Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/crJgDg-ZRZtjoYoWBjUTwZTTeRw.roa
File: crJgDg-ZRZtjoYoWBjUTwZTTeRw.roa (raw, json)
Hash identifier: vFyBlKSYLe8/GXNsxH7S7Nq5BZhRNJl2DU1rrbhj+o8=
Subject key identifier: 72:B2:60:0E:0F:99:45:9B:63:A1:8A:16:06:35:13:C1:94:D3:79:1C
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019436F8715C8059913FA51C1B4B2C56C9E0
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/crJgDg-ZRZtjoYoWBjUTwZTTeRw.roa
Signing time: Sun 05 Jan 2025 14:57:19 +0000
ROA not before: Sun 05 Jan 2025 14:57:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 176.96.128.0/24 maxlen: 24
217.18.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:36:f8:71:5c:80:59:91:3f:a5:1c:1b:4b:2c:56:c9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 5 14:57:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72b2600e0f99459b63a18a16063513c194d3791c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:38:ad:65:c0:b3:33:ae:8c:6e:fc:41:c9:
fc:d8:9d:13:36:17:8c:d3:52:5f:58:35:d5:cb:f8:
7f:3d:b0:8f:ce:23:63:a2:6b:ae:a2:bd:06:26:8e:
8b:be:e4:7a:75:da:7f:40:18:35:b4:54:94:eb:f7:
47:2d:29:11:b3:88:01:73:b1:25:22:51:eb:2d:d9:
05:6e:c7:27:ea:5f:de:b0:7b:d4:d2:53:fd:0c:e0:
30:41:b8:77:8a:a4:d1:1b:3c:72:db:e2:1c:51:69:
f3:94:a8:36:8c:68:10:cc:a1:26:4a:fc:67:e7:da:
14:31:02:f9:c2:09:7f:72:21:f7:77:5f:46:b6:b5:
34:52:25:bc:34:19:87:15:e1:11:72:2f:f3:bb:64:
70:79:6b:90:97:43:77:39:87:2a:95:d4:50:67:a9:
05:cc:0c:06:c0:d9:a4:63:7f:67:50:34:d6:d0:a0:
a6:81:10:d2:a8:ba:06:10:52:a3:81:9b:5b:da:42:
b4:27:88:97:f9:45:36:a4:4c:88:eb:17:19:aa:9e:
15:0e:32:61:87:5b:24:0a:f7:c3:fe:f5:64:78:ab:
e6:b8:9b:fd:8e:e7:f2:73:19:a8:2a:c1:5a:2d:1b:
dd:2d:65:f8:29:df:b7:35:77:4c:bc:63:88:0d:6b:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B2:60:0E:0F:99:45:9B:63:A1:8A:16:06:35:13:C1:94:D3:79:1C
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/crJgDg-ZRZtjoYoWBjUTwZTTeRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.128.0/24
217.18.210.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d6:e3:23:d1:57:b5:5e:b3:59:a7:fa:15:49:04:ac:04:f1:
b6:43:f1:3f:03:bc:a6:c4:37:10:8c:be:86:55:bb:f2:5f:ec:
41:cf:06:bb:86:a4:20:a7:3a:5b:15:e0:c5:01:7f:a2:0c:03:
0d:bd:d6:e7:5e:0d:24:a8:60:a6:ab:ca:e6:4a:5a:0f:9d:0b:
9e:6f:c5:9d:2a:e6:b4:1a:a7:ca:e2:20:77:fd:a8:6f:10:84:
5b:f0:cc:49:66:15:bc:f3:af:50:05:f7:56:b0:32:b6:09:27:
73:b1:69:8d:e6:4b:5b:ed:ee:26:af:7b:5f:d5:c9:c8:61:66:
48:07:da:ce:7d:14:2e:36:63:ee:14:93:07:c2:3f:90:f2:97:
d5:ca:eb:c0:54:4a:3a:d4:cb:46:79:96:59:24:2c:3b:62:1f:
fb:54:77:de:79:99:8d:ae:d4:30:d1:01:5a:6b:9f:f3:c6:23:
33:68:30:e5:83:b3:3b:43:84:80:3e:f0:b1:d4:5f:d6:aa:73:
3d:a3:2a:66:cf:29:ed:31:eb:a9:f6:c2:8b:5c:3a:dd:75:87:
5b:c6:bd:f1:e6:7e:4a:cc:87:57:d1:4a:46:e1:8e:c2:2d:50:
4b:38:da:06:73:d1:21:c6:54:39:b2:92:71:ab:8c:9c:8c:2c:
ca:28:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:23 2025 by rpki-client