Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/x35tCt2VuSU3zWrLiyRoynYxbLk.roa
File: x35tCt2VuSU3zWrLiyRoynYxbLk.roa (raw, json)
Hash identifier: V2SNcA4n9oHfuv9UIpuq+ACgKb5/BdhczPjf6ZEOnjs=
Subject key identifier: C7:7E:6D:0A:DD:95:B9:25:37:CD:6A:CB:8B:24:68:CA:76:31:6C:B9
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0184CE68B77726723852C79E02F39C381AC7
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/x35tCt2VuSU3zWrLiyRoynYxbLk.roa
Signing time: Thu 01 Dec 2022 15:57:59 +0000
ROA not before: Thu 01 Dec 2022 15:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56681
IP address blocks: 178.254.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:68:b7:77:26:72:38:52:c7:9e:02:f3:9c:38:1a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Dec 1 15:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c77e6d0add95b92537cd6acb8b2468ca76316cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:5e:28:12:b0:08:58:18:c1:04:f3:10:ee:
1d:e0:87:70:ac:3b:21:c9:01:6a:b7:dc:e8:cd:19:
4e:c4:90:73:6f:23:ef:29:ed:e2:e3:25:65:4b:0b:
61:c5:bd:e1:fd:c9:01:b4:55:ed:f9:d9:0d:06:31:
75:cf:dd:a5:a9:a0:34:a0:d4:bb:a4:38:91:6d:a0:
5f:3e:5b:87:8a:c6:f6:87:0f:92:42:da:00:87:42:
59:70:2c:46:1c:d5:27:0e:db:6d:17:a6:43:06:6b:
d4:6d:2a:9d:3d:dc:2f:59:e4:4c:c3:49:10:28:10:
1e:97:0a:ea:d3:be:95:b8:69:ff:34:3a:a4:14:7e:
32:cf:35:20:e5:c9:e4:c8:2f:be:6e:29:b0:52:1e:
cb:8b:af:c0:bf:0d:b9:d5:cc:8a:a2:71:5f:71:19:
a3:13:13:83:f6:dd:b4:83:55:ee:a8:22:b3:70:d5:
1e:f9:7b:c3:ac:2a:80:94:21:3d:2a:f9:62:a5:c2:
51:9b:71:41:cf:99:2e:68:f3:1b:a0:37:fc:59:aa:
29:a9:89:db:9e:4d:3d:0e:b1:49:ac:6c:e5:0a:88:
c3:9f:2a:20:8d:db:c4:f7:95:9e:c7:b2:65:8f:80:
71:60:ef:05:6b:d9:4b:f2:08:a3:47:a8:c2:0e:44:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7E:6D:0A:DD:95:B9:25:37:CD:6A:CB:8B:24:68:CA:76:31:6C:B9
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/x35tCt2VuSU3zWrLiyRoynYxbLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:19:eb:42:15:99:9a:64:e2:41:8d:38:4f:2a:e3:c5:9d:e4:
d1:3e:d7:c1:9f:9f:e1:3d:c8:c1:e2:83:3e:c1:09:43:0f:97:
31:13:7b:91:a0:fb:7b:2b:e6:ed:a9:d5:ab:24:8b:ac:d0:ed:
af:98:a3:a3:25:c2:50:fe:13:97:de:ad:eb:ae:d4:89:83:e2:
0c:2f:42:fb:1c:94:15:91:80:cc:f8:3b:d3:13:c9:6c:60:07:
d7:37:39:9f:54:5f:50:e7:01:62:10:28:88:b2:4e:1c:df:6a:
47:b9:08:86:63:6e:fe:bc:6c:95:e2:b3:03:50:3d:a3:c1:38:
d7:fe:48:fd:0c:e5:f5:95:c5:af:fd:40:b5:85:50:19:d1:a0:
e6:cc:ef:60:8c:6f:88:fd:26:2d:ea:f6:29:a8:ee:7a:f2:32:
48:38:dc:79:9d:5f:7a:f3:21:49:cd:c9:87:c0:5e:3f:c7:06:
15:37:fd:bc:42:1e:e5:b6:12:f1:39:ee:65:e0:2f:81:4b:1a:
85:b7:6e:b3:95:22:16:06:d8:39:c2:94:52:1c:11:b7:fc:b9:
92:10:bd:ec:34:be:98:08:7b:23:b6:05:45:93:9f:dc:28:e1:
51:61:7e:50:28:4f:75:38:c9:c2:e2:80:e3:6d:34:88:6f:0d:
ca:4d:56:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:14:46 2025 by rpki-client