Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/BvWe0kyUSo8jGKRBSu0tLzZNwgk.roa
File: BvWe0kyUSo8jGKRBSu0tLzZNwgk.roa (raw, json)
Hash identifier: ydN6nT8NF0igdlpA1m9DZRnkDlnFNcrnzc7ElI7Phpc=
Subject key identifier: 06:F5:9E:D2:4C:94:4A:8F:23:18:A4:41:4A:ED:2D:2F:36:4D:C2:09
Certificate issuer: /CN=82e1aba6e8947f9238abccbeea09ba38a59d6f5c
Certificate serial: 018570302F08DA021495010826AA0EA02E8A
Authority key identifier: 82:E1:AB:A6:E8:94:7F:92:38:AB:CC:BE:EA:09:BA:38:A5:9D:6F:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guGrpuiUf5I4q8y-6gm6OKWdb1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/BvWe0kyUSo8jGKRBSu0tLzZNwgk.roa
Signing time: Mon 02 Jan 2023 01:54:44 +0000
ROA not before: Mon 02 Jan 2023 01:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 178.212.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:2f:08:da:02:14:95:01:08:26:aa:0e:a0:2e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e1aba6e8947f9238abccbeea09ba38a59d6f5c
Validity
Not Before: Jan 2 01:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06f59ed24c944a8f2318a4414aed2d2f364dc209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:4c:aa:68:0c:e4:f4:04:0c:7a:de:60:4d:
cb:66:71:31:88:e8:4c:76:8e:f1:ea:d4:ed:c9:d6:
e1:68:a3:1c:b9:93:7a:b6:6f:4e:bf:60:c4:b7:5f:
83:2d:45:11:28:12:27:29:79:18:0b:d5:12:e4:ed:
b3:b3:6c:bc:8a:35:ad:2a:20:c1:59:61:aa:fd:7d:
87:78:5c:9f:ca:9f:61:49:35:12:e5:5d:3f:55:d8:
6c:66:a7:11:b2:13:6a:8a:02:83:2c:38:dd:a7:5f:
d5:a6:0a:cf:3c:9a:fe:96:66:c1:1d:c5:23:8a:cf:
2b:e4:d3:9f:6e:42:cf:61:78:0e:7f:72:27:3d:ec:
b7:66:54:1a:26:cd:02:c9:2f:6d:93:f2:a2:f8:92:
8f:83:cf:30:2a:d0:31:05:27:62:6e:66:2d:d6:5a:
c8:a9:dd:4b:bb:7e:3f:e5:56:33:65:88:4f:97:e9:
11:9f:a0:b8:ce:27:2b:e0:d9:89:2c:14:3b:5b:59:
c1:7d:9a:f7:ca:da:0f:d0:23:b7:29:c1:39:04:d6:
2f:95:02:79:39:3f:0f:2e:e4:32:0a:45:90:d2:f3:
3b:9d:94:1f:54:f3:61:ba:33:5f:58:d0:e0:4f:ec:
67:ec:50:d3:7c:ab:e3:03:db:9d:b9:20:b8:c7:f9:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F5:9E:D2:4C:94:4A:8F:23:18:A4:41:4A:ED:2D:2F:36:4D:C2:09
X509v3 Authority Key Identifier:
keyid:82:E1:AB:A6:E8:94:7F:92:38:AB:CC:BE:EA:09:BA:38:A5:9D:6F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guGrpuiUf5I4q8y-6gm6OKWdb1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/BvWe0kyUSo8jGKRBSu0tLzZNwgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/guGrpuiUf5I4q8y-6gm6OKWdb1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.141.0/24
Signature Algorithm: sha256WithRSAEncryption
44:33:3f:b0:c1:24:70:70:f9:8c:98:43:d5:2e:01:7a:05:09:
e6:70:29:69:72:fa:4b:4e:ad:aa:21:73:4e:50:42:64:7f:2c:
0c:96:52:f2:87:be:a6:8d:2d:10:da:86:90:6c:8d:8b:3b:8b:
75:c8:e2:73:8d:0a:86:b2:67:db:94:bf:0d:9e:49:b2:91:55:
6c:c6:4a:b1:53:f1:00:5d:98:98:00:db:15:3c:5d:d0:9b:b1:
3c:b8:e6:3b:f6:24:22:ed:de:2e:37:9d:35:ce:74:c2:bd:15:
a9:bd:79:c7:62:a4:9c:6a:ce:29:da:41:da:89:00:e4:c1:cc:
70:30:ff:36:16:0e:81:e8:a6:e1:24:db:91:a4:9c:64:55:2a:
49:05:5e:43:f1:20:69:8c:46:aa:51:58:8c:06:ed:f8:5e:01:
d6:3e:8b:5a:7d:c2:a6:25:ee:f7:bc:c7:22:be:9f:40:a1:9a:
c1:37:7e:db:2e:a6:d8:88:f7:5c:ef:e7:6c:fc:99:44:2e:c3:
f2:67:71:8f:c9:2f:47:55:3e:80:92:43:64:4b:d6:29:9e:1e:
3d:8b:ff:7e:0d:a9:8c:0d:cc:26:2b:a2:d2:bb:36:a8:8e:7c:
05:09:8d:5b:ad:0a:d3:cb:2b:3a:0b:c3:e4:93:c1:f0:99:9f:
53:61:e6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:19:54 2025 by rpki-client