Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/K5ywvz0jPPpUu0MGlPLvQo9wyXw.roa
File: K5ywvz0jPPpUu0MGlPLvQo9wyXw.roa (raw, json)
Hash identifier: V8CtuEADnlha71XjSKoCErER4Y41qV1YZtbWCVfKa64=
Subject key identifier: 2B:9C:B0:BF:3D:23:3C:FA:54:BB:43:06:94:F2:EF:42:8F:70:C9:7C
Certificate issuer: /CN=8a9c7c4126ff4180db9d65cdd3ac2c6726ac91a7
Certificate serial: 01857395E6EAD40AF63DAAF4BCAB07443BCA
Authority key identifier: 8A:9C:7C:41:26:FF:41:80:DB:9D:65:CD:D3:AC:2C:67:26:AC:91:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ipx8QSb_QYDbnWXN06wsZyaskac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/K5ywvz0jPPpUu0MGlPLvQo9wyXw.roa
Signing time: Mon 02 Jan 2023 17:44:41 +0000
ROA not before: Mon 02 Jan 2023 17:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56769
IP address blocks: 178.22.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:95:e6:ea:d4:0a:f6:3d:aa:f4:bc:ab:07:44:3b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9c7c4126ff4180db9d65cdd3ac2c6726ac91a7
Validity
Not Before: Jan 2 17:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b9cb0bf3d233cfa54bb430694f2ef428f70c97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:29:d0:d8:0b:9c:e4:6a:45:1c:a6:ea:af:6e:
46:97:34:54:0e:a0:a7:68:02:20:70:d6:34:ab:87:
7e:ce:3b:34:b0:18:88:65:72:68:c9:f2:9e:c8:32:
10:fd:19:c9:23:34:45:77:6c:eb:2e:43:2a:8d:61:
91:73:8e:8c:38:63:cb:4d:4e:6d:54:a0:cb:a2:77:
6c:64:33:5c:3e:6c:5d:b4:70:01:90:19:2e:ae:21:
69:23:a4:cb:7e:cb:63:2d:d4:b8:c0:b7:bc:90:ae:
54:1a:7b:3b:a9:7c:73:bb:d2:9c:2a:ca:f4:1b:ec:
8d:0b:6b:81:b6:ce:cc:14:98:e4:47:7e:04:3f:b6:
d9:51:cb:27:4c:a2:23:c8:91:b6:92:55:e4:58:00:
86:32:b8:fe:5e:67:90:25:8d:8b:2f:81:77:c9:7c:
f2:5b:39:9a:60:bb:93:43:b8:50:bd:78:b2:72:cb:
7d:fa:4d:1e:a8:81:25:ec:67:23:6d:55:d6:d9:32:
f0:e3:e5:40:52:7f:c4:33:38:17:ae:07:30:4c:f1:
71:c1:78:8a:1f:90:25:57:51:53:79:35:0d:17:c0:
08:74:8f:34:23:93:35:9e:5f:f6:42:39:9a:48:35:
a2:5f:5d:4f:1f:7c:a5:eb:9f:96:88:5c:56:ae:d2:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:B0:BF:3D:23:3C:FA:54:BB:43:06:94:F2:EF:42:8F:70:C9:7C
X509v3 Authority Key Identifier:
keyid:8A:9C:7C:41:26:FF:41:80:DB:9D:65:CD:D3:AC:2C:67:26:AC:91:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ipx8QSb_QYDbnWXN06wsZyaskac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/K5ywvz0jPPpUu0MGlPLvQo9wyXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/ipx8QSb_QYDbnWXN06wsZyaskac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.24.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2a:3c:bc:bf:45:36:c6:62:2e:b4:a5:a2:f5:e7:e1:0e:fd:
60:b4:cf:1b:3a:45:ce:0e:d4:c0:ab:17:c5:5b:1f:6b:f6:4b:
a8:ca:60:f0:87:1e:1c:4d:b6:6d:c5:bf:55:87:11:2d:b0:40:
c3:f7:d1:d7:53:b5:2d:53:4d:e9:42:b3:07:c4:0e:ef:9a:66:
14:00:f0:96:3f:ca:2d:66:51:80:5c:6b:13:09:b1:73:8a:b5:
0f:23:73:1f:38:e8:a4:6e:09:4a:f6:2f:06:f5:97:f1:95:14:
f9:68:e0:44:1c:55:f4:d8:9e:64:42:0b:a7:e4:e8:18:59:a9:
d8:01:21:2e:04:a6:68:08:bc:9c:a3:bf:43:a9:cc:f2:67:87:
fc:de:44:fd:2d:96:c0:f6:f8:18:8c:4b:e0:fd:ae:c9:b2:3b:
cc:a6:93:94:23:87:38:f5:f6:d6:e5:10:24:7a:22:a6:80:3c:
86:dc:9c:cb:5d:7c:97:95:78:d9:58:80:93:a9:7d:9c:e9:0b:
ce:03:a0:a7:d7:38:f7:36:54:0d:a8:3a:b7:79:fc:71:34:af:
da:e9:f4:2a:73:0c:17:13:4c:b5:0c:8b:db:f6:60:f2:93:73:
0c:24:10:fa:48:11:8e:f6:41:22:31:b3:ae:90:f8:d1:f1:76:
ba:e0:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:01:30 2025 by rpki-client