Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/M3e5EO315_k26WSG1X19V7r0dQg.roa
File: M3e5EO315_k26WSG1X19V7r0dQg.roa (raw, json)
Hash identifier: sjcAY7DJXBBj5RBaFfvM4kHn2nDTXPCPdNuPAg5U8pI=
Subject key identifier: 33:77:B9:10:ED:F5:E7:F9:36:E9:64:86:D5:7D:7D:57:BA:F4:75:08
Certificate issuer: /CN=a91f1e577ca1dbb8e05c0f56a6f678b1ea40d8ce
Certificate serial: 018572834A358AB4F26B6FEB8A2E8A431901
Authority key identifier: A9:1F:1E:57:7C:A1:DB:B8:E0:5C:0F:56:A6:F6:78:B1:EA:40:D8:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR8eV3yh27jgXA9WpvZ4sepA2M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/M3e5EO315_k26WSG1X19V7r0dQg.roa
Signing time: Mon 02 Jan 2023 12:44:44 +0000
ROA not before: Mon 02 Jan 2023 12:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 178.212.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:4a:35:8a:b4:f2:6b:6f:eb:8a:2e:8a:43:19:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91f1e577ca1dbb8e05c0f56a6f678b1ea40d8ce
Validity
Not Before: Jan 2 12:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3377b910edf5e7f936e96486d57d7d57baf47508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:ac:d0:cb:f8:f5:56:4c:5f:4b:b2:6e:3e:
f0:f3:44:0b:20:66:44:bb:d9:e5:07:e4:7b:ef:6c:
79:86:ef:d8:ed:d9:ee:86:8c:ea:dc:b7:80:97:75:
cd:e5:f6:fd:67:11:ce:a0:b0:98:be:35:f7:e8:c0:
80:25:85:d1:cf:af:10:fa:35:a0:ca:d9:4d:1b:db:
f2:3b:cc:66:3a:9e:93:60:e9:a0:05:31:ce:63:26:
fa:82:94:7d:13:c9:73:10:87:19:17:c2:00:bc:dd:
b1:75:78:62:86:0f:e0:c1:27:cc:31:7d:2f:d8:ff:
53:fa:2c:54:db:05:46:e6:03:4c:18:4f:0d:26:66:
c3:c0:a7:e5:c7:cd:c6:f4:39:0f:7d:01:eb:2c:0f:
81:c5:6e:80:b6:d3:e9:16:cd:60:38:77:65:21:b4:
26:3b:68:90:6d:04:3f:74:75:31:ec:a1:48:d7:26:
ad:84:77:99:a1:67:09:c2:42:e9:5d:27:fe:cc:95:
40:61:f6:e8:a5:ca:cb:85:74:b4:8a:90:5a:57:78:
c0:91:57:8e:82:84:48:e4:b0:11:0e:53:36:b9:1c:
0a:fe:ce:66:4e:89:f1:55:42:e1:f8:7e:ad:70:69:
63:70:f1:9a:fc:90:7c:9e:74:0a:d0:c0:1a:14:3b:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:77:B9:10:ED:F5:E7:F9:36:E9:64:86:D5:7D:7D:57:BA:F4:75:08
X509v3 Authority Key Identifier:
keyid:A9:1F:1E:57:7C:A1:DB:B8:E0:5C:0F:56:A6:F6:78:B1:EA:40:D8:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR8eV3yh27jgXA9WpvZ4sepA2M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/M3e5EO315_k26WSG1X19V7r0dQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/qR8eV3yh27jgXA9WpvZ4sepA2M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.224.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:81:28:8b:a1:17:3a:39:a0:f3:b9:af:71:a0:06:c5:78:0e:
fb:49:4f:93:9d:f1:4f:e4:6f:d8:4c:cc:7f:16:48:06:b6:76:
d4:66:2c:88:56:cb:7c:24:46:90:9b:51:83:9d:35:94:df:72:
fb:80:8c:97:83:61:bf:2b:09:64:c5:63:4b:69:41:45:50:a6:
7f:75:da:d8:39:cc:e1:fa:a4:f5:51:60:73:b4:b7:e9:24:07:
c7:a8:35:c9:7f:bf:59:02:22:11:bd:62:9a:c6:df:9e:65:c9:
39:38:15:ed:0b:4f:0a:4b:aa:53:1c:d9:ba:5a:fc:7a:be:99:
e0:ab:ee:69:8b:14:40:49:cb:28:1e:ed:5f:0e:66:92:0b:35:
0b:51:9c:28:20:0f:60:51:81:4e:a6:77:0d:b9:f8:61:8a:80:
35:10:48:f6:a9:4a:51:c5:fb:87:84:d0:35:db:88:57:44:94:
f3:a4:64:10:e6:db:ce:92:85:25:9f:50:8a:94:6d:e1:e5:22:
d0:90:61:01:3d:31:df:1f:84:c2:f9:43:d3:50:ee:9a:d6:88:
72:d2:25:54:be:7b:51:cd:02:48:04:d2:9d:93:e9:f7:cc:9d:
a5:21:16:92:46:27:08:6d:b2:bc:53:c9:36:43:eb:44:cd:07:
cc:c4:8e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:24 2025 by rpki-client