Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/D6p2t8uiBKfqdDi55_En4lYtIro.roa
File: D6p2t8uiBKfqdDi55_En4lYtIro.roa (raw, json)
Hash identifier: sj7YoIshSn7ixfErwrPSPMsqEYO9JvgtqizaCyYHm04=
Subject key identifier: 0F:AA:76:B7:CB:A2:04:A7:EA:74:38:B9:E7:F1:27:E2:56:2D:22:BA
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D767B9C12D3B68FF857CC221EB1DAE
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/D6p2t8uiBKfqdDi55_En4lYtIro.roa
Signing time: Wed 01 Jan 2025 21:48:26 +0000
ROA not before: Wed 01 Jan 2025 21:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200461
IP address blocks: 178.251.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:67:b9:c1:2d:3b:68:ff:85:7c:c2:21:eb:1d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0faa76b7cba204a7ea7438b9e7f127e2562d22ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:62:f5:b4:d0:b9:ce:73:09:28:e7:d4:5a:
8a:e5:fb:11:36:65:82:ff:b7:02:37:e0:5b:96:d6:
e6:41:ca:c4:d9:fc:0b:60:c7:3f:43:9e:ba:af:f9:
e7:5f:40:cb:18:cb:f5:4d:4b:8c:dc:6a:48:e6:fe:
af:9f:5e:d5:47:d5:f9:5b:06:62:31:f2:34:ca:f2:
ab:43:89:b2:7c:31:8b:4b:ed:71:39:73:ff:a0:77:
ca:28:f2:41:a6:e6:25:93:74:be:3f:aa:12:f8:e8:
c7:8a:65:a6:de:7c:19:60:66:86:c3:12:f7:ee:61:
b7:2d:46:6c:b8:61:2c:06:c7:fe:80:a7:4a:9d:f3:
74:b2:c2:ae:25:ea:6d:56:49:b2:e7:b6:f1:02:62:
af:6f:fe:a1:21:2d:f0:4a:81:82:04:6a:7e:79:ce:
49:e1:27:19:46:78:25:65:35:c2:e0:3f:02:ed:38:
53:e5:98:d9:b8:3b:aa:7a:fd:22:a3:1e:4c:5a:51:
d9:45:d0:aa:ff:3d:04:37:90:4c:26:76:32:d6:20:
43:ee:4a:49:45:0d:64:d3:f7:6f:85:1c:ad:25:28:
cd:4d:d1:14:7a:1b:79:37:9d:38:1e:29:b7:f4:54:
66:73:8b:8d:1e:4c:dc:42:92:c2:cf:a0:40:78:11:
27:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AA:76:B7:CB:A2:04:A7:EA:74:38:B9:E7:F1:27:E2:56:2D:22:BA
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/D6p2t8uiBKfqdDi55_En4lYtIro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.228.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c5:b6:13:38:33:c3:6a:26:b4:10:a3:a5:fd:1f:d5:1b:a0:
a9:4a:1d:9d:44:6c:4e:f1:91:13:48:fe:09:34:d0:cf:dd:cd:
70:41:5c:ca:10:3a:90:dd:77:cd:61:40:e9:6c:08:64:c7:dd:
d3:82:c0:08:72:87:16:06:c6:15:67:82:b5:9c:92:b2:f6:fd:
6d:e4:36:25:9d:ec:fc:48:f1:03:93:6a:5b:99:36:bc:c4:4e:
b4:77:ab:13:41:2c:b7:31:33:43:52:f1:e5:38:2c:b1:7e:9a:
7b:b0:f5:cf:fd:91:b1:62:0f:28:bd:9b:b8:07:be:f0:98:3f:
f6:6d:32:41:25:7e:09:98:35:61:0c:7c:d4:c9:80:6b:39:72:
6e:40:3f:63:13:1d:0e:62:e5:a8:c4:99:da:92:69:c6:97:c4:
6e:d9:1a:b8:5b:79:b7:89:0a:4c:77:d7:2e:cf:6d:db:4b:6a:
c2:7c:60:f0:1f:93:f8:30:bf:36:af:8e:c5:bd:f0:74:01:f5:
78:4a:a6:95:3a:48:c7:37:24:d4:92:82:c1:15:69:58:1d:a9:
0d:25:8d:f2:5e:18:29:24:52:10:04:c9:74:8e:d4:62:b9:c7:
84:5b:bf:e1:9d:26:61:2d:ab:23:18:7d:48:33:5f:67:cb:98:
0e:81:3a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:09 2025 by rpki-client