Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/xs7enPVeNIMyt7yLlWdZQsBjc6E.roa
File: xs7enPVeNIMyt7yLlWdZQsBjc6E.roa (raw, json)
Hash identifier: Hl7Zc5f4P4RuVLf0+lM7s4f9NcFGJ5Df6CUhJF0dl6Q=
Subject key identifier: C6:CE:DE:9C:F5:5E:34:83:32:B7:BC:8B:95:67:59:42:C0:63:73:A1
Certificate issuer: /CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Certificate serial: 019422FB094F9E595DF69ADF3585D03C618A
Authority key identifier: 82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/xs7enPVeNIMyt7yLlWdZQsBjc6E.roa
Signing time: Wed 01 Jan 2025 17:47:44 +0000
ROA not before: Wed 01 Jan 2025 17:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206732
IP address blocks: 185.178.8.0/22 maxlen: 24
2a12:b140::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:09:4f:9e:59:5d:f6:9a:df:35:85:d0:3c:61:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Validity
Not Before: Jan 1 17:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6cede9cf55e348332b7bc8b95675942c06373a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:27:ed:bb:ba:69:58:58:14:86:1a:1f:73:
06:be:bf:e8:e1:fe:f9:84:a4:68:b7:22:dd:a5:19:
fa:ad:ea:21:8f:b7:09:8f:17:b5:ef:f0:5b:1c:30:
de:48:2f:fb:b4:6f:cb:fc:5d:5b:b6:a3:e0:8b:dd:
66:d6:a9:8f:e1:15:4f:d1:23:a7:a0:f5:cc:f2:98:
51:39:13:3d:ef:dd:1b:0d:0b:30:89:e0:ef:03:86:
b5:58:c2:c9:91:61:1d:22:7e:97:a3:05:50:90:d3:
46:45:9d:43:99:bf:34:34:e2:25:b1:cb:62:0f:f4:
c6:80:cd:fd:f5:b1:e3:bf:2d:56:f6:53:af:6e:68:
5e:18:b3:b4:8a:8d:53:64:d4:4f:3a:60:c5:a3:0a:
09:72:50:57:08:91:78:cd:65:f4:c0:de:a2:f1:58:
cd:8e:d1:4e:ca:91:14:c3:da:80:a5:78:9f:48:42:
9c:53:f8:a6:04:90:67:55:df:b3:9f:bb:45:a6:01:
04:15:54:a8:ba:f3:fa:a8:34:42:30:2e:e8:e2:22:
38:4e:7f:d8:b7:10:eb:f6:dd:34:8d:a6:08:4c:00:
09:e2:ca:ae:7c:6e:a1:7c:54:92:fd:5c:cc:aa:c7:
d9:ff:75:02:06:7b:74:4d:be:9e:2a:b4:10:35:c3:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CE:DE:9C:F5:5E:34:83:32:B7:BC:8B:95:67:59:42:C0:63:73:A1
X509v3 Authority Key Identifier:
keyid:82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/xs7enPVeNIMyt7yLlWdZQsBjc6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.8.0/22
IPv6:
2a12:b140::/29
Signature Algorithm: sha256WithRSAEncryption
a6:97:1b:6f:71:fb:ca:d7:51:1d:40:b7:fa:46:ba:b1:bf:06:
49:9d:9e:3b:50:f7:09:e1:8b:9b:e6:bc:03:f3:a9:da:62:89:
6b:53:7e:ea:81:98:fe:74:b4:6c:57:c3:a0:58:78:7e:7e:97:
7c:95:f7:b0:67:e5:2f:5a:25:d1:ad:8a:d3:6c:35:b8:93:10:
7f:1a:e7:06:57:25:72:49:f3:8a:b8:2e:87:2f:71:c2:10:84:
f3:2c:2c:59:c7:52:86:7b:c7:38:ee:61:c1:4d:00:e0:8a:09:
48:35:a6:27:d8:e4:f7:f1:80:5d:85:c8:3d:15:72:1f:ef:a0:
f8:65:b5:8a:f1:a5:10:62:70:00:31:12:83:66:04:e2:61:9c:
1b:9a:a8:8f:e5:63:74:f3:0e:44:90:48:4a:a9:dd:43:0e:3f:
f4:17:fb:16:fb:28:3f:3b:bb:30:b7:be:5f:89:07:6a:64:b2:
85:dd:3b:23:07:ff:d1:dc:d0:d2:38:fa:05:11:e0:39:33:83:
82:24:88:ea:0a:15:d3:fb:98:3f:e0:d6:48:52:40:1b:3b:21:
08:c9:c9:02:17:1f:d0:50:da:0f:a6:98:c5:05:68:3d:cd:3a:
00:71:c8:ce:50:79:b3:40:55:3f:de:39:ec:39:2b:93:cd:2a:
a5:d0:1f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:26 2025 by rpki-client