Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/penJA0gBXmXMKjwk3p9AAkDjZWU.roa
File: penJA0gBXmXMKjwk3p9AAkDjZWU.roa (raw, json)
Hash identifier: 2mvu4cGuzcqPuavXBmfmgEU+PihFseaJ4dHFJpIUef0=
Subject key identifier: A5:E9:C9:03:48:01:5E:65:CC:2A:3C:24:DE:9F:40:02:40:E3:65:65
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11DA68DB649549E71B2793E77A3A89
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/penJA0gBXmXMKjwk3p9AAkDjZWU.roa
Signing time: Sun 01 Jan 2023 11:22:44 +0000
ROA not before: Sun 01 Jan 2023 11:22:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202749
IP address blocks: 178.254.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:da:68:db:64:95:49:e7:1b:27:93:e7:7a:3a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5e9c90348015e65cc2a3c24de9f400240e36565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:81:05:a8:56:fa:d3:82:df:76:6d:71:90:0b:
4e:39:8f:f2:2e:e3:c8:1d:b1:71:2a:b2:0f:8a:a2:
9d:f0:40:f1:9e:c3:fd:cf:4f:62:30:3a:d2:7f:1e:
7a:d3:5f:9b:e8:08:6f:c6:02:f9:71:e2:48:cb:8d:
44:d5:ac:9b:e9:60:92:47:47:80:a2:44:88:1f:88:
4e:c7:b0:c1:d8:81:24:1d:f9:ed:f8:6b:8a:09:da:
5c:4b:1b:e4:1c:ff:db:dc:60:3c:14:bf:b0:1e:47:
47:02:a0:3c:b1:cf:11:b8:ef:38:9b:c2:56:1a:a2:
0e:12:4a:f8:17:1d:90:14:e0:40:66:c8:91:01:43:
60:f5:76:e0:12:8d:49:22:dc:6a:5e:f4:d0:93:93:
02:67:f6:57:7f:93:23:01:9c:38:a3:41:1b:8b:11:
1b:5f:54:3b:a7:3f:ea:14:07:74:0d:33:70:40:d0:
88:8b:eb:5e:c0:24:4a:f1:79:13:74:1e:ca:6f:0f:
27:82:6b:70:bb:94:9e:cb:21:93:43:b1:f3:e0:a6:
58:2f:2b:0a:62:d3:25:8e:6e:f5:30:d8:55:bf:c9:
7a:a7:9e:94:42:66:f9:83:1e:79:f2:af:1c:62:c1:
29:cb:65:1f:50:3c:d2:07:05:64:f2:61:b9:61:b7:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E9:C9:03:48:01:5E:65:CC:2A:3C:24:DE:9F:40:02:40:E3:65:65
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/penJA0gBXmXMKjwk3p9AAkDjZWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.147.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f5:93:99:a0:b7:90:10:da:3f:1a:47:ba:b5:30:47:1d:58:
00:b1:d3:56:aa:ae:70:c6:d1:0f:c4:ab:77:92:6d:e5:95:12:
ae:30:f9:8e:c0:8c:37:8d:00:ba:66:02:60:83:8e:e5:68:a4:
fd:21:73:71:de:8a:f6:44:4e:ca:06:c6:67:b7:12:2c:26:af:
8d:e6:64:a5:b6:81:9d:ec:b7:86:28:ab:c5:5f:c8:45:60:02:
64:a7:eb:38:85:58:ac:48:b9:6e:8d:0b:ba:9a:26:aa:fa:1c:
11:47:54:f9:39:55:d8:9f:0d:c3:d7:3d:8f:bf:d1:59:98:22:
e3:9b:84:26:79:a3:0b:e5:45:31:00:43:20:23:52:d9:58:d6:
6c:a3:74:e5:82:2f:9f:96:69:d7:8d:b7:16:9d:a6:3b:db:47:
b9:28:81:a9:0d:97:e4:15:2a:40:be:ee:28:f7:62:b9:8b:d7:
28:65:7d:07:7f:7e:eb:65:c7:4c:42:b7:0b:d6:78:8c:df:61:
c1:0b:3b:c7:9b:02:e3:cb:10:c8:24:26:fe:04:26:ab:31:13:
b8:43:1f:79:1c:11:85:03:a6:10:8c:82:04:95:87:20:8e:a9:
33:c4:2f:39:87:7a:55:76:c7:d7:93:e1:32:1a:16:ff:76:8f:
1e:cd:4d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:57:01 2025 by rpki-client