Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/L4yOlESI8fdR9WjrNj0pt8bvOiM.roa
File: L4yOlESI8fdR9WjrNj0pt8bvOiM.roa (raw, json)
Hash identifier: PjGLNOQOqdRe8JNO68TKc2teWeNxY1n93CJQ5L6+wdo=
Subject key identifier: 2F:8C:8E:94:44:88:F1:F7:51:F5:68:EB:36:3D:29:B7:C6:EF:3A:23
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019423D6A5604514F2AAC14B12943AC8489A
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/L4yOlESI8fdR9WjrNj0pt8bvOiM.roa
Signing time: Wed 01 Jan 2025 21:47:37 +0000
ROA not before: Wed 01 Jan 2025 21:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205499
IP address blocks: 178.251.16.0/22 maxlen: 22
178.251.16.0/24 maxlen: 24
178.251.17.0/24 maxlen: 24
178.251.18.0/24 maxlen: 24
178.251.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a5:60:45:14:f2:aa:c1:4b:12:94:3a:c8:48:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jan 1 21:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f8c8e944488f1f751f568eb363d29b7c6ef3a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:90:3c:53:af:bf:43:15:12:4c:86:f1:f2:
66:cd:3a:77:91:fc:6d:d9:8e:2a:2a:e7:41:07:bb:
2c:ed:87:17:24:9d:f9:c9:b0:7f:c7:85:65:c0:75:
ce:b7:8e:0b:43:7f:9b:da:27:ba:65:f9:d3:61:8f:
4c:2f:d0:fa:f0:51:d9:a8:8e:c4:51:ea:41:d6:bc:
01:3e:18:c1:13:f5:78:e7:75:90:96:43:5e:7e:ef:
2d:f5:47:70:ea:03:06:a8:95:1d:66:2b:50:5c:9f:
22:ec:5d:73:fe:04:18:ce:d0:6f:f8:1d:34:c4:6a:
5c:15:a4:79:eb:0a:05:aa:91:6d:06:43:6b:91:0f:
0b:1f:31:a9:cb:e2:7d:ca:2e:c0:b0:f9:2c:de:69:
77:94:0c:88:0d:da:5d:e1:7e:7f:18:db:6b:11:11:
25:6c:be:e2:72:eb:4f:15:28:67:52:5c:34:bb:55:
f8:eb:0b:c8:aa:09:e1:75:a9:7f:67:d3:f8:bd:74:
77:80:a3:79:1f:6a:70:8a:74:5c:3b:6a:fc:fc:1d:
08:f6:5d:b8:99:30:a4:65:3f:c0:04:8f:dd:95:36:
0d:3b:a2:d0:65:31:aa:06:a3:2f:c0:3a:f5:9f:76:
e6:ab:47:1b:7d:1f:24:e2:c2:0b:56:79:02:15:07:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8C:8E:94:44:88:F1:F7:51:F5:68:EB:36:3D:29:B7:C6:EF:3A:23
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/L4yOlESI8fdR9WjrNj0pt8bvOiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:08:79:9b:a6:84:32:d7:75:ae:b7:14:6c:98:77:f8:4e:b1:
ee:b3:2d:b4:10:48:3d:46:0d:d6:a9:f7:09:65:32:3e:47:7d:
64:6d:47:8e:c2:14:85:65:ee:8a:81:34:55:88:0d:ee:d6:99:
e8:d3:b5:bb:00:9e:00:a3:c9:2c:4d:5c:6c:55:2f:e2:fd:9a:
df:c1:3b:b1:d2:51:51:1c:77:4f:72:6d:41:86:a7:c4:83:7f:
1e:7c:71:d9:02:8b:2a:0c:0f:5a:0f:d4:a1:92:52:f8:14:b5:
de:77:b3:06:91:5e:e7:c3:a0:1a:3b:ca:57:ea:07:5c:31:65:
f0:0d:5c:f1:b4:05:61:6b:d7:6c:47:2a:43:f7:80:e6:c5:14:
bd:7d:e7:98:e4:9b:86:38:93:96:33:a4:04:d7:9c:b6:27:ef:
d3:17:c8:25:64:03:59:c4:56:b9:a3:7f:2a:1d:2d:b6:27:a5:
36:82:c0:b9:1b:78:95:28:8d:3e:88:ad:74:43:ed:8b:a6:35:
22:27:a5:a6:18:a6:11:7a:94:66:c1:79:2a:91:35:5b:2e:69:
18:fe:a4:1d:a7:45:da:7f:51:e8:7d:66:6b:7f:b9:bd:bb:87:
d7:b9:ff:6d:c8:94:40:ed:da:31:5d:a9:4b:d6:ec:b2:ba:e7:
e3:73:49:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net