Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/6APrd79kmuyNwpex626uNLGMIX0.roa
File: 6APrd79kmuyNwpex626uNLGMIX0.roa (raw, json)
Hash identifier: 7Zm/lOFTt+AfdsIxcjvvrXgteW7mXkxvg9D1ZZh9It8=
Subject key identifier: E8:03:EB:77:BF:64:9A:EC:8D:C2:97:B1:EB:6E:AE:34:B1:8C:21:7D
Certificate issuer: /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Certificate serial: 019420D5E6E820E0FD07395A0F39D47EF2BE
Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/6APrd79kmuyNwpex626uNLGMIX0.roa
Signing time: Wed 01 Jan 2025 07:47:56 +0000
ROA not before: Wed 01 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51112
IP address blocks: 178.217.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e6:e8:20:e0:fd:07:39:5a:0f:39:d4:7e:f2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e803eb77bf649aec8dc297b1eb6eae34b18c217d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:7f:bb:6e:5c:24:f1:ca:77:ce:37:1e:cc:
66:15:d0:70:ed:cb:0e:9c:d6:93:64:6b:c2:cb:a5:
7d:63:5f:61:bb:bc:18:cc:81:8d:41:26:2c:fa:47:
0e:aa:99:7c:f8:e3:f2:e2:01:82:f2:c4:44:4e:42:
7c:84:17:f1:31:80:1b:e2:31:06:52:64:7d:7f:22:
d2:0d:f5:3b:1e:19:12:e4:40:cd:07:fa:3b:5a:d4:
d1:c9:e5:21:9f:47:02:6d:32:85:11:d3:b6:c7:55:
80:b9:bb:52:e5:d4:62:d5:ca:6a:4b:d0:1f:09:3e:
8a:b4:27:3a:6e:3f:12:9f:43:40:58:52:f6:ae:4c:
aa:cb:3b:91:1a:d0:0c:6e:6e:0f:c5:46:4e:fe:37:
9a:65:dd:c7:75:83:2e:7c:de:b4:54:8c:9b:8b:0b:
bf:1e:19:12:7f:ed:9d:23:f7:26:7b:da:ce:9c:59:
12:01:77:95:2e:fa:46:bb:a9:e1:a2:a1:bc:0a:67:
36:59:49:3b:66:a6:e3:29:f8:19:27:38:eb:62:b0:
9c:0f:e9:bd:b6:94:30:b3:44:32:c6:fa:3e:06:a6:
f0:87:1e:ed:d5:38:15:83:0a:14:a0:e7:20:d4:04:
54:4a:63:9b:fd:70:13:41:42:95:40:c7:9b:a7:24:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:03:EB:77:BF:64:9A:EC:8D:C2:97:B1:EB:6E:AE:34:B1:8C:21:7D
X509v3 Authority Key Identifier:
keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/6APrd79kmuyNwpex626uNLGMIX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.72.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:5b:02:0c:ba:42:45:ed:9d:65:57:e6:69:d9:a5:31:17:81:
be:b6:c2:17:83:f3:a9:ba:1b:47:e4:af:63:62:22:e1:40:2e:
67:c9:28:d9:9f:8f:c8:f0:b8:b7:ea:73:c5:d7:5c:d4:a7:6c:
cf:c3:13:28:4c:52:a5:ab:ae:e1:19:5b:3f:41:48:0c:ee:98:
9c:e5:f8:6a:c9:16:46:32:ed:f8:8d:50:38:f1:69:18:d1:dd:
b7:94:1a:6d:df:94:45:8d:a2:64:a3:b5:06:f5:c1:4d:f9:ec:
97:1f:c0:c1:74:0b:52:ea:ac:03:04:58:7c:6c:dd:89:11:eb:
84:68:6b:1a:1f:69:bc:e3:b6:69:58:02:7e:12:0a:66:ba:3c:
ff:c0:02:dd:f6:94:9d:3d:50:65:4c:be:58:13:5b:95:73:a4:
f5:a5:ba:46:8b:75:15:64:9a:1f:b2:f8:98:24:d1:ac:ca:ae:
0d:3e:a1:a7:7a:f5:c2:81:82:73:80:20:8a:77:eb:0e:56:cf:
56:81:e5:43:2a:53:d0:67:6e:d1:6b:b3:2d:9e:3c:bc:60:1b:
20:96:2d:09:92:b8:ae:cb:97:23:19:f2:71:3b:a4:72:0d:b1:
a0:f0:0c:7c:ba:6d:f7:09:86:f7:0e:22:70:73:b8:52:25:04:
aa:87:07:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:48:06 2025 by rpki-client