Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Ftp5kj5Q1NLiVC7IqoiP53AnPUc.roa
File: Ftp5kj5Q1NLiVC7IqoiP53AnPUc.roa (raw, json)
Hash identifier: IGlu8ScuEKWKNu2MXf91vfARrSnsAZ5ooN3l2caBNoE=
Subject key identifier: 16:DA:79:92:3E:50:D4:D2:E2:54:2E:C8:AA:88:8F:E7:70:27:3D:47
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 019388BCBC70F0E598DE453CE6852B81AD32
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Ftp5kj5Q1NLiVC7IqoiP53AnPUc.roa
Signing time: Mon 02 Dec 2024 18:58:10 +0000
ROA not before: Mon 02 Dec 2024 18:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199264
IP address blocks: 176.98.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:88:bc:bc:70:f0:e5:98:de:45:3c:e6:85:2b:81:ad:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Dec 2 18:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16da79923e50d4d2e2542ec8aa888fe770273d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:22:bd:4d:10:8c:fa:b6:09:a9:5d:78:6f:
f9:f2:f5:e9:6e:47:3f:a7:fc:c6:b8:51:fe:37:7b:
1e:ec:cf:f9:32:52:56:5d:88:9c:37:13:c8:d5:9c:
59:15:b3:27:a1:30:33:6d:f2:b6:de:0b:e2:46:4b:
1b:62:8e:75:26:c1:87:48:37:64:b9:b0:a2:58:e9:
cd:f0:ca:89:c3:ef:af:cf:9c:30:cb:b4:e3:3e:1e:
67:da:2b:fe:c2:7f:f2:ad:d3:48:83:1b:03:52:14:
2b:dd:7d:91:6f:eb:97:87:79:07:ae:77:e3:d0:ef:
6d:72:df:29:93:0d:7a:26:d8:b4:ab:cf:85:07:d4:
24:fb:aa:ca:be:7b:66:6c:f9:14:68:3e:8e:e5:e5:
a0:8d:85:57:7c:1a:33:26:a7:4d:86:e8:d4:d5:16:
83:3e:ef:2c:1c:39:83:19:ee:d2:10:ff:d0:19:18:
b5:4a:ea:9f:d2:47:de:c3:69:a1:0b:9d:f2:41:98:
2b:af:ef:ea:0f:ac:8d:82:04:ea:82:11:16:94:f1:
cd:bf:f8:ed:98:06:13:98:b1:99:1c:3f:5d:fd:f3:
16:e7:38:25:45:9a:ab:52:1e:25:f3:5e:0e:09:9f:
44:62:2e:ae:37:f0:9a:45:27:77:de:62:08:2c:ba:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DA:79:92:3E:50:D4:D2:E2:54:2E:C8:AA:88:8F:E7:70:27:3D:47
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Ftp5kj5Q1NLiVC7IqoiP53AnPUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.180.0/24
Signature Algorithm: sha256WithRSAEncryption
07:57:78:62:43:a4:6b:91:f7:ba:7d:ac:d0:31:fd:d9:1e:c8:
0b:3d:83:15:19:9c:2f:ed:d5:84:34:11:df:84:73:72:5a:77:
8b:d9:e8:f8:c9:77:32:ef:1c:d6:8e:d8:2e:4d:fd:b2:ec:6b:
e7:2f:7f:f6:17:37:fb:88:fa:2c:da:94:be:d9:27:18:69:19:
fa:9e:8f:a2:3b:79:26:15:ca:09:a7:e4:68:a2:96:a3:d0:f8:
86:94:2e:ea:84:97:64:c2:ae:3d:c4:a2:2f:ad:0b:50:58:fb:
b2:86:84:3b:64:42:c9:ec:46:fd:68:07:33:ba:14:ca:ee:79:
21:6a:b7:67:d4:2f:e3:5a:44:d9:53:91:e2:76:a7:55:13:ea:
c2:b0:c8:17:20:76:9a:e1:c8:58:bd:73:2b:06:52:c8:23:d8:
00:c7:4e:8a:d2:f9:c5:97:fe:2f:ab:fb:f6:ec:9f:0e:9f:ec:
dc:19:0c:42:fa:a5:c9:fa:c8:78:b5:f0:c8:b5:c7:21:e7:a6:
be:10:ea:b4:58:d3:60:ed:4b:4b:ce:22:15:6d:8e:e1:29:db:
cd:a3:f7:43:60:79:b3:84:d5:9b:87:a2:e5:6f:d6:0b:4d:89:
01:e0:1d:f7:f9:54:d7:f4:5f:f9:77:24:e0:1c:47:54:cd:92:
68:ae:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:06:02 2025 by rpki-client