Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/KllhIl43Ief7tzYG6hLGi3OKzmY.roa
File: KllhIl43Ief7tzYG6hLGi3OKzmY.roa (raw, json)
Hash identifier: mhY7xG7gs4uLRAuEjm6H9EFWuCfuJwkDBm8TyeCnyZE=
Subject key identifier: 2A:59:61:22:5E:37:21:E7:FB:B7:36:06:EA:12:C6:8B:73:8A:CE:66
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11DB5051EB97F7F800F0AB7656BB8D
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/KllhIl43Ief7tzYG6hLGi3OKzmY.roa
Signing time: Sun 01 Jan 2023 11:22:44 +0000
ROA not before: Sun 01 Jan 2023 11:22:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207069
IP address blocks: 178.254.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:db:50:51:eb:97:f7:f8:00:f0:ab:76:56:bb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a5961225e3721e7fbb73606ea12c68b738ace66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:bf:68:5c:94:a8:ef:07:36:8b:ed:76:96:
ff:26:ee:18:1d:64:44:8c:6b:f7:40:2b:5f:ef:33:
29:63:f3:61:f1:8d:c4:05:90:bc:92:32:70:ff:6e:
80:bd:f7:53:04:2f:12:31:b8:5a:75:a5:c5:b2:5c:
77:4e:67:06:f0:86:6a:48:ac:f1:67:f7:0d:67:07:
2e:3f:56:3a:7f:d8:57:2f:b8:38:9f:ad:fb:68:0e:
39:1f:49:63:c7:65:12:b6:6e:90:66:e1:e3:9a:27:
68:14:1c:87:bf:71:f8:49:30:47:b1:7f:ed:5b:23:
5e:46:7b:98:87:90:82:9f:61:a7:d5:06:d6:1a:6c:
3d:58:2c:b6:14:e7:de:13:dc:f6:4e:c4:56:58:27:
77:f1:ff:e0:af:d5:94:13:c4:e3:53:45:b7:ba:df:
e4:8c:70:84:37:ce:6f:58:d8:11:ac:4a:0e:8e:6a:
17:7e:d3:8f:f2:3f:cc:a4:a2:2e:3a:80:5d:37:c0:
d7:d5:92:21:de:a3:56:02:f4:2b:53:36:1e:b3:ec:
c1:2c:40:14:ed:50:b0:91:8d:bc:ab:95:d7:85:ca:
ec:1b:71:66:ca:5c:4d:d5:f4:c8:75:ed:b2:a7:75:
51:49:fc:a6:c7:00:7d:f7:f0:2d:e4:d9:c3:2f:36:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:59:61:22:5E:37:21:E7:FB:B7:36:06:EA:12:C6:8B:73:8A:CE:66
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/KllhIl43Ief7tzYG6hLGi3OKzmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.176.0/24
Signature Algorithm: sha256WithRSAEncryption
50:fe:a8:34:0e:5d:ea:6c:a6:65:5f:c5:e5:8f:ac:bf:94:01:
47:1e:9d:4c:bd:a2:eb:65:0e:ae:85:3c:56:51:07:0e:e0:71:
16:a9:a5:88:a8:b5:b9:69:b0:5f:67:33:4c:0e:65:9d:12:ec:
37:ec:30:0f:4e:ca:3f:cb:48:2f:06:34:c6:7e:2a:9f:01:af:
1c:db:80:fb:7c:ae:f1:1f:45:1c:a1:db:f6:10:45:68:e5:d5:
37:7c:08:85:2b:3f:e6:c0:44:37:42:56:83:7b:33:d6:b4:b4:
ef:58:41:58:7a:83:3a:c9:9e:8a:89:3a:b3:9d:bd:05:f5:44:
aa:9e:23:db:1f:49:ec:4f:da:bf:f9:57:79:c4:83:e2:bb:c9:
ff:77:9e:eb:94:d5:fe:ff:88:01:20:d2:19:e8:3e:26:34:a4:
30:59:51:e1:33:79:d4:93:c6:4e:0d:d9:29:6d:10:d6:87:f3:
d2:9d:2d:b9:03:cd:41:05:c0:61:b7:04:11:da:f6:24:09:c4:
ca:d3:d7:8d:96:df:11:06:c5:92:4a:dd:78:06:5e:05:66:85:
b9:b2:53:1f:87:50:72:d5:11:fb:59:c9:e5:00:ed:ec:7d:37:
00:7d:1a:93:36:f3:7f:62:9a:6d:da:ad:00:de:59:ac:a6:91:
ab:e8:e7:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtEdtQUeuX9/gA8Kt2VruNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjMwMTAxMTEyMjQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTU5NjEyMjVlMzcyMWU3ZmJiNzM2MDZlYTEyYzY4YjczOGFjZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz+/aFyUqO8HNovtdpb/Ju4YHWRE
jGv3QCtf7zMpY/Nh8Y3EBZC8kjJw/26AvfdTBC8SMbhadaXFslx3TmcG8IZqSKzx
Z/cNZwcuP1Y6f9hXL7g4n637aA45H0ljx2UStm6QZuHjmidoFByHv3H4STBHsX/t
WyNeRnuYh5CCn2Gn1QbWGmw9WCy2FOfeE9z2TsRWWCd38f/gr9WUE8TjU0W3ut/k
jHCEN85vWNgRrEoOjmoXftOP8j/MpKIuOoBdN8DX1ZIh3qNWAvQrUzYes+zBLEAU
7VCwkY28q5XXhcrsG3FmylxN1fTIde2yp3VRSfymxwB99/At5NnDLzYBZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCpZYSJeNyHn+7c2BuoSxotzis5mMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvS2xsaElsNDNJZWY3dHpZRzZoTEdpM09Lem1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv6wMA0G
CSqGSIb3DQEBCwUAA4IBAQBQ/qg0Dl3qbKZlX8Xlj6y/lAFHHp1MvaLrZQ6uhTxW
UQcO4HEWqaWIqLW5abBfZzNMDmWdEuw37DAPTso/y0gvBjTGfiqfAa8c24D7fK7x
H0Ucodv2EEVo5dU3fAiFKz/mwEQ3QlaDezPWtLTvWEFYeoM6yZ6KiTqznb0F9USq
niPbH0nsT9q/+Vd5xIPiu8n/d57rlNX+/4gBINIZ6D4mNKQwWVHhM3nUk8ZODdkp
bRDWh/PSnS25A81BBcBhtwQR2vYkCcTK09eNlt8RBsWSSt14Bl4FZoW5slMfh1By
1RH7WcnlAO3sfTcAfRqTNvN/Yppt2q0A3lmsppGr6Ofg
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:24:38 2025 by rpki-client