Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/967af2-6b14-4e9b-9c1c-65e51fc339c1/1/1M05ouf7RqIVfeA_CMNxaGIWkLw.roa
File: 1M05ouf7RqIVfeA_CMNxaGIWkLw.roa (raw, json)
Hash identifier: L8CK7vaIeZa1DWts7o1ENC5SCP0F/HFhN/s2G+w5Uu8=
Subject key identifier: D4:CD:39:A2:E7:FB:46:A2:15:7D:E0:3F:08:C3:71:68:62:16:90:BC
Certificate issuer: /CN=5d43adf35b026fcf530d4eedeaf03af5e80b2e50
Certificate serial: 0185F9CDBB2A3B55459945112E278B68192F
Authority key identifier: 5D:43:AD:F3:5B:02:6F:CF:53:0D:4E:ED:EA:F0:3A:F5:E8:0B:2E:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUOt81sCb89TDU7t6vA69egLLlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/967af2-6b14-4e9b-9c1c-65e51fc339c1/1/1M05ouf7RqIVfeA_CMNxaGIWkLw.roa
Signing time: Sat 28 Jan 2023 19:14:47 +0000
ROA not before: Sat 28 Jan 2023 19:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57271
IP address blocks: 176.53.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f9:cd:bb:2a:3b:55:45:99:45:11:2e:27:8b:68:19:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d43adf35b026fcf530d4eedeaf03af5e80b2e50
Validity
Not Before: Jan 28 19:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4cd39a2e7fb46a2157de03f08c37168621690bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:75:4f:03:b8:93:f1:87:45:ac:bd:4e:db:
6f:75:1f:6f:d9:b4:ab:62:4c:27:3e:54:88:22:1e:
ad:09:98:d6:22:13:63:06:59:7e:42:c6:da:25:c9:
a6:61:f1:c2:ad:1f:cc:6d:81:ba:0f:9f:cd:50:8f:
0e:70:8e:ab:0d:75:ea:7d:43:b2:71:9b:c0:97:b3:
af:4a:03:08:bc:c6:ea:01:08:de:17:f3:d5:bb:74:
5b:6b:10:8d:7c:fe:9c:e5:52:e4:95:85:de:7b:60:
81:b1:27:69:58:dd:89:f8:8b:1f:8c:37:b4:ff:43:
97:71:3e:bc:fc:50:d0:27:3c:3b:68:23:cb:81:8d:
65:b3:f1:24:99:47:30:4d:42:d5:81:d2:4c:aa:10:
74:76:2f:78:41:55:ac:a8:cb:ae:bf:59:38:14:28:
7e:8d:37:2b:90:56:76:1c:2d:d5:37:d6:51:b4:b7:
70:74:e8:ef:b0:98:fc:a4:99:30:a3:b6:0e:36:0d:
de:55:ca:c6:24:28:a3:33:48:77:6d:e4:af:02:c3:
24:04:f8:d4:df:15:72:20:f3:df:ef:2a:b2:8c:1f:
8f:6b:c0:8a:c0:06:2a:36:ab:fa:83:29:44:fa:6d:
5d:81:95:2b:1c:49:6a:de:e2:f7:53:8e:4f:25:d7:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CD:39:A2:E7:FB:46:A2:15:7D:E0:3F:08:C3:71:68:62:16:90:BC
X509v3 Authority Key Identifier:
keyid:5D:43:AD:F3:5B:02:6F:CF:53:0D:4E:ED:EA:F0:3A:F5:E8:0B:2E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUOt81sCb89TDU7t6vA69egLLlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/967af2-6b14-4e9b-9c1c-65e51fc339c1/1/1M05ouf7RqIVfeA_CMNxaGIWkLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/967af2-6b14-4e9b-9c1c-65e51fc339c1/1/XUOt81sCb89TDU7t6vA69egLLlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.144.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:3d:1e:dc:bf:8e:25:65:27:80:24:44:4e:24:4f:39:a5:81:
bd:f0:82:6e:05:8c:1f:ae:f6:f3:56:c3:38:1f:3a:7e:51:2a:
ad:eb:db:65:3c:9d:a5:c1:95:81:da:ee:0a:61:21:9f:b9:e1:
d9:bf:5b:bc:48:6f:e9:cd:b8:48:6f:74:72:99:d6:cd:b0:a0:
fe:48:5c:7f:a0:13:97:a2:8b:48:85:1e:f5:94:3b:33:6c:6f:
39:5a:b8:44:51:b2:51:fa:68:95:fa:60:cd:8f:5d:b1:7d:17:
6c:d1:79:b9:d6:14:e9:bc:8c:39:61:07:eb:0c:8b:6e:c5:e5:
a3:b0:02:14:1b:81:b7:ab:f3:52:a9:bd:9d:8e:8a:5d:5b:53:
eb:d1:be:07:83:eb:8e:e0:57:3d:94:95:95:1d:60:96:86:73:
76:30:2e:d7:b3:96:d3:e1:c9:d0:63:1d:e5:d0:b2:84:47:3b:
0f:ea:56:d1:bb:df:ec:c5:14:7a:ae:46:67:02:22:7a:1a:91:
37:c2:c6:84:ea:f7:09:94:49:e8:6b:3d:1f:ac:5c:8f:d0:43:
b5:56:00:93:f9:6d:eb:40:6b:cb:85:0b:59:fd:ad:cb:d8:03:
6a:67:91:1c:3e:26:12:6a:cc:be:58:e2:36:09:cb:ce:42:91:
8e:14:80:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:06 2025 by rpki-client