Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/O3bnjDPRR3LrGEnM4sKqgBKSZIg.roa
File: O3bnjDPRR3LrGEnM4sKqgBKSZIg.roa (raw, json)
Hash identifier: rlXDUrdTVRzlXfFa/VppQ/JwyMwu/FNANchTVmv+fxM=
Subject key identifier: 3B:76:E7:8C:33:D1:47:72:EB:18:49:CC:E2:C2:AA:80:12:92:64:88
Certificate issuer: /CN=e57168772df74c27999d533895e1abedce97263c
Certificate serial: 0195B37A4598FFA6C1DD90D9D0F0B3DEE889
Authority key identifier: E5:71:68:77:2D:F7:4C:27:99:9D:53:38:95:E1:AB:ED:CE:97:26:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/O3bnjDPRR3LrGEnM4sKqgBKSZIg.roa
Signing time: Thu 20 Mar 2025 12:14:49 +0000
ROA not before: Thu 20 Mar 2025 12:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216461
IP address blocks: 178.210.228.0/22 maxlen: 22
178.210.228.0/24 maxlen: 24
178.210.229.0/24 maxlen: 24
178.210.230.0/24 maxlen: 24
178.210.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:7a:45:98:ff:a6:c1:dd:90:d9:d0:f0:b3:de:e8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57168772df74c27999d533895e1abedce97263c
Validity
Not Before: Mar 20 12:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b76e78c33d14772eb1849cce2c2aa8012926488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:d9:17:32:b5:41:61:47:55:ab:5d:50:b9:
bd:78:04:2c:96:8a:5f:81:91:00:63:70:50:90:61:
3c:36:10:8b:4f:0c:a1:70:87:ba:97:99:45:f3:f7:
ce:d2:bf:86:0f:54:43:84:da:3c:49:51:2f:0b:b1:
92:24:a6:54:a3:6c:30:56:f1:7a:bf:c9:20:8d:9d:
87:fd:69:30:9c:f7:46:c6:6b:68:49:48:ff:d8:d7:
d2:13:03:d5:0f:1a:d1:77:3b:38:17:c5:40:53:16:
79:39:2f:4a:5f:9d:a2:0d:59:dd:cc:b6:e2:bc:e3:
d2:ba:12:3b:3e:c0:86:93:e1:3a:d2:60:7b:ec:b6:
02:6d:44:e5:75:2c:a9:66:34:16:22:71:6a:a6:58:
54:80:37:29:ea:7e:be:a9:d3:6d:58:0e:2c:36:c1:
0c:ba:3c:1b:22:3f:27:41:76:94:fb:38:61:8a:94:
84:a4:11:62:0f:2b:ac:66:28:6a:84:ff:06:08:a7:
3e:25:78:c5:cc:72:6d:a7:8b:dd:84:aa:99:18:be:
e6:fe:7d:1f:51:aa:c5:6a:48:2e:02:a2:ac:d1:46:
42:91:80:a3:55:95:0c:40:cd:93:d3:8a:bc:3d:b4:
4f:e1:f2:c8:ef:d0:33:c0:96:70:49:da:4b:7f:40:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:76:E7:8C:33:D1:47:72:EB:18:49:CC:E2:C2:AA:80:12:92:64:88
X509v3 Authority Key Identifier:
keyid:E5:71:68:77:2D:F7:4C:27:99:9D:53:38:95:E1:AB:ED:CE:97:26:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/O3bnjDPRR3LrGEnM4sKqgBKSZIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.228.0/22
Signature Algorithm: sha256WithRSAEncryption
91:ea:e6:68:2d:11:45:9b:da:80:21:c9:df:49:ab:59:4d:ed:
3f:5f:70:a3:44:9c:8a:02:e7:73:54:de:6f:bb:2b:f3:9d:85:
b8:0f:33:05:88:24:d8:05:7f:ff:30:58:5b:c3:2c:0c:3e:4c:
9c:cb:02:d1:d7:4e:fa:fe:a9:9d:85:28:61:08:8d:1d:48:89:
da:71:7a:eb:1d:f0:bf:cd:57:8c:e9:3f:f0:74:6c:98:24:40:
86:c1:47:f3:6f:59:99:dd:55:1b:0d:29:e0:f9:51:df:a9:6c:
49:7e:80:0e:5b:1d:be:55:0b:82:e0:90:05:ab:f2:59:15:97:
2a:3a:00:42:ac:b9:31:6a:45:1f:8c:94:d8:1d:bb:94:bd:ff:
a3:83:93:ad:65:e5:83:46:3d:8c:7d:0f:5f:e9:53:e1:26:d4:
b0:b7:2f:d0:5a:e3:d8:29:2b:a9:67:ca:9d:f9:e8:e7:8d:4d:
22:f5:76:d4:e5:79:96:f5:cf:8d:a6:e9:5f:76:89:62:5e:6e:
c0:52:18:de:3f:e3:90:82:b1:c3:13:5f:ac:a4:aa:51:94:7a:
8a:6b:3f:e1:b5:b2:7a:9f:bf:d3:37:bf:65:eb:2a:3d:17:cd:
95:e2:32:85:f1:ce:83:7d:c8:4c:9b:89:b9:97:9d:1b:7e:fa:
0b:b4:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net