Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/dp6ZCuRIqo4YLa9gbgLjmyAheBM.roa
File: dp6ZCuRIqo4YLa9gbgLjmyAheBM.roa (raw, json)
Hash identifier: yf/5qE0uY00EXj7opiLq6SkYzRlB8nAZTXaYic2R17w=
Subject key identifier: 76:9E:99:0A:E4:48:AA:8E:18:2D:AF:60:6E:02:E3:9B:20:21:78:13
Certificate issuer: /CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Certificate serial: 0194258F42056FBC1AA09133A958F9F468DA
Authority key identifier: 2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/dp6ZCuRIqo4YLa9gbgLjmyAheBM.roa
Signing time: Thu 02 Jan 2025 05:48:53 +0000
ROA not before: Thu 02 Jan 2025 05:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57760
IP address blocks: 176.107.16.0/24 maxlen: 24
176.107.17.0/24 maxlen: 24
176.107.18.0/24 maxlen: 24
176.107.19.0/24 maxlen: 24
176.107.20.0/24 maxlen: 24
176.107.21.0/24 maxlen: 24
176.107.22.0/24 maxlen: 24
176.107.23.0/24 maxlen: 24
176.107.24.0/24 maxlen: 24
176.107.26.0/24 maxlen: 24
176.107.27.0/24 maxlen: 24
176.107.30.0/24 maxlen: 24
176.107.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:42:05:6f:bc:1a:a0:91:33:a9:58:f9:f4:68:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Validity
Not Before: Jan 2 05:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=769e990ae448aa8e182daf606e02e39b20217813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:05:80:70:0c:33:54:c1:dc:80:59:2f:c8:
cb:85:07:53:ba:b6:8e:b2:08:68:44:39:b1:50:f9:
22:d3:68:c4:95:50:4a:ee:a4:b3:28:fb:b9:77:fd:
82:ab:44:85:a3:34:5d:91:0c:f2:c8:2e:89:01:f9:
aa:4d:42:77:f7:a9:66:b3:90:96:aa:e5:d5:ef:ec:
02:0e:79:b3:5a:14:a8:9f:9e:03:82:6d:6e:b2:af:
25:fd:ed:56:a1:2e:61:17:46:da:3c:69:06:9b:85:
47:fe:74:4a:dd:e7:3c:34:b9:68:9f:36:8b:da:16:
cf:de:c8:1d:75:de:21:bd:81:ab:37:bb:5a:5c:d6:
2e:a9:38:6c:1d:f0:9a:43:2c:f0:5c:95:c5:69:42:
3c:f6:23:77:34:9c:28:64:18:80:a2:95:3b:e3:2b:
79:98:27:d0:e9:d2:4e:86:9c:3c:bd:88:58:c3:b2:
a2:7f:8f:ae:ba:09:b8:e6:0e:14:50:ce:c3:fd:a6:
e1:d5:4e:6f:fb:ab:07:69:bf:a0:90:de:c7:38:47:
22:27:f8:03:8b:f1:73:a9:54:75:ac:e9:01:02:c4:
3d:57:43:b4:10:c0:f2:e0:e3:71:12:40:c6:eb:17:
a1:a2:6f:64:77:31:a0:c3:f8:04:00:7b:3e:9c:68:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9E:99:0A:E4:48:AA:8E:18:2D:AF:60:6E:02:E3:9B:20:21:78:13
X509v3 Authority Key Identifier:
keyid:2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/dp6ZCuRIqo4YLa9gbgLjmyAheBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.107.16.0-176.107.24.255
176.107.26.0/23
176.107.30.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:cf:2f:ae:6f:af:89:df:13:04:7f:d0:25:5a:82:43:cc:44:
f7:88:33:16:04:05:c4:e6:62:27:68:97:85:95:f8:a1:18:e3:
db:cb:f5:a8:33:aa:70:64:3d:ea:18:58:66:c3:58:5c:71:86:
77:44:36:cd:43:51:ce:ff:34:d4:54:08:17:4a:08:14:77:16:
be:10:58:c9:62:24:26:4e:07:b8:c5:fc:e4:00:00:43:c6:3d:
39:86:bb:b3:33:fa:2c:17:80:c3:fd:15:1d:42:67:9e:c9:07:
4c:b3:db:02:f3:43:77:b0:fa:43:a8:b2:0a:51:8a:07:b0:fa:
79:60:90:30:8c:39:aa:65:9c:bf:74:75:11:6b:7c:06:48:85:
fd:8d:99:78:e9:0b:79:15:b1:20:63:91:a1:7f:95:a3:b6:31:
94:0c:e2:3f:64:08:14:ec:d8:85:30:3c:6d:33:9a:46:e1:b8:
a8:af:45:08:b1:cf:7b:2c:d0:3a:bb:54:24:81:4c:67:71:e5:
23:cf:b9:fa:40:c4:7d:88:02:4f:51:da:fc:0f:c2:71:14:12:
ac:98:9d:aa:ca:9c:e1:c7:21:74:d5:d2:72:4f:15:cd:d3:77:
8d:b8:30:85:fd:64:4a:fe:06:6a:07:67:1e:6f:74:75:f7:51:
19:99:3d:4a
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQlj0IFb7waoJEzqVj59GjaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTA4Yjk3MGJjOGNiZDBlNDQ1M2M4OTZiZGI4MjJhYTcx
Y2EyNmYwHhcNMjUwMTAyMDU0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjllOTkwYWU0NDhhYThlMTgyZGFmNjA2ZTAyZTM5YjIwMjE3ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr4FgHAMM1TB3IBZL8jLhQdTuraO
sghoRDmxUPki02jElVBK7qSzKPu5d/2Cq0SFozRdkQzyyC6JAfmqTUJ396lms5CW
quXV7+wCDnmzWhSon54Dgm1usq8l/e1WoS5hF0baPGkGm4VH/nRK3ec8NLlonzaL
2hbP3sgddd4hvYGrN7taXNYuqThsHfCaQyzwXJXFaUI89iN3NJwoZBiAopU74yt5
mCfQ6dJOhpw8vYhYw7Kif4+uugm45g4UUM7D/abh1U5v+6sHab+gkN7HOEciJ/gD
i/FzqVR1rOkBAsQ9V0O0EMDy4ONxEkDG6xehom9kdzGgw/gEAHs+nGjCCQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFHaemQrkSKqOGC2vYG4C45sgIXgTMB8GA1UdIwQY
MBaAFC+gi5cLyMvQ5EU8iWvbgiqnHKJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZDTGx3dkl5OURrUlR5SmE5dUNLcWNjb204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80NmFiNDItYzEzNy00YmRlLWEzMmEt
YTQ0ZGQ5NjZjZTUwLzEvZHA2WkN1UklxbzRZTGE5Z2JnTGpteUFoZUJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC80NmFiNDItYzEzNy00YmRlLWEzMmEtYTQ0ZGQ5NjZjZTUw
LzEvTDZDTGx3dkl5OURrUlR5SmE5dUNLcWNjb204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBASwaxAD
BACwaxgDBAGwaxoDBAGwax4wDQYJKoZIhvcNAQELBQADggEBAG3PL65vr4nfEwR/
0CVagkPMRPeIMxYEBcTmYidol4WV+KEY49vL9agzqnBkPeoYWGbDWFxxhndENs1D
Uc7/NNRUCBdKCBR3Fr4QWMliJCZOB7jF/OQAAEPGPTmGu7Mz+iwXgMP9FR1CZ57J
B0yz2wLzQ3ew+kOosgpRigew+nlgkDCMOaplnL90dRFrfAZIhf2NmXjpC3kVsSBj
kaF/laO2MZQM4j9kCBTs2IUwPG0zmkbhuKivRQixz3ss0Dq7VCSBTGdx5SPPufpA
xH2IAk9R2vwPwnEUEqyYnarKnOHHIXTV0nJPFc3Td424MIX9ZEr+BmoHZx5vdHX3
URmZPUo=
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:49:06 2025 by rpki-client