Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/rSbs3UaW_iFtFBYs5rZYxRWKbn4.roa
File: rSbs3UaW_iFtFBYs5rZYxRWKbn4.roa (raw, json)
Hash identifier: m7qglLra9alwSnOPoXx+wqwfcewLv9adZRKsAWNn6Z8=
Subject key identifier: AD:26:EC:DD:46:96:FE:21:6D:14:16:2C:E6:B6:58:C5:15:8A:6E:7E
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0184ADA3E96AC2696E885A26ACF26143C2B9
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/rSbs3UaW_iFtFBYs5rZYxRWKbn4.roa
Signing time: Fri 25 Nov 2022 07:15:11 +0000
ROA not before: Fri 25 Nov 2022 07:15:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 178.254.168.0/24 maxlen: 24
109.111.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ad:a3:e9:6a:c2:69:6e:88:5a:26:ac:f2:61:43:c2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Nov 25 07:15:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad26ecdd4696fe216d14162ce6b658c5158a6e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2e:33:bc:32:33:63:3b:06:78:3c:9a:78:3f:
73:75:34:93:2c:d8:86:e0:f5:d6:9e:c3:88:97:76:
46:cd:24:17:d6:88:b7:c7:d4:64:c4:1d:cb:1d:86:
f8:d2:e5:9c:e0:55:5b:f8:b7:49:d4:cd:b5:94:8a:
2b:79:45:ff:a4:0b:88:5a:f3:b4:11:e2:79:c0:dd:
2f:64:45:d2:22:fe:91:46:39:3e:7d:9c:a0:36:30:
81:c4:bf:05:d1:e7:ea:fd:cd:bc:fd:5d:24:f8:fc:
8e:c4:f4:44:52:14:e5:22:c9:8e:88:c7:10:6e:48:
65:4a:90:f0:6d:90:22:22:a9:55:3f:f6:d2:b6:bf:
4e:66:01:02:15:97:36:81:08:b4:93:29:05:4d:6c:
3b:db:30:f3:70:0d:50:f0:a9:e9:a5:2d:08:4b:72:
bc:eb:e9:46:20:6c:b9:9b:89:32:cb:70:03:07:68:
cb:52:65:fa:5e:57:e7:d1:06:f1:04:dd:f2:91:6c:
b5:c7:29:e3:4d:f8:7f:3c:d7:35:98:24:f5:44:32:
59:81:32:bd:a3:38:7f:3d:7a:ec:a0:40:fd:2d:05:
c1:55:d4:2a:7a:7d:8d:81:79:a8:cf:75:34:dd:e8:
45:12:b6:0f:fa:c6:85:0e:aa:ef:5a:bc:fb:f7:ac:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:26:EC:DD:46:96:FE:21:6D:14:16:2C:E6:B6:58:C5:15:8A:6E:7E
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/rSbs3UaW_iFtFBYs5rZYxRWKbn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.245.0/24
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
49:fe:80:12:c0:d9:e8:01:a5:43:32:04:60:88:de:9e:bc:b8:
7d:fc:44:f4:6e:3c:da:64:b6:13:7e:75:6e:0a:20:e4:43:b7:
93:67:31:46:19:05:2a:d4:57:ac:80:04:fe:e4:1f:b1:d8:36:
0d:6b:12:c1:b0:96:e2:0a:b2:b1:5a:b1:f0:c1:8c:5c:ca:2b:
a5:3b:c4:05:79:bf:2e:3a:89:0b:64:71:04:e3:7f:04:51:d6:
39:8d:a2:2a:45:79:8f:a2:06:da:38:8d:1a:13:8e:49:de:86:
bb:71:7e:a1:2f:49:95:09:c5:c8:5a:74:2e:89:d0:b5:59:da:
46:45:fb:d5:c6:ec:03:21:3e:56:7b:82:97:d6:8a:2b:ca:0f:
10:8f:a5:9b:04:75:5f:f3:3b:c6:cc:57:95:42:4b:1e:2b:49:
3d:8c:81:62:6c:7e:21:db:11:55:40:bd:4f:d0:e5:66:fd:8f:
f0:18:8c:1e:36:b9:b6:51:5f:29:a7:93:da:9b:c4:b8:28:1b:
47:8c:04:88:21:ab:3d:5a:8b:87:e1:8e:78:5c:96:dd:a5:46:
28:59:a8:2d:de:fe:8a:a4:09:10:87:dc:a2:9a:6a:6a:ea:77:
95:ac:3d:9a:9b:bf:22:46:24:4d:05:f4:1b:6d:09:a1:ca:8b:
21:d7:32:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:50:31 2025 by rpki-client