Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/PDIQfwBM2G7ffsnUH2YvcCfE3MM.roa
File: PDIQfwBM2G7ffsnUH2YvcCfE3MM.roa (raw, json)
Hash identifier: sG/brPxpBzyg1NKJzaV3PK0r4VawovV+khB+BUBPlqs=
Subject key identifier: 3C:32:10:7F:00:4C:D8:6E:DF:7E:C9:D4:1F:66:2F:70:27:C4:DC:C3
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01942369FC3C6978D9E02DABA19FEE9A4FE8
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/PDIQfwBM2G7ffsnUH2YvcCfE3MM.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201826
IP address blocks: 176.98.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fc:3c:69:78:d9:e0:2d:ab:a1:9f:ee:9a:4f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c32107f004cd86edf7ec9d41f662f7027c4dcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:e1:8f:6c:73:88:f1:b9:a9:40:59:4e:aa:
e4:84:1b:7d:42:39:59:c9:b7:e7:e7:22:3c:82:48:
cd:6b:6a:23:a8:cb:09:c4:d8:08:20:23:95:e8:59:
43:5c:18:0f:77:3e:b7:c5:d4:63:35:11:cb:06:80:
9b:1f:50:f6:c1:33:0e:23:cb:2a:55:62:60:ab:fc:
12:73:a0:f4:9e:32:e2:44:b2:9b:c6:e2:07:3b:3c:
9b:61:86:6e:a7:91:ff:f1:90:49:03:65:2c:d8:c6:
7e:95:b5:00:49:b3:ed:d5:74:7c:b1:42:96:48:27:
62:88:78:71:58:29:dd:41:3c:63:4b:3d:e7:7e:40:
6c:cf:ff:8a:00:6c:60:2d:7e:92:dc:ba:4a:ee:01:
03:76:82:d4:42:28:d9:54:2b:dc:9d:b8:54:44:22:
5a:bb:c2:8b:8d:04:84:30:6c:f5:5d:58:2a:7b:51:
01:85:d3:e8:84:de:c8:95:60:f5:2c:2f:9d:f5:69:
cd:d6:42:0b:ad:5e:b1:e6:ae:8a:07:e4:3a:f1:c2:
f9:36:9c:47:b2:31:17:7d:42:32:55:f8:5b:c6:7d:
54:3d:46:3f:b5:90:0d:01:bb:f1:8e:c5:e7:95:67:
44:0a:8c:0f:48:6e:1e:58:a8:c3:22:4e:4e:c7:b1:
ff:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:32:10:7F:00:4C:D8:6E:DF:7E:C9:D4:1F:66:2F:70:27:C4:DC:C3
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/PDIQfwBM2G7ffsnUH2YvcCfE3MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.184.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d4:c3:96:c6:71:99:d6:a8:84:91:21:47:b3:91:f8:2c:6e:
aa:85:9d:82:08:a3:c6:e4:e1:99:51:d3:e8:ad:da:39:2a:ea:
4e:e0:7b:ac:41:fd:14:8e:6a:7b:1a:24:e5:5c:61:f0:33:0c:
66:4b:5c:c9:ee:bd:44:55:19:85:7d:1f:62:00:32:43:50:e2:
3b:94:20:9c:89:3f:43:66:41:49:6a:89:81:20:1e:af:57:7a:
35:78:c2:26:6d:f7:15:9e:ae:15:31:ce:21:76:49:7c:ff:09:
f8:83:f5:c8:dc:2b:91:74:36:0c:0b:f8:4c:3f:a7:15:cd:62:
53:1d:02:12:a1:24:fe:06:38:5b:67:38:6f:57:f0:26:0d:59:
c7:ef:d5:34:b0:0f:cc:b5:e3:09:7a:25:70:72:37:64:4c:22:
63:41:c9:43:99:6a:92:e1:c6:a5:52:5e:09:6f:e1:34:71:0d:
53:2b:5a:78:fd:4a:3c:ea:50:8d:68:d1:7f:df:3b:1d:37:51:
96:43:5f:b5:d3:c3:7d:17:ee:50:0f:2f:00:27:d0:4e:0e:f6:
7b:46:f8:96:1f:51:27:f7:46:ca:bd:a8:33:eb:3e:07:25:84:
b7:57:04:f8:38:af:45:4c:7b:21:a2:85:61:9c:86:e9:a8:01:
15:6e:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:59:46 2025 by rpki-client