Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/iTLc5VqU9KTkxYI4woYxihTaS1E.roa
File: iTLc5VqU9KTkxYI4woYxihTaS1E.roa (raw, json)
Hash identifier: 9Lihlb46Ba0mozz2ZnqtyUczktp8pAuj6kFBxT8olqk=
Subject key identifier: 89:32:DC:E5:5A:94:F4:A4:E4:C5:82:38:C2:86:31:8A:14:DA:4B:51
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019420D5E24AFB96D0A07D56B72C16B9CE93
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/iTLc5VqU9KTkxYI4woYxihTaS1E.roa
Signing time: Wed 01 Jan 2025 07:47:55 +0000
ROA not before: Wed 01 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208949
IP address blocks: 5.178.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e2:4a:fb:96:d0:a0:7d:56:b7:2c:16:b9:ce:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8932dce55a94f4a4e4c58238c286318a14da4b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:71:f4:e9:cb:5d:7a:cf:de:cf:da:5c:d8:
62:ba:74:1a:85:b9:54:54:33:db:e3:d4:1b:1d:1b:
9e:9c:e8:21:07:fa:b3:02:41:58:1c:d6:e0:eb:1f:
75:4d:1b:a1:cf:66:0b:bc:49:ca:cc:39:b6:38:6b:
64:d4:99:e8:cb:3b:14:6d:6f:8e:de:56:29:8d:0a:
0a:d5:03:0f:36:e5:b5:47:51:ae:b7:21:51:3f:e6:
01:91:7f:57:a6:dd:22:de:af:28:ca:9b:16:0f:b3:
0d:f4:83:0a:62:bc:5b:e2:a4:e0:c1:28:21:e1:73:
60:79:4b:ae:1c:d6:fd:17:ec:ef:f9:af:53:28:43:
73:29:5d:dc:c8:b9:57:2c:68:ee:e9:de:09:38:98:
dd:ef:34:50:48:a5:c7:90:d4:3e:05:5d:8a:73:b2:
9c:06:3b:39:9a:d5:14:14:6d:60:4f:f0:2d:f9:36:
04:8f:db:2c:14:01:8a:53:4f:90:93:ca:b9:3b:d6:
51:ab:04:61:b2:2a:13:bb:12:59:75:7b:c3:bf:4b:
d3:d6:cf:bd:3c:d8:b6:57:62:fe:26:74:af:cf:c5:
6a:5e:59:a5:9a:83:12:7b:50:5e:f9:02:a9:9d:0c:
e7:83:17:8e:11:9e:1e:71:df:73:34:3e:e0:10:1b:
a1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:32:DC:E5:5A:94:F4:A4:E4:C5:82:38:C2:86:31:8A:14:DA:4B:51
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/iTLc5VqU9KTkxYI4woYxihTaS1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.2.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3b:26:db:42:fc:21:89:e7:8b:35:1d:93:67:cc:61:2f:e1:
21:e8:46:61:c5:57:78:c4:4a:25:61:5e:c7:27:cd:7e:1c:c6:
5f:05:2d:a6:84:04:3a:bb:29:f4:b9:01:91:36:dd:66:ad:49:
b1:67:97:0c:9a:7a:c5:b2:21:3f:1d:d5:f8:5f:a9:ef:8d:51:
6b:63:22:25:cd:8c:fa:8b:bf:b6:07:68:7c:54:80:96:10:02:
9a:a0:a7:6f:fe:06:00:36:8d:b0:a5:dc:0c:00:53:ef:a8:2e:
cf:da:4f:1d:4b:6b:28:90:e2:02:2c:b7:1b:8b:e9:28:e4:15:
88:b7:5a:28:63:28:c6:b7:0d:10:60:79:13:a4:5a:93:ad:95:
76:a8:1f:70:7a:b1:d9:89:15:94:9b:79:69:cd:b4:85:94:ec:
c1:6b:cf:31:0f:af:96:ba:a7:3b:ab:2d:50:63:61:0b:c9:50:
83:46:83:49:a0:68:d6:94:69:b7:77:da:06:1d:94:6c:38:a8:
11:ff:d7:c1:38:c2:83:8a:39:f8:d1:9c:81:80:06:9d:6b:75:
01:39:cd:f0:29:02:3b:c0:20:b1:d9:70:6d:28:8d:3a:05:73:
c2:eb:93:51:ea:e3:ab:47:73:09:37:5d:c8:97:b6:56:5a:e9:
e0:e4:ac:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:12 2025 by rpki-client