Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/i457eyPN-AZ3tIRobmV41X1j0IU.roa
File: i457eyPN-AZ3tIRobmV41X1j0IU.roa (raw, json)
Hash identifier: EJpb96pwlD8NYjY+8yVan/c5r80KlutjIog1qVz4jzM=
Subject key identifier: 8B:8E:7B:7B:23:CD:F8:06:77:B4:84:68:6E:65:78:D5:7D:63:D0:85
Certificate issuer: /CN=94ae7c382777bc85e726bb5a93c76938bf28c961
Certificate serial: 9B606A
Authority key identifier: 94:AE:7C:38:27:77:BC:85:E7:26:BB:5A:93:C7:69:38:BF:28:C9:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lK58OCd3vIXnJrtak8dpOL8oyWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/i457eyPN-AZ3tIRobmV41X1j0IU.roa
Signing time: Sat 01 Jan 2022 02:54:38 +0000
ROA not before: Sat 01 Jan 2022 02:54:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 176.97.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10182762 (0x9b606a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ae7c382777bc85e726bb5a93c76938bf28c961
Validity
Not Before: Jan 1 02:54:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b8e7b7b23cdf80677b484686e6578d57d63d085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:85:d7:fe:bb:c0:b9:e9:ac:c0:b0:57:48:
9b:f4:03:1c:2d:1b:57:fc:af:40:57:d8:90:d0:ba:
e8:9c:dd:c6:84:b5:96:0b:7a:70:8a:71:16:39:f3:
05:5f:7a:be:39:77:68:cc:bd:66:cc:12:af:47:43:
28:2b:be:9d:8a:90:34:09:5c:e1:b3:95:1a:9d:0a:
c8:94:fd:0d:1c:51:95:03:41:25:ed:a6:87:18:7c:
ef:59:c5:74:33:8d:34:50:a0:e8:8d:e3:60:95:e9:
3f:14:f0:37:31:ca:8b:00:55:a1:73:87:a9:ce:91:
48:13:b4:94:fa:f8:e1:1a:66:a9:14:f6:52:b3:1c:
87:f3:6a:0f:52:3b:cb:98:0f:49:27:73:43:e3:df:
f1:79:f7:e8:08:87:cb:6b:f0:80:9b:8b:c0:fe:e7:
aa:74:18:b1:18:1f:71:53:8c:f4:b2:dc:cc:0b:d5:
0f:3e:1e:0d:9c:63:81:47:2b:87:8c:42:10:d6:ce:
0d:f1:a5:c0:fc:5a:19:a3:04:05:96:ac:ad:eb:00:
a6:b0:72:4f:91:e8:ad:97:e8:b4:8a:06:8a:c3:31:
9a:ae:0c:69:e4:c6:5b:04:af:f6:15:b2:d5:63:90:
89:cd:9d:a3:3a:08:d4:aa:86:cd:f0:15:d6:81:40:
a3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8E:7B:7B:23:CD:F8:06:77:B4:84:68:6E:65:78:D5:7D:63:D0:85
X509v3 Authority Key Identifier:
keyid:94:AE:7C:38:27:77:BC:85:E7:26:BB:5A:93:C7:69:38:BF:28:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lK58OCd3vIXnJrtak8dpOL8oyWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/i457eyPN-AZ3tIRobmV41X1j0IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/lK58OCd3vIXnJrtak8dpOL8oyWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.222.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f3:88:17:6e:e1:2a:58:1b:ea:3b:54:bf:41:7e:fc:c8:17:
38:9a:c4:9b:60:8f:26:b8:e6:24:7e:0f:3b:c0:ce:76:1f:d1:
da:7c:43:42:f3:26:e5:1a:3f:5c:d9:21:e3:e7:c2:6e:a0:31:
49:e9:f1:cd:b0:1b:d9:cb:ec:12:82:52:8d:2b:9d:9f:53:88:
bb:92:53:7b:2d:22:3b:62:93:99:7f:63:d5:59:a4:f4:c1:a6:
0c:60:3d:f0:85:c9:fb:7e:bb:31:e5:3e:43:65:b4:cd:be:d9:
09:8e:7e:87:3b:29:07:26:3c:20:57:67:51:7f:cf:23:17:5a:
c7:43:ad:29:8a:a3:b4:84:fa:b1:8b:cf:29:ff:dd:32:15:2b:
1a:91:8b:ee:24:00:bd:bb:53:32:b0:20:93:1c:c0:db:47:1a:
ed:48:3a:dc:5b:fe:c1:0d:4e:fd:4d:a0:a1:cd:fe:79:28:69:
78:b4:37:c5:a5:dd:ad:d3:21:3d:66:0a:0e:3b:8d:bb:b8:37:
7c:26:d2:de:bf:bb:24:96:84:03:0e:ae:f3:0a:85:75:18:23:
4e:f8:73:76:03:d2:ba:26:fe:7f:af:77:2c:64:de:c1:2f:08:
6f:6d:0c:ff:33:4a:c9:1a:8f:de:8e:1b:c0:97:f6:bb:8e:ba:
01:cc:9b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:14 2025 by rpki-client