Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/H7jD667ua1MTRSgNeUALgotBmYc.roa
File: H7jD667ua1MTRSgNeUALgotBmYc.roa (raw, json)
Hash identifier: DYMDYLZ2zWAIEYH23OdxIBtMbFHxghghtjADwNcrKf0=
Subject key identifier: 1F:B8:C3:EB:AE:EE:6B:53:13:45:28:0D:79:40:0B:82:8B:41:99:87
Certificate issuer: /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial: 0194274824FD31752FD3007B7369442337A6
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/H7jD667ua1MTRSgNeUALgotBmYc.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12859
IP address blocks: 176.61.130.0/24 maxlen: 24
2a00:e480:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:24:fd:31:75:2f:d3:00:7b:73:69:44:23:37:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fb8c3ebaeee6b531345280d79400b828b419987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:18:75:b5:d1:36:70:38:77:1f:48:3b:7b:
51:94:b7:be:b9:66:87:3f:83:55:4c:e2:56:be:ff:
23:62:30:b8:dc:27:f2:72:65:69:c6:6e:65:02:3e:
c6:eb:66:e5:b0:8f:d4:f6:aa:9b:a3:48:03:f2:aa:
ce:fc:9a:ab:f5:14:5a:85:97:49:b4:4d:7c:e5:9a:
64:34:22:56:aa:ee:0c:ec:cd:86:dc:83:68:d8:d1:
69:96:6a:5c:e4:dc:10:b3:f3:1e:5f:79:19:5c:71:
e3:5b:ce:4d:3f:72:8c:72:87:16:37:2e:b7:cb:97:
77:e9:33:d2:0e:10:64:03:2f:65:15:99:1f:a2:77:
8a:3c:5a:4c:bc:60:73:43:92:d6:07:c5:e9:fd:8d:
73:31:16:e0:58:c7:52:aa:9b:be:12:a7:48:9e:ab:
29:67:0e:cf:fa:3f:a5:f3:e6:b6:1a:f5:f5:9d:a5:
b5:7f:a0:46:52:10:77:bf:14:04:b7:89:6e:c8:17:
6f:28:52:86:a9:7d:1b:2e:1b:f3:c0:27:0e:ed:cd:
84:bb:be:6d:98:b5:34:55:f7:24:09:71:30:79:f7:
a0:51:f3:a0:d3:c1:97:16:f6:03:aa:2a:a4:50:5d:
2c:e0:ca:f5:1d:e4:b6:34:64:b2:bd:8e:cf:a9:37:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B8:C3:EB:AE:EE:6B:53:13:45:28:0D:79:40:0B:82:8B:41:99:87
X509v3 Authority Key Identifier:
keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/H7jD667ua1MTRSgNeUALgotBmYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.61.130.0/24
IPv6:
2a00:e480:1::/48
Signature Algorithm: sha256WithRSAEncryption
3e:b8:c3:4b:d6:2e:26:b7:a6:ec:97:a9:95:01:a7:15:96:ec:
18:7c:ed:33:38:2a:ec:c9:57:ef:97:b9:6f:64:e2:59:88:bf:
60:5d:df:67:85:3e:02:d9:bc:18:62:77:d6:6f:65:2c:1e:e0:
39:6c:f2:fe:9c:61:89:4e:54:f5:96:1d:df:e9:53:8c:0a:e9:
50:4d:89:b8:65:fd:b2:ff:a6:e9:db:4f:6c:25:3f:6e:2b:d9:
b7:bf:9c:d9:a0:2f:77:49:e8:1a:06:36:1e:59:b8:ba:d4:01:
de:eb:8d:5c:49:56:45:e5:0c:d2:13:0b:46:3e:72:6e:d2:75:
5b:17:93:cd:a2:56:94:b2:2d:1e:48:36:46:ac:3a:f1:95:50:
14:6b:2e:64:b3:c7:9c:f1:ab:37:b6:05:23:e5:44:ef:85:e7:
37:e7:79:1d:1a:37:46:4b:7e:3b:fc:64:36:01:63:e2:8d:e9:
60:c5:a5:d5:cb:50:60:e0:b4:2a:b6:ad:7a:f2:cc:65:4a:08:
4f:1a:41:88:51:58:8f:98:1f:28:85:79:4c:85:9c:74:88:cc:
b6:ec:45:d7:91:02:ec:06:97:10:e3:dd:9c:81:62:6d:05:e1:
cc:df:75:c7:9c:d2:2c:fc:64:f6:ab:e4:40:72:82:8c:f6:d0:
0a:01:af:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:19 2025 by rpki-client