Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa
File: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (raw, json)
Hash identifier: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=
Subject key identifier: EF:27:C8:25:F9:A4:43:74:8F:2F:AC:ED:C0:74:AC:40:40:C5:AB:B7
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 01958A1E3305B4E83ACD8520055FE4A46E20
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa
Signing time: Wed 12 Mar 2025 11:29:49 +0000
ROA not before: Wed 12 Mar 2025 11:29:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 178.210.245.0/24 maxlen: 24
178.210.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:1e:33:05:b4:e8:3a:cd:85:20:05:5f:e4:a4:6e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Mar 12 11:29:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef27c825f9a443748f2facedc074ac4040c5abb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:ad:f4:3c:91:50:a1:3b:7f:58:bd:f0:5e:
65:9f:28:55:8d:81:14:74:ea:6f:1a:b5:cc:5e:b0:
a6:7d:79:56:11:30:6d:a1:ab:c5:42:00:fd:27:f3:
83:35:8d:66:14:0b:1a:0d:f7:42:1f:5d:8a:3d:b2:
ae:de:3c:11:5e:54:34:3c:50:eb:0e:a7:29:3c:e9:
40:f6:ea:c2:35:14:15:53:79:5e:78:a6:d2:3d:eb:
87:24:89:6a:20:9b:10:b7:9b:cb:d7:89:cf:d0:47:
34:b1:f1:d2:d6:73:a2:43:4e:a5:b8:73:44:a1:63:
bf:11:58:8f:b6:90:e1:01:c8:86:14:72:19:f1:e7:
89:2a:0f:1c:19:82:c1:15:69:00:16:9b:11:93:30:
f7:c9:72:d8:02:8a:2a:64:fd:0d:7a:e0:06:c0:c8:
6a:20:ce:c9:51:83:65:76:c8:e9:fc:0a:38:27:d5:
c9:e3:e8:ed:eb:42:61:36:7d:6b:51:35:75:56:9f:
0a:68:ef:05:bd:a1:9f:04:6d:e5:21:81:b4:bc:e1:
af:45:d6:02:75:8c:d8:ee:f7:85:1f:59:f9:11:ce:
79:3a:3f:7b:61:45:ac:3c:8e:00:b7:5b:e4:f1:79:
cc:df:d3:18:aa:ce:45:90:d8:e1:a0:f5:55:23:7d:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:27:C8:25:F9:A4:43:74:8F:2F:AC:ED:C0:74:AC:40:40:C5:AB:B7
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.245.0-178.210.246.255
Signature Algorithm: sha256WithRSAEncryption
55:84:72:dd:2d:79:e0:66:0e:8f:e6:ac:ea:17:3b:04:01:0c:
35:4d:c4:f0:5c:b9:ab:8b:05:8d:50:6b:f7:70:ae:b1:6a:c8:
13:3e:0e:e1:3f:38:0b:e7:a8:42:d1:a7:b8:ce:85:c1:f4:86:
36:db:52:ac:df:a8:4c:b8:31:d1:f1:00:86:d7:dc:19:2d:d6:
1e:79:06:92:6d:87:53:58:3e:fb:09:fb:c7:47:9c:62:ec:be:
1e:44:0e:c4:44:26:d1:56:f7:5e:77:0f:a5:39:87:02:c9:bc:
78:6a:1a:ff:99:5c:ca:b4:7d:e6:0b:91:52:85:6f:fc:85:71:
bb:d9:77:4f:6f:3f:f9:9b:1a:7d:53:6b:81:c9:2e:e4:e9:2a:
fc:53:2e:b4:5f:85:e8:e5:e1:5f:a3:1a:5b:51:23:67:35:88:
83:8a:1d:e8:62:df:d5:56:4f:91:95:7e:02:b4:6f:10:5a:98:
a5:2c:f2:f9:8a:bf:af:f8:9b:37:77:74:e5:8f:30:29:8e:4c:
36:3d:52:08:79:83:63:f0:e0:d6:90:18:61:e0:5e:b2:2f:8b:
3f:6f:de:e2:14:74:67:b8:b1:bc:c9:8a:6e:b6:be:95:eb:25:
99:e5:63:a3:65:9f:4e:40:53:f1:cb:85:48:3a:38:5e:98:2b:
4c:96:38:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:33 2025 by rpki-client