Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/vwh9MsbifZwK4ZCw9QX_9ijhE3M.roa
File: vwh9MsbifZwK4ZCw9QX_9ijhE3M.roa (raw, json)
Hash identifier: d/jVp4Q/QFkMnzuF3P+YINiEbVVQhtUmrKzmHa4mKvo=
Subject key identifier: BF:08:7D:32:C6:E2:7D:9C:0A:E1:90:B0:F5:05:FF:F6:28:E1:13:73
Certificate issuer: /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial: 019422204038AC50813649DD9B3E41A6ED87
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/vwh9MsbifZwK4ZCw9QX_9ijhE3M.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208905
IP address blocks: 176.106.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:40:38:ac:50:81:36:49:dd:9b:3e:41:a6:ed:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf087d32c6e27d9c0ae190b0f505fff628e11373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:be:72:c5:fc:f9:66:aa:73:8b:ca:e5:f4:
1c:86:e5:5b:d7:53:bb:8e:7f:e4:30:e6:d7:c5:51:
69:78:34:39:d7:e4:2d:30:53:f6:e4:a3:71:a9:94:
5a:75:e5:b7:02:c1:b3:ec:8b:36:d8:e6:81:48:fb:
8a:ec:b5:62:62:7e:c1:90:16:bc:12:55:5e:bf:18:
69:bf:8b:14:76:66:c7:a4:f1:87:57:d3:16:82:fb:
96:2b:33:75:27:dd:6b:e5:89:e8:12:2d:dc:61:b7:
13:9d:8b:99:e2:f6:3f:bb:c4:c1:b7:d7:8a:40:57:
d6:c0:00:cf:7a:a8:2c:a6:2d:4f:dd:f2:57:4e:a5:
ac:75:89:47:0a:e6:6a:58:6e:e5:01:88:a8:85:5a:
25:21:83:1e:bf:33:0b:bb:d5:0a:26:ec:b7:ef:02:
63:1b:16:2e:23:8a:d9:33:e3:5c:3c:25:b1:4e:ea:
fa:52:cc:86:e2:33:db:25:07:d8:6d:22:02:e1:7d:
9a:ca:4d:8f:4e:44:ea:03:e1:b0:f9:02:5a:0a:4b:
9c:d7:f6:f3:3d:9e:d3:a6:bb:b2:0c:87:c4:0f:82:
a8:3f:51:28:44:1d:0c:d8:9e:df:64:f8:46:05:28:
b0:3d:e7:c4:ff:7c:70:1b:e3:01:1c:56:7c:55:8b:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:08:7D:32:C6:E2:7D:9C:0A:E1:90:B0:F5:05:FF:F6:28:E1:13:73
X509v3 Authority Key Identifier:
keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/vwh9MsbifZwK4ZCw9QX_9ijhE3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.106.229.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:39:a4:2b:e2:85:87:da:83:11:df:ec:a8:bf:25:5a:ea:5e:
ee:6c:2f:da:f0:4b:94:c4:20:88:ff:80:cd:b2:3c:d8:cf:0c:
6c:de:b0:4f:69:b8:3d:9e:88:3f:a4:5f:f5:b0:15:4e:5a:15:
ad:df:b8:a4:46:48:2d:32:b8:4e:e1:d4:3f:74:22:5d:cb:a2:
24:fc:e0:0f:78:f5:75:47:04:c3:7f:31:1e:85:9e:02:c9:c9:
be:a5:f3:cb:8a:35:39:30:0f:41:ec:4f:89:8a:24:8c:dc:81:
0b:ca:f2:b2:0d:f1:89:d6:45:05:0f:73:6b:18:1a:10:4e:9c:
4d:e0:13:7d:2f:fa:d1:e0:78:1d:d1:41:0b:89:27:22:2d:77:
f4:c4:59:ed:0f:bc:db:71:66:dc:a1:f9:a6:5f:79:92:8c:0f:
87:cf:87:d2:e9:1a:49:fa:de:3a:78:dd:be:56:f7:11:3d:16:
58:e9:1f:04:e2:09:11:c4:b5:15:1a:41:c9:16:4b:dc:74:1a:
09:8d:8d:56:f1:dc:d6:de:77:e6:09:7b:9c:04:47:c2:8d:70:
b2:ee:31:25:99:36:e1:38:17:a8:68:00:8c:67:2a:6f:75:c4:
e9:0e:bc:5d:c5:22:a4:17:70:16:f7:5e:fc:1b:72:84:3d:4a:
a4:1b:70:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:54 2025 by rpki-client