Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/8_dBIudTGnoHiF9vYVZQdDqZDoE.roa
File: 8_dBIudTGnoHiF9vYVZQdDqZDoE.roa (raw, json)
Hash identifier: nUN7fxd4+VxUuT/PBF3SONEUG4CTDCBCteOzgRT3ms4=
Subject key identifier: F3:F7:41:22:E7:53:1A:7A:07:88:5F:6F:61:56:50:74:3A:99:0E:81
Certificate issuer: /CN=1488c18c62f08a4ed8ef83e0aa8d5690b8505368
Certificate serial: 016F7E
Authority key identifier: 14:88:C1:8C:62:F0:8A:4E:D8:EF:83:E0:AA:8D:56:90:B8:50:53:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIjBjGLwik7Y74Pgqo1WkLhQU2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/8_dBIudTGnoHiF9vYVZQdDqZDoE.roa
Signing time: Sun 06 Mar 2022 07:55:05 +0000
ROA not before: Sun 06 Mar 2022 07:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201106
IP address blocks: 176.116.1.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94078 (0x16f7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1488c18c62f08a4ed8ef83e0aa8d5690b8505368
Validity
Not Before: Mar 6 07:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3f74122e7531a7a07885f6f615650743a990e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:55:01:0b:a3:fc:5b:dd:7c:f7:eb:d5:8d:
04:f0:bd:4b:36:17:c3:c7:75:c8:6b:2c:b8:b7:58:
65:01:6d:33:2b:89:69:c1:9d:cc:e8:29:ea:2e:72:
93:d4:2a:ed:ed:fe:86:fb:f0:3b:82:93:6d:0a:31:
66:12:77:41:c9:3d:c9:7d:f5:24:ef:0c:89:9a:23:
ab:f1:47:f2:17:02:18:77:cf:6d:cf:3a:29:24:03:
36:fc:27:42:1d:9d:d9:d7:28:26:b4:70:50:38:59:
98:cf:84:59:66:b4:15:c5:5b:52:0f:1f:64:fc:97:
49:80:89:76:51:02:f6:a5:e1:52:ec:c2:dd:98:e0:
10:26:b2:36:fe:b8:cb:d6:68:c9:7b:0f:9f:1f:4a:
f0:09:ed:41:16:89:1b:cc:c4:31:15:80:c8:9b:84:
ec:95:97:83:46:19:99:c4:f1:49:99:c3:b1:29:0b:
4f:43:44:94:0b:23:d5:54:32:ad:13:0f:2a:bf:9a:
48:78:70:dd:45:0d:73:8c:9e:53:8e:89:65:3b:1c:
55:c9:24:4e:09:13:e6:49:ef:0a:fb:05:9a:4e:64:
d0:5c:e6:ba:da:93:16:1d:0d:3c:6c:f7:98:9b:c5:
f6:b7:11:ef:43:08:b3:c6:09:e9:ec:09:54:d7:93:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F7:41:22:E7:53:1A:7A:07:88:5F:6F:61:56:50:74:3A:99:0E:81
X509v3 Authority Key Identifier:
keyid:14:88:C1:8C:62:F0:8A:4E:D8:EF:83:E0:AA:8D:56:90:B8:50:53:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIjBjGLwik7Y74Pgqo1WkLhQU2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/8_dBIudTGnoHiF9vYVZQdDqZDoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/fd492d-2ca7-4fa2-8ece-9b9324d618db/1/FIjBjGLwik7Y74Pgqo1WkLhQU2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:cb:07:d6:01:c3:ce:13:b2:62:ed:83:04:17:a9:38:60:67:
67:94:e8:bc:8e:e4:27:8a:72:9c:d5:c2:a7:57:f0:8e:ab:00:
16:c2:cb:45:3e:db:2f:07:a0:5a:84:5d:bd:6c:e3:d4:f4:2f:
33:99:bb:c1:37:29:f0:db:a1:67:8b:0c:6d:2c:c4:88:3b:ca:
ca:6f:b7:3f:05:f0:e9:60:5e:5d:a0:72:f1:39:2c:e9:63:21:
1e:59:ae:bd:90:59:e4:cf:60:b3:b5:b5:1e:64:81:c5:0a:6d:
c6:c4:2a:ce:f8:8a:3e:73:13:c8:e4:8f:9a:ec:d9:71:d3:ed:
ec:5f:f7:a1:09:ad:dc:9a:65:93:14:90:2d:b5:61:d8:12:c7:
8c:e4:4c:2e:2f:9d:6c:42:20:f8:b1:4e:73:ac:64:72:36:6c:
5d:67:41:af:1a:2c:37:03:f6:12:77:ca:87:92:d5:ea:b6:87:
eb:b6:78:66:df:ba:10:67:f1:0b:79:8a:cf:15:8e:a5:36:f5:
3a:fa:38:9e:a7:49:aa:bf:4b:e7:97:aa:f8:da:35:81:8c:c2:
03:67:aa:da:00:9d:af:3c:a3:c5:2b:5c:25:0b:be:2a:15:17:
b7:ea:5f:ac:cd:64:51:d8:4a:eb:dd:1a:e5:99:35:21:b7:fc:
bb:f3:cf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:21:27 2025 by rpki-client