Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/u0kiBRm7lPy40aL5Utg1OzaItA4.roa
File: u0kiBRm7lPy40aL5Utg1OzaItA4.roa (raw, json)
Hash identifier: dKGxS0Em7PGdI3BmuuAWqogEozKj12mYiRlt25Q1BKw=
Subject key identifier: BB:49:22:05:19:BB:94:FC:B8:D1:A2:F9:52:D8:35:3B:36:88:B4:0E
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01942369FB101A6066342AC5FCFD38023C42
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/u0kiBRm7lPy40aL5Utg1OzaItA4.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142113
IP address blocks: 176.98.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fb:10:1a:60:66:34:2a:c5:fc:fd:38:02:3c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb49220519bb94fcb8d1a2f952d8353b3688b40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:7c:4a:37:71:92:35:46:c5:89:31:97:55:
f6:4b:19:d9:eb:5a:f9:6e:3f:c2:8c:8d:d7:0b:3c:
9a:59:27:6e:ad:50:31:84:3c:cd:08:66:50:28:5f:
9c:52:ad:12:9b:8f:b5:44:cf:b3:f6:9b:bf:b2:f1:
19:97:ef:4e:26:7b:63:cb:27:6d:b9:83:0e:93:84:
ce:0e:6f:ba:66:97:ca:f6:18:8a:75:77:f2:e1:93:
64:08:b0:b5:4a:3b:d3:3e:e2:6e:40:c2:e1:10:b3:
1d:db:2e:2a:21:8d:d9:1f:f6:3e:79:60:03:8c:83:
69:71:59:c8:bf:ce:d0:69:fd:5e:c1:86:8b:4c:f7:
c1:2a:9a:6a:90:da:35:7f:43:24:63:be:77:04:c9:
c6:ae:83:d0:db:fd:28:59:e3:82:ce:bb:87:45:9f:
8f:46:7b:91:9e:f1:09:19:2c:e7:7b:0b:7d:ee:41:
9b:10:a7:a9:37:c1:da:e7:62:b2:92:ce:9c:b1:45:
c0:1e:2c:b3:00:41:8d:bd:9d:68:85:04:7e:14:1c:
59:f3:14:20:80:be:3c:5f:de:89:af:b0:c2:7a:dc:
22:3a:b0:e0:81:7a:ba:9a:a6:33:6b:6e:b8:35:51:
9a:6e:65:2f:f5:0c:a2:c1:61:35:1d:27:6f:42:34:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:49:22:05:19:BB:94:FC:B8:D1:A2:F9:52:D8:35:3B:36:88:B4:0E
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/u0kiBRm7lPy40aL5Utg1OzaItA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.181.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3b:4c:49:e8:b8:92:f7:ad:d0:b3:36:db:65:f2:36:e5:11:
75:e5:cd:9c:fc:92:1a:68:48:8d:bf:92:3b:63:94:98:89:9b:
c6:5b:99:3e:9d:99:6e:18:57:26:70:5c:00:48:88:02:f2:8d:
80:77:e9:c7:53:1b:df:9f:da:f2:9c:32:26:ab:fd:5b:e5:a1:
e0:89:a4:e7:68:cd:91:3d:c0:2d:90:02:20:60:84:39:bb:64:
44:fe:16:dd:3f:6e:4b:d4:fd:13:2c:ff:af:77:82:16:32:e8:
5c:4c:0e:3a:8d:95:65:01:bc:6e:85:13:de:3e:08:eb:56:47:
0b:ca:c0:3d:be:5a:51:25:63:bd:47:d6:9b:3f:81:0a:c9:99:
09:40:e6:99:1e:3c:c0:07:b0:b2:85:bc:51:9c:34:ac:da:3d:
1f:4f:73:79:d7:ae:26:41:5f:b5:14:ec:58:7c:ad:dc:35:0f:
57:42:b6:f2:62:94:5b:ea:f1:16:c6:d9:c8:ed:bd:17:06:25:
66:fb:84:8a:7b:8d:b9:90:08:6b:fd:e4:81:a5:35:d1:55:3d:
b6:e1:9f:56:94:83:e1:71:3b:e1:18:45:a1:30:c1:e5:6a:9c:
d6:93:2d:f0:22:d9:7f:56:76:4b:ae:08:da:d6:11:89:77:9b:
37:ec:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:16 2025 by rpki-client