Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rPaWN8WPmznsEM07fU5qdx9A9qU.roa
File: rPaWN8WPmznsEM07fU5qdx9A9qU.roa (raw, json)
Hash identifier: HZq09C5QHmIgcBdzJXUPKIOmGNi38DBbDu0umQINAuM=
Subject key identifier: AC:F6:96:37:C5:8F:9B:39:EC:10:CD:3B:7D:4E:6A:77:1F:40:F6:A5
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D1F28685D5F9F699ADFDF7A45D57B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rPaWN8WPmznsEM07fU5qdx9A9qU.roa
Signing time: Wed 01 Jan 2025 15:47:41 +0000
ROA not before: Wed 01 Jan 2025 15:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8263
IP address blocks: 178.176.224.0/24 maxlen: 24
178.176.225.0/24 maxlen: 24
178.176.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:1f:28:68:5d:5f:9f:69:9a:df:df:7a:45:d5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acf69637c58f9b39ec10cd3b7d4e6a771f40f6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:94:5e:2f:33:fd:ec:af:34:2e:a0:6a:b9:
de:c2:5f:a4:1e:14:32:e2:b3:6b:01:83:95:a1:77:
99:f4:fa:55:f2:8c:00:f6:1c:d1:ba:5f:31:5b:32:
16:b3:4f:fe:eb:63:fb:ad:a2:88:0e:f0:16:5a:2a:
99:c2:17:97:16:93:a7:ac:e9:11:56:67:f2:e8:9c:
1d:8a:0f:6e:25:eb:fb:93:9a:58:ff:97:c9:0f:d7:
28:39:dc:78:dd:a7:d0:dd:31:29:0d:6b:11:99:a0:
a0:32:5a:e2:11:c6:2b:67:6c:93:fb:70:62:05:ff:
d3:cc:d6:8b:84:6a:29:d5:26:3d:1b:58:d7:07:18:
ec:44:0a:af:b9:5a:88:4a:e9:ce:4c:1d:07:9e:ec:
79:80:96:66:15:53:c9:46:a3:de:c3:63:35:53:c9:
a4:be:b6:22:c1:c1:6a:a3:dc:f8:44:13:89:25:54:
04:4b:bb:82:8b:51:96:d4:65:d4:da:34:e3:95:6b:
54:5a:f0:70:bf:a6:51:27:f4:22:db:f0:32:7f:a0:
41:7d:e3:e9:dc:50:5e:46:ec:70:b9:4f:39:10:86:
33:5e:bc:10:75:1c:0c:8d:03:f5:69:32:f5:50:2c:
d8:d1:6f:0c:b5:34:3d:15:1f:71:27:0f:75:57:44:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F6:96:37:C5:8F:9B:39:EC:10:CD:3B:7D:4E:6A:77:1F:40:F6:A5
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rPaWN8WPmznsEM07fU5qdx9A9qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.176.224.0-178.176.226.255
Signature Algorithm: sha256WithRSAEncryption
a8:cf:3d:c4:86:80:33:07:df:ba:24:5b:25:36:b8:c2:b3:a9:
86:51:eb:09:6d:80:d5:8c:32:be:e0:34:ac:ef:3b:9a:e3:75:
88:7e:88:c5:82:44:44:a2:5e:82:05:2b:48:e7:7a:9e:01:43:
bc:4a:06:d3:bb:42:03:a5:7b:fc:9a:16:4b:0a:40:22:a8:4e:
b7:0d:41:1e:d0:b8:cc:65:ef:65:4e:96:1e:78:93:34:1e:8a:
c1:4e:81:e1:46:fc:0b:0e:3f:32:fb:19:ff:6f:90:c4:87:69:
1b:f7:1b:07:d8:0f:26:f7:a1:eb:7b:35:02:60:c0:c8:b8:fd:
80:31:18:13:06:e8:04:53:c3:d8:a8:c1:c9:a2:a8:58:ea:c4:
08:90:cc:29:7a:35:8a:10:69:6d:f1:3b:91:8d:8c:7f:ac:22:
0d:30:76:54:51:e4:df:11:46:4c:c9:4e:49:b6:8f:b1:c0:71:
b2:2f:0f:ae:58:fd:39:48:ba:d7:c0:5a:2b:0e:a5:3d:49:84:
42:23:4f:6b:a8:bb:00:c8:46:d7:75:64:b1:37:8b:dc:40:33:
31:7e:80:61:2a:62:2b:04:e0:55:43:ec:bc:dc:25:b1:8a:be:
bc:ed:e1:8d:52:e6:8b:66:27:d9:a9:b5:a1:b2:75:54:39:70:
07:ee:aa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:43:40 2025 by rpki-client