d:71:33:16:6e:a7:cb:37:e8:f6:7e:ac:77:
33:b6:7e:c1:f3:1e:3d:d6:98:2b:76:c4:28:c4:35:
dc:20:6a:e8:d5:3b:69:00:14:da:38:e4:3b:a8:46:
a8:a1:f0:f2:dd:fd:85:d2:e3:77:a1:e3:ee:c0:fe:
7c:2a:6c:6e:9c:be:a2:15:dd:2a:6c:97:0a:d3:3b:
db:54:44:00:56:94:83:b7:0d:cc:20:9a:c7:36:01:
63:49:db:c7:9c:a2:67:a2:8d:24:60:eb:67:89:9c:
1c:39:a6:0d:25:f8:78:1f:70:c2:0b:88:91:32:44:
80:fe:3b:24:1c:de:e1:a2:77:3f:70:ca:2e:ab:46:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5A:66:B8:77:40:67:39:62:8C:71:80:8C:64:8A:90:6C:3D:46:30
X509v3 Authority Key Identifier:
keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/cVpmuHdAZzlijHGAjGSKkGw9RjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.235.0/24
Signature Algorithm: sha256WithRSAEncryption
93:53:8e:b7:0d:44:e4:69:a1:ae:4e:2f:27:bc:6c:53:67:82:
d7:e9:19:90:72:55:9f:27:f1:a2:66:72:38:3f:ab:63:3b:ea:
02:1c:d0:59:69:75:c9:5c:d2:74:a8:67:a6:77:0a:ef:24:f3:
c4:14:2a:af:ac:fe:bb:07:34:28:76:5a:5b:94:6f:43:dc:f1:
bd:93:b3:5e:29:91:3a:4e:f8:79:14:be:9c:5d:f7:d3:51:4e:
d5:36:56:c6:e1:20:50:56:5f:e3:ae:07:28:6f:bc:ea:8e:01:
02:3d:ac:f2:87:f9:62:1c:f0:18:9d:e8:2b:39:9f:92:36:e2:
6c:84:81:58:98:7a:2c:47:0a:06:c4:98:af:31:e3:99:57:0f:
64:6b:4d:80:f4:6f:de:c7:b8:14:75:e0:d5:2f:8d:f6:a6:26:
95:61:b1:b4:89:46:17:62:b1:87:fa:69:ec:cf:9d:1d:76:eb:
f6:aa:f3:cc:64:4e:0e:bc:71:6b:52:ea:a5:d4:29:a8:5d:3b:
37:b3:1e:fb:1b:d7:46:ab:e7:dc:de:1a:44:b1:9b:7a:62:7b:
f7:ef:fc:8d:54:19:6f:80:a8:b9:dd:8e:b7:3b:df:6f:35:b3:
64:1f:c9:81:2a:5d:46:e1:6d:f2:e0:19:ad:72:3a:b4:28:34:
b8:52:72:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:51:30 2025 by rpki-client