Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/vCIsJFXMW5fIme07NsNA6g87pdQ.roa
File: vCIsJFXMW5fIme07NsNA6g87pdQ.roa (raw, json)
Hash identifier: L57Yb+wStbiyBbdvvlmBkGgeQ91E4S6blQZLWIVdGHc=
Subject key identifier: BC:22:2C:24:55:CC:5B:97:C8:99:ED:3B:36:C3:40:EA:0F:3B:A5:D4
Certificate issuer: /CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Certificate serial: 019424458871830B202F8BB7544998F50979
Authority key identifier: 58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/vCIsJFXMW5fIme07NsNA6g87pdQ.roa
Signing time: Wed 01 Jan 2025 23:48:44 +0000
ROA not before: Wed 01 Jan 2025 23:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196881
IP address blocks: 178.21.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:88:71:83:0b:20:2f:8b:b7:54:49:98:f5:09:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc222c2455cc5b97c899ed3b36c340ea0f3ba5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:05:7f:cb:1c:09:6e:27:d5:58:c9:41:7b:
25:de:71:b1:8d:8d:33:3e:59:fa:51:08:15:04:93:
8a:8d:41:83:9f:cf:12:41:f5:78:40:d1:72:47:05:
46:19:12:a9:d8:e8:0c:98:b0:ff:80:37:af:0c:53:
94:b1:17:fd:20:86:6c:53:04:9e:b6:f9:88:14:0f:
4b:8a:9b:66:f1:82:9b:b4:3a:73:ca:cf:53:e9:28:
4c:46:5f:cb:ce:3c:f5:ba:7b:82:cf:8f:4e:14:a1:
92:8f:ac:3f:6d:a8:5f:0b:71:9d:70:0f:5a:98:af:
ca:cc:30:8c:79:31:dd:dc:6e:ab:8e:0c:e6:01:ca:
b7:45:7a:1c:b9:6e:f5:0c:4e:b5:59:87:6c:f7:be:
1c:70:a1:dc:a4:b6:e9:52:b2:3d:6e:88:7e:9c:84:
df:9e:26:53:c6:cd:62:6b:31:d7:c8:5a:c4:d9:09:
8f:4c:92:31:6b:6c:a6:b5:4f:de:09:2f:e0:de:81:
d0:d7:d2:39:ed:54:1b:06:a5:e4:d2:2a:1f:21:cc:
01:ed:54:5b:ef:84:b6:8c:0f:b3:53:9c:7d:01:2b:
d7:88:62:a8:4f:21:c2:1b:03:03:ba:2c:d0:e5:e6:
62:02:11:f1:bd:4c:e1:a4:69:50:02:11:40:a9:84:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:22:2C:24:55:CC:5B:97:C8:99:ED:3B:36:C3:40:EA:0F:3B:A5:D4
X509v3 Authority Key Identifier:
keyid:58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/vCIsJFXMW5fIme07NsNA6g87pdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:19:82:b7:92:59:8a:52:ef:16:84:43:e5:70:6a:df:49:b5:
64:06:a7:8f:fc:ee:1c:c3:03:fb:2d:7b:4b:d6:d7:2d:67:1e:
c8:dd:62:a8:d7:c8:2a:02:9d:15:3e:63:9b:7d:a7:a7:64:96:
0f:73:c0:5c:00:56:a9:c5:61:37:9e:1d:02:9e:72:80:f0:40:
47:a5:69:16:29:f5:cb:55:8f:09:e1:42:95:38:53:97:c7:47:
5a:31:bf:f4:66:a4:30:af:d5:58:b1:2d:fb:b3:b9:b3:3b:49:
8e:91:cb:6a:a6:ef:01:8e:b6:70:4f:56:fe:de:00:8a:91:15:
d9:1a:02:c1:94:2d:4f:e8:cc:2e:fb:0f:c4:48:e0:2a:8e:d4:
af:45:1c:6a:69:e7:11:b1:35:30:e7:d6:09:fb:4d:fe:a0:e0:
95:10:a2:7c:c4:80:99:bf:a4:e1:74:81:82:19:28:01:a6:e1:
2e:4a:6e:ec:92:cf:54:a6:2d:ca:91:77:80:09:99:a4:97:43:
3e:0c:bd:00:05:ce:df:f8:db:eb:b6:2e:5f:4e:28:9a:48:03:
2e:16:82:cd:6b:9e:b0:dc:71:f2:94:4b:84:1f:a4:c2:67:18:
e3:3e:74:e5:40:8f:b5:32:d9:12:71:32:5a:2c:7b:de:7f:40:
05:7d:ff:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net