Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/rfxK95wCJYlz8bBxZevQEHg20gE.roa
File: rfxK95wCJYlz8bBxZevQEHg20gE.roa (raw, json)
Hash identifier: 8l01FF6TVdT6B24/91ZO6lRY0qxUT4iiEOhJmZiX1rM=
Subject key identifier: AD:FC:4A:F7:9C:02:25:89:73:F1:B0:71:65:EB:D0:10:78:36:D2:01
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 019421B1893A4562252628A68DA1F313B7A4
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/rfxK95wCJYlz8bBxZevQEHg20gE.roa
Signing time: Wed 01 Jan 2025 11:47:50 +0000
ROA not before: Wed 01 Jan 2025 11:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 176.117.64.0/22 maxlen: 22
176.117.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:89:3a:45:62:25:26:28:a6:8d:a1:f3:13:b7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: Jan 1 11:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adfc4af79c02258973f1b07165ebd0107836d201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:4c:7c:1a:f3:db:89:23:b3:bd:40:12:4d:
f7:06:6f:a3:13:df:1f:9f:2a:7a:d1:d5:2f:fb:79:
3c:dd:d6:63:a9:09:60:5b:c7:8c:e8:38:3f:05:23:
f3:9b:35:fd:fc:80:48:ac:c4:fa:99:35:37:24:ca:
64:fa:14:c7:54:8f:6d:4e:41:64:3f:2f:a3:d7:f3:
a7:39:25:5c:9b:f0:07:c5:f4:e4:38:96:a2:cf:ee:
dd:0a:25:00:35:73:4b:82:d1:e5:84:5a:88:f0:2c:
11:8f:03:93:76:a8:f4:51:74:39:be:51:4d:6d:2e:
9e:3d:79:99:1e:74:0c:98:5c:f6:12:b8:d7:03:7c:
c8:59:af:1e:96:74:fa:10:8c:c8:c3:ca:39:cd:fd:
9e:06:fa:2f:51:30:7f:15:5c:4e:96:00:00:e0:9d:
c6:10:8e:62:13:86:ed:33:0e:20:b3:9b:4e:58:56:
3f:f9:af:57:da:0c:f9:61:5b:ce:c2:a7:0f:16:08:
00:af:e1:c7:7d:9c:3e:f9:ff:8d:dc:d3:d1:5f:4e:
b2:10:04:d3:f2:32:00:e1:11:b1:66:f2:76:02:3d:
a4:18:6c:6e:2d:39:31:00:89:9e:f2:f5:be:7f:9b:
46:e7:57:46:6e:ad:47:28:72:74:79:41:db:5e:25:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FC:4A:F7:9C:02:25:89:73:F1:B0:71:65:EB:D0:10:78:36:D2:01
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/rfxK95wCJYlz8bBxZevQEHg20gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.64.0/22
176.117.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:a6:aa:9e:2e:c4:cd:1f:b0:3a:44:c5:5a:7c:df:fe:fe:02:
f9:8c:39:ff:0d:3d:2a:9a:01:b9:0f:4d:ba:9c:66:cc:c7:c1:
1e:53:fb:6a:e1:be:27:e9:c1:ef:22:0c:b6:f8:dd:02:bb:a6:
c7:6a:ba:74:54:a3:51:24:06:74:84:80:cb:f9:2b:15:bb:16:
e6:ad:98:db:80:6c:20:92:6c:27:bb:b9:b8:ef:7d:d2:b3:76:
01:8f:b8:0f:0b:63:4a:e8:70:c9:7c:2e:3e:1f:0e:de:d5:ec:
3a:52:04:db:8c:60:77:f0:bb:16:05:dc:b5:ca:6b:43:d7:37:
18:47:62:e9:e7:f8:15:2a:c9:a7:b3:93:10:28:69:ea:f8:80:
d2:39:c1:2a:00:c0:c6:3f:3e:cd:85:7a:70:79:e7:ec:9d:fa:
3b:d2:2c:7f:e0:e9:5d:22:2c:11:ca:9f:19:8b:e7:d9:16:c1:
55:fb:b9:54:3a:b6:51:fe:80:a7:94:0d:6d:9c:02:55:53:25:
f1:24:37:b4:e3:f8:5c:9d:08:25:3a:f4:cc:5b:db:63:ab:35:
b4:ed:2a:67:f9:fa:c3:4b:b9:3b:ba:bf:0d:c1:05:b5:93:87:
bd:a0:0f:d2:6a:6f:26:e5:66:87:11:3c:2d:5f:c3:52:a1:a4:
d4:33:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:13:03 2025 by rpki-client