Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa
File: RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa (raw, json)
Hash identifier: N00rEgshheQJFJlnzMgkGFoydAhTWl79InbpFappf/8=
Subject key identifier: 47:2B:94:BB:C6:92:38:0E:11:46:B9:31:8E:10:8C:C9:6B:7C:33:EE
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 01941F8C2283787770430001E22B08933BC6
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 176.120.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:22:83:78:77:70:43:00:01:e2:2b:08:93:3b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=472b94bbc692380e1146b9318e108cc96b7c33ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4c:ac:e4:70:94:a6:0e:b5:55:70:d5:b0:bc:
0d:1f:54:e0:bd:74:9f:69:d4:16:25:6a:df:82:80:
4e:2c:94:e3:81:2d:be:df:56:73:eb:51:ea:de:0f:
34:1f:0a:d1:5c:88:30:13:97:9a:af:d3:bd:f8:02:
ed:3a:c9:b2:83:f3:f5:9d:bb:c0:c4:bd:0f:0a:9a:
19:0d:f5:00:67:e4:17:3d:2c:39:16:31:65:31:4d:
24:34:8d:9d:ca:30:a5:36:0e:cf:b8:9b:b0:a0:c0:
8e:ac:14:ed:b3:bd:16:f6:79:c2:d6:92:50:58:2a:
b0:d1:1f:bb:48:ae:b8:d5:f7:8e:0d:e4:23:54:9e:
1c:d2:ea:ad:fd:eb:89:1b:a4:70:28:93:d4:1c:f7:
21:36:9c:f2:39:f1:2e:eb:57:31:90:20:fe:25:3e:
0b:de:89:12:42:7b:d8:69:74:a6:c3:05:94:9e:e7:
92:9f:ce:f5:ae:0e:f5:b0:8c:77:59:b2:06:a5:79:
ac:d1:e7:16:e1:c1:35:a7:bf:9f:b9:36:50:77:ee:
f8:8b:a2:9b:32:b6:a3:55:7a:53:c7:b0:97:4b:21:
5e:e3:89:7c:40:27:f6:89:b3:dc:aa:f6:35:ee:b2:
2f:cb:e0:3b:83:55:15:d8:25:ed:34:97:5f:45:a6:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2B:94:BB:C6:92:38:0E:11:46:B9:31:8E:10:8C:C9:6B:7C:33:EE
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.16.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ff:b9:33:39:46:ca:55:7f:1d:a0:65:2f:01:48:63:13:db:
1f:72:ae:99:d2:75:15:48:9e:69:45:13:0a:17:41:46:4b:f8:
f3:3e:9d:bb:00:c5:53:ec:71:c0:84:41:80:4f:91:3d:b7:33:
b9:66:ff:fb:d4:5b:a3:bf:af:f4:e1:dc:08:a7:57:14:0c:91:
70:54:90:32:6d:e1:5b:43:35:7b:47:3d:9d:b3:c9:07:cd:5a:
af:93:07:9b:97:46:c1:b2:31:39:ee:b8:2d:43:e3:dd:a4:26:
b3:c5:42:19:21:1d:77:1a:ab:e2:60:42:ac:27:3c:be:81:0e:
e4:55:d5:36:7e:6d:5b:03:2a:b4:fc:d3:12:76:e4:46:40:92:
ad:77:85:40:f6:b7:7b:82:4e:f3:7c:2f:32:56:36:88:29:2d:
94:c3:92:20:1f:bd:0a:ff:f4:aa:b4:f4:62:76:56:25:21:35:
1c:c4:83:db:00:61:2f:06:ba:74:10:06:73:3a:74:35:25:c2:
4a:a4:e5:1c:ef:e5:08:7b:33:5d:bb:e2:f8:3a:13:df:66:78:
a6:97:cb:9c:2e:70:4a:cb:1c:af:d4:24:43:80:14:a8:66:77:
77:2b:87:e1:a8:89:07:50:fc:f0:8e:36:f2:df:78:a2:a3:aa:
34:31:e3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:17:14 2025 by rpki-client