Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/PdsL1QIufBp1-T3K_XfThRkiT3U.roa
File: PdsL1QIufBp1-T3K_XfThRkiT3U.roa (raw, json)
Hash identifier: +4B0qi2WhOye5FLxCssPTw5AZEQLxXaabp4DquNRebA=
Subject key identifier: 3D:DB:0B:D5:02:2E:7C:1A:75:F9:3D:CA:FD:77:D3:85:19:22:4F:75
Certificate issuer: /CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
Certificate serial: 019427B5A4E59F8625987EF135F367596FFD
Authority key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/PdsL1QIufBp1-T3K_XfThRkiT3U.roa
Signing time: Thu 02 Jan 2025 15:50:03 +0000
ROA not before: Thu 02 Jan 2025 15:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 178.22.213.0/24 maxlen: 24
178.22.214.0/24 maxlen: 24
178.22.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a4:e5:9f:86:25:98:7e:f1:35:f3:67:59:6f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
Validity
Not Before: Jan 2 15:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ddb0bd5022e7c1a75f93dcafd77d38519224f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:e4:8f:7f:ee:1a:f0:30:4e:a0:62:fe:e8:
42:81:07:1c:d4:0d:c7:c9:bc:c4:39:7e:d0:d9:2e:
65:3e:5d:ad:b5:2f:2e:4d:89:9c:84:87:e8:42:01:
2e:30:0d:6e:0f:0f:e1:77:ea:f4:de:6e:26:55:ad:
d1:96:8e:66:04:4a:e0:61:cb:30:66:d2:4f:ce:70:
fe:7a:a3:14:04:54:48:b3:06:97:f1:e7:06:0b:cb:
46:d4:ca:59:90:c5:05:2f:55:bc:f9:00:de:69:45:
96:d5:58:81:35:b0:8c:17:52:b8:14:a2:ba:0d:c6:
54:f2:94:45:f0:4f:b9:a2:73:3b:8c:be:3d:5b:2f:
ad:34:6c:25:92:c5:a2:3c:c3:24:03:44:b5:9c:6e:
44:0f:a5:a8:a5:f1:51:4d:e6:04:48:1b:3b:37:b5:
e4:da:54:40:4f:d6:7d:fc:32:64:7f:2c:b4:f8:c1:
11:83:f6:0f:42:11:c2:76:0a:31:6c:fd:d4:cd:a9:
1c:89:12:71:ba:c0:2e:5f:fb:41:b8:da:a2:a3:80:
82:07:3c:6e:3e:bb:ac:57:96:0f:76:d0:4a:62:b8:
3b:c1:d7:12:f1:e8:51:41:a1:f3:9e:b6:f3:74:7c:
cd:62:bb:cc:3d:e1:06:0e:6d:c4:83:a5:eb:55:7f:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DB:0B:D5:02:2E:7C:1A:75:F9:3D:CA:FD:77:D3:85:19:22:4F:75
X509v3 Authority Key Identifier:
keyid:79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/PdsL1QIufBp1-T3K_XfThRkiT3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.213.0-178.22.215.255
Signature Algorithm: sha256WithRSAEncryption
a4:42:f4:ff:cf:7f:bb:6e:54:7a:09:6c:72:02:ed:4c:b6:cd:
73:3a:b1:1b:d8:b2:84:1e:89:21:dc:79:f5:02:61:d9:ce:84:
2a:82:5e:c5:a5:8a:25:95:a6:80:64:83:f9:39:05:29:c7:39:
d9:e1:30:05:e8:af:98:f9:d5:2c:c2:b2:e1:e5:c8:bb:66:1d:
73:e2:1c:91:ad:7d:fb:b0:cf:19:8d:7b:d6:3a:d3:49:67:e9:
7b:90:78:83:70:f1:f2:a7:29:37:5a:c8:09:22:79:61:d3:67:
86:2f:39:c1:00:93:74:2a:ab:65:e7:77:63:f4:41:07:a3:b8:
04:64:37:77:f8:42:62:05:fa:3b:1e:de:c0:28:3a:97:a8:d0:
f8:b9:1e:5f:42:48:3d:07:c5:38:85:2a:3c:88:96:40:56:03:
be:c0:b0:37:59:45:68:01:c3:22:73:27:29:36:6d:6d:49:db:
74:5e:e2:a0:12:43:c6:59:ff:44:33:ff:f2:dc:dd:e2:62:b8:
8c:cd:d7:6c:4f:6d:0e:f7:aa:ff:10:e8:a5:bf:42:7d:8a:4b:
96:92:8d:1b:64:ac:8f:20:9b:9b:c4:74:b9:f8:ad:c0:a2:4e:
ad:62:d6:09:6e:e0:4a:a0:8c:2a:85:53:e1:a4:9f:38:92:c7:
77:69:ca:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:05 2025 by rpki-client