Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/W4Sz1s6M7qbBw59z7z3fvq3P2BI.roa
File: W4Sz1s6M7qbBw59z7z3fvq3P2BI.roa (raw, json)
Hash identifier: 9d4ZZfi9W0qvKI3DkkPNtQkgyol4pF0O40/L2H+IXbI=
Subject key identifier: 5B:84:B3:D6:CE:8C:EE:A6:C1:C3:9F:73:EF:3D:DF:BE:AD:CF:D8:12
Certificate issuer: /CN=7726ebff0f2d74bfa21600ff73fe26691fc731a9
Certificate serial: 018CC4247CF01C8752D8725CF6F4D859D4B8
Authority key identifier: 77:26:EB:FF:0F:2D:74:BF:A2:16:00:FF:73:FE:26:69:1F:C7:31:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dybr_w8tdL-iFgD_c_4maR_HMak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/W4Sz1s6M7qbBw59z7z3fvq3P2BI.roa
Signing time: Mon 01 Jan 2024 08:29:34 +0000
ROA not before: Mon 01 Jan 2024 08:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20712
IP address blocks: 178.211.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7c:f0:1c:87:52:d8:72:5c:f6:f4:d8:59:d4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7726ebff0f2d74bfa21600ff73fe26691fc731a9
Validity
Not Before: Jan 1 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b84b3d6ce8ceea6c1c39f73ef3ddfbeadcfd812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:b4:10:04:36:ab:f7:ab:c3:b4:14:e6:ad:
a2:55:f3:b2:3a:f9:f5:46:16:78:c1:61:e6:6a:89:
d5:4e:5a:a3:43:4d:80:36:42:93:2b:19:06:ee:53:
82:c9:c1:63:16:d4:27:ef:34:5c:00:71:a2:a7:10:
dd:28:c3:07:8c:9b:e5:17:28:f6:fa:2a:3d:d5:51:
41:26:81:ce:a2:bb:30:51:4e:b2:1d:58:cb:fd:76:
d0:08:e1:f2:6e:4f:d3:2f:88:a4:14:4b:94:07:97:
de:b2:87:fd:29:93:f1:c8:02:64:3b:f9:37:17:97:
c2:a6:12:d1:33:92:75:11:82:c7:aa:c4:27:d4:ae:
ed:a0:91:b5:55:e3:10:5a:d5:fa:f4:0d:f8:ce:eb:
b1:49:16:db:bd:ea:84:00:4d:38:91:3f:67:83:31:
3e:3b:e3:11:95:f1:00:a8:fb:4b:90:72:98:21:60:
f3:c9:a2:13:5c:ce:c7:89:ae:08:e1:52:74:e1:c5:
3b:8e:3a:ff:0f:a8:4c:1f:41:05:55:64:ad:d0:63:
4e:cc:47:29:10:d9:e5:11:a0:f4:26:aa:d6:22:fc:
f0:ad:79:96:11:6d:06:56:5a:63:05:3e:de:ee:eb:
fe:fb:5e:28:94:34:7f:f2:4e:77:26:50:e3:b3:7e:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:84:B3:D6:CE:8C:EE:A6:C1:C3:9F:73:EF:3D:DF:BE:AD:CF:D8:12
X509v3 Authority Key Identifier:
keyid:77:26:EB:FF:0F:2D:74:BF:A2:16:00:FF:73:FE:26:69:1F:C7:31:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dybr_w8tdL-iFgD_c_4maR_HMak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/W4Sz1s6M7qbBw59z7z3fvq3P2BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/dybr_w8tdL-iFgD_c_4maR_HMak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.150.0/24
Signature Algorithm: sha256WithRSAEncryption
53:31:87:b4:b7:c3:f6:48:e7:d5:a4:73:9c:d6:3c:06:0e:6d:
cc:06:be:ec:0f:0e:0e:4b:96:68:33:30:75:ca:1c:da:c1:9b:
7d:00:e1:5b:cb:2b:78:eb:cc:b6:9d:42:da:e1:c4:fd:5f:1a:
15:8e:7c:17:6e:1f:ec:e0:7d:ac:56:14:4d:9f:d3:63:8f:bf:
ed:39:9d:f1:d3:e6:29:a1:a9:f8:b9:6d:00:91:34:cf:fc:36:
67:ca:c1:9d:e5:ec:36:d0:db:5e:7b:11:22:69:95:26:42:83:
0a:44:59:f4:43:a1:4b:c6:e5:bc:20:9f:93:37:b3:ac:a4:ab:
ab:14:70:23:86:e4:12:a5:66:f2:16:cb:25:53:84:da:36:07:
90:6b:6d:5d:61:dd:d3:09:a0:db:bc:3a:82:d6:39:60:3f:2c:
99:3b:04:7c:22:66:56:b2:0c:fc:67:7d:a8:7c:92:86:04:3d:
a3:a3:b6:ae:15:1a:76:8e:0c:64:c3:88:43:20:70:f2:62:59:
c1:08:9c:ec:90:1a:6b:34:f7:69:a4:8f:a9:f5:57:a3:34:fa:
d4:3a:87:0d:27:4a:e5:36:56:d1:f9:f0:94:75:a3:cd:65:e5:
48:f4:1b:bb:ec:ab:3f:fa:61:95:13:be:c5:fc:96:7c:d2:42:
df:78:37:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:39 2025 by rpki-client