Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/q75mVExwlcu32JNTYIQla5p7m1o.roa
File: q75mVExwlcu32JNTYIQla5p7m1o.roa (raw, json)
Hash identifier: x+d/+bvOF1j8LDo0fwzIQNZsHB7Abtd57CLyM/qqXNM=
Subject key identifier: AB:BE:66:54:4C:70:95:CB:B7:D8:93:53:60:84:25:6B:9A:7B:9B:5A
Certificate issuer: /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Certificate serial: 019425211CFBE7953B12321C2C038756B02E
Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/q75mVExwlcu32JNTYIQla5p7m1o.roa
Signing time: Thu 02 Jan 2025 03:48:34 +0000
ROA not before: Thu 02 Jan 2025 03:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24940
IP address blocks: 178.212.75.0/24 maxlen: 24
2a11:e980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:1c:fb:e7:95:3b:12:32:1c:2c:03:87:56:b0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Validity
Not Before: Jan 2 03:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abbe66544c7095cbb7d893536084256b9a7b9b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:e5:41:ee:f1:9f:46:ad:18:2f:12:b6:68:
52:c8:2e:41:60:d7:ed:1f:7e:09:74:63:fa:eb:b7:
1d:a9:d1:6b:35:dc:09:26:e1:33:63:2f:1a:17:48:
85:f9:8d:72:56:e4:be:be:82:cf:d0:2c:c7:6c:20:
16:57:ff:3c:eb:3a:ca:9c:55:f7:7d:62:66:d8:70:
05:91:47:30:0e:65:39:ba:2e:67:04:c8:03:6e:f3:
d1:cc:c7:6a:9b:d1:85:97:ce:02:e7:7f:4b:ce:10:
e7:05:d9:81:54:9c:0d:7f:64:1e:dd:71:eb:17:03:
56:7e:b8:a6:0f:26:8e:d4:f7:a5:39:6e:0a:7f:ec:
a6:f2:41:21:a9:04:82:be:32:ef:63:df:93:09:fa:
9a:e4:36:c0:2f:d5:5e:6b:21:34:58:b1:cb:dd:d1:
4c:d7:8c:a0:bc:f3:b3:b7:68:40:33:9b:07:91:68:
57:a9:11:94:5e:98:08:f9:55:44:5c:0b:7b:4a:b2:
e1:db:f0:23:9e:1f:09:5e:26:95:c9:f3:f6:9e:91:
40:7d:be:3f:dd:72:9a:fa:ca:c1:34:5b:98:c2:59:
0b:18:58:71:a2:ff:e5:60:42:d0:a4:8d:02:4c:fd:
38:89:bf:f7:fe:f4:80:72:30:0b:d4:20:f6:11:a8:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BE:66:54:4C:70:95:CB:B7:D8:93:53:60:84:25:6B:9A:7B:9B:5A
X509v3 Authority Key Identifier:
keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/q75mVExwlcu32JNTYIQla5p7m1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.75.0/24
IPv6:
2a11:e980::/29
Signature Algorithm: sha256WithRSAEncryption
8c:64:bc:92:0b:f0:78:4c:c3:20:8c:7a:4c:b8:83:b6:54:51:
c6:0f:3c:a6:fb:1f:14:94:ea:44:35:73:6c:36:ff:74:9d:4e:
8f:87:f2:4b:97:2c:09:34:c8:37:b1:4c:13:26:19:4b:ca:78:
43:8b:4a:49:83:07:84:36:4d:24:5c:85:d0:5a:fa:cb:40:c2:
68:bf:50:b5:82:31:74:93:83:dd:05:cb:33:16:96:a9:f6:d1:
46:d5:d9:c3:45:e9:af:8a:23:e6:7b:6f:b5:6b:12:c6:64:35:
77:61:b5:bf:ae:64:3b:fa:3e:ec:43:55:09:c1:38:e2:4b:68:
51:5a:ff:d9:01:2b:a9:0a:99:f1:a7:73:84:73:e7:2a:01:13:
9d:fc:a0:cc:50:b7:fb:47:ae:02:36:bd:5a:29:41:94:2f:8e:
3a:b9:93:b9:66:10:45:87:3e:66:95:e5:dd:7c:de:23:49:0c:
31:7a:16:82:94:90:11:21:b2:d1:8e:6f:2f:39:4d:69:ae:c5:
16:4c:42:51:8b:21:a8:1b:60:c1:af:1c:d5:48:7a:d8:00:c0:
a4:0e:7a:67:05:76:6c:cb:69:c6:04:b6:75:49:86:5e:25:51:
48:54:ab:98:84:d0:31:e6:93:f7:54:e7:6d:9d:95:31:ba:fc:
98:b7:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:56 2025 by rpki-client