Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa
File: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (raw, json)
Hash identifier: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=
Subject key identifier: 18:78:62:4D:62:48:AD:19:C1:14:C9:4A:EB:1B:98:43:59:C3:52:7F
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 0194214421407AC3F6D688E4CCA492914153
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa
Signing time: Wed 01 Jan 2025 09:48:20 +0000
ROA not before: Wed 01 Jan 2025 09:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8468
IP address blocks: 178.16.224.0/22 maxlen: 22
178.16.228.0/24 maxlen: 24
178.16.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:21:40:7a:c3:f6:d6:88:e4:cc:a4:92:91:41:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Jan 1 09:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1878624d6248ad19c114c94aeb1b984359c3527f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:32:fc:e8:a6:74:8e:7a:cc:5b:35:30:4a:
92:34:83:47:fa:81:9f:4e:a8:49:bb:de:64:2f:e1:
5b:c2:19:18:ed:31:26:6b:bc:a9:50:14:c1:41:0d:
ac:29:c8:50:6a:ba:ea:cd:a6:ea:ae:99:e4:50:d3:
9d:7b:6c:75:da:a4:21:3e:82:b4:ff:fa:09:51:ab:
0d:9d:65:98:51:f7:d2:5a:8f:17:c7:87:37:2c:6d:
53:a8:0c:e0:0e:ef:03:79:bb:98:23:58:99:ba:b1:
8a:0c:e5:fd:cc:4a:73:2f:bc:61:6f:01:ea:17:4e:
2d:e8:50:9a:9b:f7:c9:cf:9c:2a:08:7e:e1:30:3d:
b5:3b:6c:1d:c3:96:b5:1b:f3:39:34:71:44:c3:01:
f9:10:cb:1b:f3:0f:b0:90:ef:e4:12:63:12:5c:18:
6d:31:4a:8c:ef:67:40:15:1d:10:f5:60:8d:b8:9e:
3c:c6:88:62:9a:14:ed:a5:93:c1:16:86:f2:93:d2:
fe:87:17:c7:41:6c:36:8e:c5:e5:22:aa:73:87:10:
64:8c:6e:54:85:ed:c2:bb:0d:f7:37:69:22:c6:e5:
d6:2f:ab:fe:6a:7c:36:59:ab:20:e2:82:20:6c:ca:
a6:cf:52:d7:d1:75:70:69:f0:91:13:60:dd:66:cc:
f7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:78:62:4D:62:48:AD:19:C1:14:C9:4A:EB:1B:98:43:59:C3:52:7F
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.224.0-178.16.228.255
178.16.237.0/24
Signature Algorithm: sha256WithRSAEncryption
55:87:3d:3b:c3:79:21:23:a0:1f:a8:f7:dd:05:2a:fa:02:13:
fd:02:7f:cf:ea:62:49:c7:b4:96:32:60:e1:99:02:ef:35:89:
5f:99:dd:08:e8:38:f8:de:73:36:79:4a:24:eb:9b:75:55:87:
69:6f:2a:ae:7a:5f:5f:7d:2c:ce:21:18:54:24:32:06:d2:23:
b0:be:7e:c4:07:bb:27:a3:26:04:9f:4b:7a:48:4a:ae:e2:a1:
19:b1:bb:9e:88:34:fd:94:28:24:d2:80:87:fb:73:23:20:c9:
27:07:c3:8f:85:d9:03:b0:80:d3:d0:2d:5e:f8:c6:47:30:cd:
a8:04:a2:aa:4c:4e:39:bb:b3:5f:a1:16:28:ef:19:33:f0:ea:
1c:48:46:41:b0:e7:82:49:74:74:8a:16:f2:b6:5f:21:a6:c0:
ca:8a:04:ca:13:b0:8f:bc:9d:b8:6b:55:ec:a2:93:6a:16:6a:
60:e9:07:18:28:64:f5:60:56:f4:d5:f1:0b:18:bb:36:1b:d2:
06:11:6a:9e:3c:a0:9a:04:63:08:26:05:59:fc:06:62:ca:7c:
2a:10:99:25:0d:b7:b3:58:2d:6b:df:09:d1:9e:9a:79:f9:da:
66:3a:21:59:8c:c2:31:3e:59:74:8b:98:d6:fe:ec:cc:42:cf:
76:6f:d7:84
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQhRCFAesP21ojkzKSSkUFTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDk1YTRjZWNiZWFmYjNlYWRmNmVkMDM0OWJiMGI5NmRh
NDY0ZWUwHhcNMjUwMTAxMDk0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODc4NjI0ZDYyNDhhZDE5YzExNGM5NGFlYjFiOTg0MzU5YzM1MjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6wy/OimdI56zFs1MEqSNINH+oGf
TqhJu95kL+FbwhkY7TEma7ypUBTBQQ2sKchQarrqzabqrpnkUNOde2x12qQhPoK0
//oJUasNnWWYUffSWo8Xx4c3LG1TqAzgDu8DebuYI1iZurGKDOX9zEpzL7xhbwHq
F04t6FCam/fJz5wqCH7hMD21O2wdw5a1G/M5NHFEwwH5EMsb8w+wkO/kEmMSXBht
MUqM72dAFR0Q9WCNuJ48xohimhTtpZPBFobyk9L+hxfHQWw2jsXlIqpzhxBkjG5U
he3Cuw33N2kixuXWL6v+anw2Wasg4oIgbMqmz1LX0XVwafCRE2DdZsz3hwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBh4Yk1iSK0ZwRTJSusbmENZw1J/MB8GA1UdIwQY
MBaAFGNJWkzsvq+z6t9u0DSbsLltpGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMt
MzgyMGY3ZWUyY2I4LzEvR0hoaVRXSklyUm5CRk1sSzZ4dVlRMW5EVW44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMtMzgyMGY3ZWUyY2I4
LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAWyEOAD
BACyEOQDBACyEO0wDQYJKoZIhvcNAQELBQADggEBAFWHPTvDeSEjoB+o990FKvoC
E/0Cf8/qYknHtJYyYOGZAu81iV+Z3QjoOPjeczZ5SiTrm3VVh2lvKq56X199LM4h
GFQkMgbSI7C+fsQHuyejJgSfS3pISq7ioRmxu56INP2UKCTSgIf7cyMgyScHw4+F
2QOwgNPQLV74xkcwzagEoqpMTjm7s1+hFijvGTPw6hxIRkGw54JJdHSKFvK2XyGm
wMqKBMoTsI+8nbhrVeyik2oWamDpBxgoZPVgVvTV8QsYuzYb0gYRap48oJoEYwgm
BVn8BmLKfCoQmSUNt7NYLWvfCdGemnn52mY6IVmMwjE+WXSLmNb+7MxCz3Zv14Q=
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:46:30 2025 by rpki-client