Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/12f56c-be48-4152-8182-1591ea07d4d9/1/6QoZHp3yiHBK-dsbPM3b4uWIDJE.roa
File: 6QoZHp3yiHBK-dsbPM3b4uWIDJE.roa (raw, json)
Hash identifier: jUWmxOQhTFfpDkf1Q5GkJgTJKweogOJgQmZjnZRSbEk=
Subject key identifier: E9:0A:19:1E:9D:F2:88:70:4A:F9:DB:1B:3C:CD:DB:E2:E5:88:0C:91
Certificate issuer: /CN=a158fb060437efb97f4c03dffb7517169f2049c4
Certificate serial: 0189654AC2E2C40CBA88680F0AD3F6F70953
Authority key identifier: A1:58:FB:06:04:37:EF:B9:7F:4C:03:DF:FB:75:17:16:9F:20:49:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVj7BgQ377l_TAPf-3UXFp8gScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/12f56c-be48-4152-8182-1591ea07d4d9/1/6QoZHp3yiHBK-dsbPM3b4uWIDJE.roa
Signing time: Mon 17 Jul 2023 19:19:05 +0000
ROA not before: Mon 17 Jul 2023 19:19:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 176.116.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:c2:e2:c4:0c:ba:88:68:0f:0a:d3:f6:f7:09:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a158fb060437efb97f4c03dffb7517169f2049c4
Validity
Not Before: Jul 17 19:19:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e90a191e9df288704af9db1b3ccddbe2e5880c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:66:7e:6e:f7:c0:21:84:61:bd:8e:c8:b2:fb:
35:1b:17:52:0e:ec:c6:11:d8:75:2b:4a:d2:32:f2:
16:c7:88:9a:cc:96:2f:16:68:0b:51:0c:f4:39:ba:
82:e5:73:84:3f:cc:94:1c:14:b5:36:44:5e:65:f1:
23:cc:62:4e:90:9b:2b:3d:dd:22:cd:af:51:6b:ce:
19:e0:fa:68:88:11:f0:b2:e8:d9:73:4e:13:3b:64:
a0:44:85:c7:b8:c8:b3:ae:9c:a9:52:eb:94:ee:50:
92:78:3c:e3:c6:29:d3:80:b2:a3:d4:73:30:c3:3d:
89:5e:a9:8e:2d:ff:d8:a1:b3:36:2a:a6:0a:b1:df:
57:2b:33:96:71:24:75:30:0d:9a:4d:2c:9f:9c:4b:
ec:57:da:57:12:96:6a:cf:7a:32:be:f7:2e:b3:74:
a2:06:fe:da:8b:d3:6a:54:89:5a:cc:e3:5c:df:8c:
fd:cc:09:2a:29:39:ca:57:82:7d:37:d2:e9:3d:0d:
e4:90:90:ed:4f:e8:0c:c7:56:1f:0e:26:29:c3:46:
2b:5e:e1:d4:d4:ee:7f:c4:a6:05:e4:40:58:6e:33:
47:a9:66:14:93:b2:51:21:fb:90:a8:64:ed:03:dd:
8c:61:c6:0a:5e:d9:b8:4f:99:3b:a0:4f:e3:16:27:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:19:1E:9D:F2:88:70:4A:F9:DB:1B:3C:CD:DB:E2:E5:88:0C:91
X509v3 Authority Key Identifier:
keyid:A1:58:FB:06:04:37:EF:B9:7F:4C:03:DF:FB:75:17:16:9F:20:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVj7BgQ377l_TAPf-3UXFp8gScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/12f56c-be48-4152-8182-1591ea07d4d9/1/6QoZHp3yiHBK-dsbPM3b4uWIDJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/12f56c-be48-4152-8182-1591ea07d4d9/1/oVj7BgQ377l_TAPf-3UXFp8gScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.17.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2f:72:e0:81:d3:dc:0a:d3:cf:3c:6f:ca:ab:08:7f:f8:0c:
14:91:5b:8b:e3:ee:10:74:c0:5e:a1:0e:e4:cd:8e:f4:67:5b:
6c:d9:88:f7:73:f8:46:dc:fa:d4:32:10:51:de:6d:e5:78:ba:
67:34:e2:9e:19:65:30:cb:67:ab:64:86:3b:99:5b:d0:b2:47:
ea:93:8b:52:02:c2:2b:5a:6c:e4:e1:2c:4b:48:6e:ba:d2:69:
bd:b8:42:39:87:fc:fc:b5:38:97:27:71:25:d0:d9:e1:ac:fd:
96:c2:ae:32:0c:67:f0:27:d7:93:c2:e9:b7:da:08:18:ed:9d:
1e:5d:ab:7c:c7:b1:4a:5a:92:c4:3f:43:2a:6c:b4:ec:6a:8d:
cd:e2:a2:95:a4:f5:f8:4d:d2:c1:80:cc:e6:65:43:53:49:29:
3b:25:ec:fd:f1:69:df:ba:7a:9c:97:c9:5a:b1:5b:bd:cc:db:
a7:5c:b2:50:72:4d:1f:57:80:39:27:9c:a6:90:7d:42:fb:15:
1f:ba:f3:e2:c5:3e:55:a5:8e:f7:d0:7a:27:fc:4a:2f:8d:76:
f6:30:4b:09:fe:c9:17:d4:0a:3a:31:ad:dc:90:74:8e:1b:e2:
fb:df:0c:f4:f0:ed:e5:20:68:8e:00:88:bf:be:cb:37:6b:a0:
cd:f7:8e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:04:55 2025 by rpki-client