Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/bHUjv777skEZRG9-W4GOGl-ctfE.roa
File: bHUjv777skEZRG9-W4GOGl-ctfE.roa (raw, json)
Hash identifier: 3djk4HoPSVHzNV3vsmzBj0G0GPsa2yKOled7SSTWdpE=
Subject key identifier: 6C:75:23:BF:BE:FB:B2:41:19:44:6F:7E:5B:81:8E:1A:5F:9C:B5:F1
Certificate issuer: /CN=247a513ac9a7ef9c8351a727b5ac6bc831cdcbed
Certificate serial: 39705CFF
Authority key identifier: 24:7A:51:3A:C9:A7:EF:9C:83:51:A7:27:B5:AC:6B:C8:31:CD:CB:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHpROsmn75yDUacntaxryDHNy-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/bHUjv777skEZRG9-W4GOGl-ctfE.roa
Signing time: Tue 28 Jun 2022 08:10:02 +0000
ROA not before: Tue 28 Jun 2022 08:10:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41609
IP address blocks: 178.250.190.0/24 maxlen: 24
178.250.187.0/24 maxlen: 24
178.250.191.0/24 maxlen: 24
178.250.188.0/24 maxlen: 24
178.250.189.0/24 maxlen: 24
178.250.186.0/24 maxlen: 24
178.250.184.0/24 maxlen: 24
178.250.185.0/24 maxlen: 24
2a00:4080::/48 maxlen: 48
2a00:4087::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963665151 (0x39705cff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247a513ac9a7ef9c8351a727b5ac6bc831cdcbed
Validity
Not Before: Jun 28 08:10:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c7523bfbefbb24119446f7e5b818e1a5f9cb5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:08:28:0e:be:69:9a:48:1f:0a:66:ee:c4:
08:7d:34:3b:14:45:e9:27:db:4f:cc:f0:b4:eb:44:
7b:3c:75:be:4b:27:26:3e:ed:5d:8d:5e:2f:43:03:
d2:c1:d2:ca:52:35:3c:90:fb:7e:3c:5b:2c:1e:88:
be:4f:05:e0:84:3c:87:a9:14:a6:05:9e:b8:3c:47:
05:1a:ee:38:1e:c9:0a:08:83:ab:e8:b3:e0:c7:b5:
61:ea:69:4a:89:fe:6d:2b:d6:47:92:70:84:df:8a:
11:0b:dd:c4:b7:db:10:a7:38:01:23:95:10:9e:4d:
32:fa:6c:41:84:60:86:98:44:b2:c2:19:ac:4b:74:
68:01:50:66:1c:4b:a8:4a:7b:71:35:03:58:3f:c0:
16:19:29:be:bf:78:a9:90:40:9e:92:d5:30:64:8e:
51:c0:59:82:02:de:28:e2:96:65:91:a6:38:34:2b:
f0:80:7d:49:a7:d0:bb:23:57:28:ec:d8:d2:d4:d7:
dd:59:dc:e5:5b:3e:cf:c6:f4:a5:13:ce:62:05:1d:
f9:a7:55:fa:cc:e6:16:4a:73:e8:7a:61:5b:5a:8f:
e2:d4:71:41:7e:af:d6:8d:b2:82:2a:11:15:31:fe:
4b:9e:a8:44:e7:3d:cd:8f:8a:02:42:6b:08:7a:75:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:75:23:BF:BE:FB:B2:41:19:44:6F:7E:5B:81:8E:1A:5F:9C:B5:F1
X509v3 Authority Key Identifier:
keyid:24:7A:51:3A:C9:A7:EF:9C:83:51:A7:27:B5:AC:6B:C8:31:CD:CB:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHpROsmn75yDUacntaxryDHNy-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/bHUjv777skEZRG9-W4GOGl-ctfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/JHpROsmn75yDUacntaxryDHNy-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.184.0/21
IPv6:
2a00:4080::/48
2a00:4087::/32
Signature Algorithm: sha256WithRSAEncryption
2d:f0:af:de:e8:42:10:2f:25:a1:df:13:76:8f:bb:dc:a4:10:
78:e0:34:0f:76:6e:43:32:20:a1:6a:5f:46:96:e6:f1:4f:a6:
9d:69:cb:35:3a:5a:3b:cc:df:2e:f2:2a:d2:d2:6d:24:97:12:
b3:32:63:84:0b:d5:3f:b9:df:48:bb:94:34:43:56:59:57:45:
71:7a:46:e7:2e:3d:24:da:7d:a5:5f:05:da:3c:91:98:72:97:
18:2c:c5:98:b0:37:a8:98:24:17:d2:b0:5e:86:a8:15:1c:cb:
18:4e:67:ec:fb:70:3e:93:d6:50:35:27:e5:38:fa:e6:f9:c3:
e5:30:9f:89:de:c9:4b:2b:d8:bc:7b:50:51:e0:f4:d3:b7:54:
16:57:77:8e:ea:b1:f2:f2:42:a5:a4:b9:2f:3d:ac:c5:42:98:
c8:5e:a1:26:5d:29:2c:7d:9e:a3:0c:a5:be:a3:40:09:c5:76:
b6:9c:5e:b1:24:14:11:da:8e:6c:d1:c3:f8:57:56:91:4d:0c:
fe:2e:68:c6:82:d8:d0:99:ed:91:de:35:6d:80:e8:97:a2:2d:
85:3b:1f:07:56:b0:4c:fe:83:3e:c7:84:b1:4b:b9:17:d3:60:
02:6f:90:98:d0:3e:fc:79:5d:10:fd:64:01:81:3c:cb:eb:de:
83:0f:5b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:37 2025 by rpki-client