Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/1-2hqQTW3ul_bD8JHqn2arc4SQt4.roa
File: 1-2hqQTW3ul_bD8JHqn2arc4SQt4.roa (raw, json)
Hash identifier: 7Jb+agyXKOWc8cNwhtr84wIX4Xn98h0+c+7K9P4oPMA=
Subject key identifier: FB:68:6A:41:35:B7:BA:5F:DB:0F:C2:47:AA:7D:9A:AD:CE:12:42:DE
Certificate issuer: /CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Certificate serial: 019425FD98E021CE46DDC4AC7B566DE73E4B
Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/1-2hqQTW3ul_bD8JHqn2arc4SQt4.roa
Signing time: Thu 02 Jan 2025 07:49:24 +0000
ROA not before: Thu 02 Jan 2025 07:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59497
IP address blocks: 176.110.102.0/23 maxlen: 23
176.110.102.0/24 maxlen: 24
176.110.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:98:e0:21:ce:46:dd:c4:ac:7b:56:6d:e7:3e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Validity
Not Before: Jan 2 07:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb686a4135b7ba5fdb0fc247aa7d9aadce1242de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:0c:3d:28:7e:56:d2:f9:a8:f8:b1:a8:f0:
b5:9e:16:2b:0b:e5:64:fc:00:0b:94:19:ae:39:39:
86:ab:b4:3f:0c:fc:48:82:73:98:7e:9f:d6:62:b8:
a3:0a:db:60:7c:29:ca:02:4f:96:32:4a:af:c2:7a:
55:a0:0b:91:db:02:ee:69:ec:87:8c:57:30:86:c7:
d8:08:4a:c5:db:46:3c:ff:d4:4e:38:4f:03:68:98:
72:e9:49:04:ae:a8:51:73:09:d0:b3:65:6b:25:97:
34:7d:88:bf:fe:e3:90:72:88:2e:89:5c:a7:2e:d9:
2d:21:a9:dd:9c:c3:a3:04:1d:ea:bd:4d:c5:35:ac:
07:15:44:50:21:50:78:dc:4d:76:cd:cd:12:ef:07:
c8:aa:b9:87:68:95:59:20:88:61:ff:47:6d:01:c4:
44:9f:68:12:13:59:92:5f:8c:fa:d5:36:e9:09:06:
71:cc:41:82:3a:72:4b:b7:b0:5a:c0:77:ba:46:a3:
04:f2:39:45:5d:c4:da:4c:4c:4b:fd:b5:ee:73:f8:
0a:2c:6e:e7:19:83:9a:38:33:b4:40:b8:6b:b4:d8:
94:86:81:6f:2c:16:69:3c:4a:2c:30:ba:e8:62:61:
ee:bc:88:a8:9a:28:22:fc:6f:d6:3d:34:75:ca:3b:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:68:6A:41:35:B7:BA:5F:DB:0F:C2:47:AA:7D:9A:AD:CE:12:42:DE
X509v3 Authority Key Identifier:
keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/1-2hqQTW3ul_bD8JHqn2arc4SQt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.102.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:77:9a:76:4f:b9:82:9d:6f:92:d9:0a:be:7a:08:f5:03:9b:
5a:da:ab:87:db:6d:2f:6d:93:e1:b2:41:ca:0e:28:40:a9:81:
8f:1e:70:ba:0d:3f:9a:1d:06:17:44:a0:44:33:67:a3:06:62:
95:08:bb:ba:e1:18:96:69:f3:25:99:ae:89:58:d8:8e:b7:72:
33:8f:de:b2:7e:78:19:df:0c:6d:b1:b4:5f:0f:06:3b:4b:ac:
03:e1:93:13:c4:33:b2:90:a2:36:fb:a7:12:c2:57:1c:1d:cb:
b7:b2:31:83:b3:96:98:b1:f4:97:88:9c:a5:9e:5d:84:fa:05:
27:e5:d0:7e:b8:52:5d:47:4b:3c:70:83:76:6d:ae:e1:8c:60:
b4:92:8a:37:e9:b2:79:01:d4:68:63:22:9b:1d:55:6e:d1:bc:
27:aa:60:5a:b1:4f:46:40:7b:06:f5:e8:ba:aa:1c:30:63:3a:
3f:fb:71:3b:17:44:c4:8b:d3:f2:18:67:ca:48:a5:28:9f:40:
b8:99:35:c9:2e:32:a4:35:a0:e4:69:08:53:bf:54:d5:d0:90:
45:cc:ee:17:df:31:c9:54:19:57:2c:50:03:c2:61:29:2a:0c:
64:8e:79:5a:0f:78:8c:03:29:9a:8e:99:55:b2:a0:de:1e:39:
74:0e:14:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:34 2025 by rpki-client