Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/xPWzAgf3GS-owGe5tHxo0l9gGYk.roa
File: xPWzAgf3GS-owGe5tHxo0l9gGYk.roa (raw, json)
Hash identifier: hSLDKmHaIMy+GD8h3HF7rUOAZ7C+D4r0j4Q5m4I1nYU=
Subject key identifier: C4:F5:B3:02:07:F7:19:2F:A8:C0:67:B9:B4:7C:68:D2:5F:60:19:89
Certificate issuer: /CN=b3bbc59e67f70508ff1e81a6b535a6ad5261ec89
Certificate serial: 4A9FEC
Authority key identifier: B3:BB:C5:9E:67:F7:05:08:FF:1E:81:A6:B5:35:A6:AD:52:61:EC:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/xPWzAgf3GS-owGe5tHxo0l9gGYk.roa
Signing time: Sat 01 Jan 2022 02:53:34 +0000
ROA not before: Sat 01 Jan 2022 02:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211373
IP address blocks: 178.212.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4890604 (0x4a9fec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3bbc59e67f70508ff1e81a6b535a6ad5261ec89
Validity
Not Before: Jan 1 02:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4f5b30207f7192fa8c067b9b47c68d25f601989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:cd:ed:2f:49:94:78:ae:d7:0d:f2:5e:3a:
8c:4e:0c:ee:bb:0a:21:73:40:b1:a9:6c:ca:40:c2:
66:35:80:77:97:90:71:66:59:7d:09:4a:7f:a2:ca:
b7:da:10:51:63:fb:bd:63:db:e2:ba:64:b7:16:bf:
27:e0:cf:96:e3:dc:9e:ca:06:7b:2c:87:ee:12:99:
b2:64:61:80:c1:58:b0:c1:4b:1f:5a:92:a8:52:af:
3c:00:61:4b:b4:f4:48:2b:d6:18:ba:9f:92:d9:f2:
c3:de:82:a4:a3:0c:03:1d:5e:60:e6:ee:1d:21:6e:
5f:be:ff:24:9a:8f:21:d0:60:6b:63:0e:78:ce:46:
22:d8:a6:83:da:fa:fa:34:06:ed:d2:27:28:f5:d6:
83:ed:84:d3:e1:6f:19:93:6d:6f:6f:1a:09:b7:ed:
b1:ce:45:4d:96:c2:66:a6:d6:45:4a:92:52:9b:94:
dd:ef:e1:b4:27:98:92:38:14:be:ee:a3:df:7d:bf:
eb:92:5f:b6:f3:2e:7c:6e:d6:92:f7:91:06:2a:23:
04:bc:4f:70:83:08:88:f1:d1:01:97:15:c2:f5:59:
a5:09:31:7a:5d:96:a9:56:9f:fd:dc:c5:59:b4:21:
85:fe:a0:c9:a2:5d:71:55:95:4a:53:38:a1:8f:8e:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F5:B3:02:07:F7:19:2F:A8:C0:67:B9:B4:7C:68:D2:5F:60:19:89
X509v3 Authority Key Identifier:
keyid:B3:BB:C5:9E:67:F7:05:08:FF:1E:81:A6:B5:35:A6:AD:52:61:EC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/xPWzAgf3GS-owGe5tHxo0l9gGYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.140.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f5:74:ad:71:e3:9a:c0:a8:83:91:f8:72:2d:20:54:62:38:
7a:a0:48:ed:9c:04:85:1a:08:ff:f0:87:2d:64:47:77:9a:26:
47:90:93:36:a0:1c:d9:0d:3e:4a:27:e5:3a:e4:3b:2e:fe:43:
e4:71:54:5c:34:fe:0b:d7:36:b6:ee:cd:d5:20:62:3a:37:46:
7a:4a:1b:a5:69:59:31:64:b8:dc:f1:a0:f2:29:64:48:62:f3:
40:b8:6f:8a:dc:54:0f:32:c2:7d:e5:8e:09:23:94:59:1d:cf:
9e:a7:a2:0e:00:22:f6:d1:05:3f:31:3e:57:d0:bc:f5:80:8d:
b2:fc:d4:78:33:60:88:9a:93:be:c1:2e:a9:0b:99:3b:7c:40:
68:d6:c6:c3:9b:72:a5:7c:42:4b:18:5a:08:6a:2f:34:c0:cf:
44:41:d2:0d:c1:ba:87:11:52:21:d5:93:5e:d5:0e:99:5d:c9:
f2:73:09:e6:7d:ed:77:eb:5b:b5:4a:6c:a6:f8:8c:00:55:b9:
da:ff:ba:ab:b9:14:4d:d5:8b:1f:e9:35:b5:ee:3b:dd:91:77:
db:bc:9c:9d:fb:79:1b:9b:10:ed:8e:58:6a:ce:37:01:2d:d0:
42:55:5e:e7:e2:f2:ad:cd:3c:5d:b8:6c:c4:61:1d:7c:fe:03:
01:1b:37:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:48:31 2025 by rpki-client