Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/r9MRwErPx471h6TqdrPuYPun0Jk.roa
File: r9MRwErPx471h6TqdrPuYPun0Jk.roa (raw, json)
Hash identifier: R199i/F3Wdy96SeNPe2FMrsECpxeG/Nhuq63nLLypBM=
Subject key identifier: AF:D3:11:C0:4A:CF:C7:8E:F5:87:A4:EA:76:B3:EE:60:FB:A7:D0:99
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0193F4D959F17830B3E504E48F99D4272BD7
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/r9MRwErPx471h6TqdrPuYPun0Jk.roa
Signing time: Mon 23 Dec 2024 18:48:25 +0000
ROA not before: Mon 23 Dec 2024 18:48:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212219
IP address blocks: 176.96.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:d9:59:f1:78:30:b3:e5:04:e4:8f:99:d4:27:2b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 23 18:48:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afd311c04acfc78ef587a4ea76b3ee60fba7d099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:1d:92:84:b7:28:94:47:86:4e:dc:48:3d:
9e:14:52:95:25:d2:8a:84:71:cb:1f:29:a9:e2:1f:
78:14:ff:94:de:9a:0e:da:bc:5d:3a:4a:65:22:c1:
fe:71:62:d7:eb:09:9e:b4:d9:bd:7a:c9:78:02:4f:
d0:42:eb:30:21:94:ee:51:b9:13:31:12:33:ce:3f:
6b:4e:90:b1:f9:97:87:bb:da:f3:aa:87:3a:7a:e2:
2f:0a:a0:f8:6e:b5:c1:39:df:df:6a:a4:e0:63:18:
fd:94:a6:6f:49:39:8c:9c:df:85:49:99:43:df:41:
0e:83:3f:7d:a3:f5:2d:4f:4d:97:54:a8:a3:cf:28:
ec:46:d9:5e:d3:78:b1:f2:bb:30:79:bc:73:c1:ba:
02:2d:e5:dd:93:fa:87:2f:d6:5c:ad:67:92:ee:b2:
b5:ab:dc:e8:3c:7c:c7:06:cf:55:a9:8b:26:90:5c:
18:a1:3f:7a:bf:93:f1:17:15:2a:b2:81:c9:a3:9d:
20:04:c8:b0:27:bd:b1:a0:b4:db:d4:ac:2b:61:b5:
40:6a:2c:d6:9c:83:c3:53:a7:8f:f1:c9:99:e6:56:
90:42:de:3b:38:5c:e3:76:25:2b:13:af:f8:5c:52:
12:68:0e:2a:9f:6a:55:c7:89:41:46:f9:1a:7d:f3:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D3:11:C0:4A:CF:C7:8E:F5:87:A4:EA:76:B3:EE:60:FB:A7:D0:99
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/r9MRwErPx471h6TqdrPuYPun0Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.131.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d2:28:20:e8:81:f8:0d:39:0b:a2:6b:7f:ee:26:12:98:cf:
ca:86:7b:e7:28:3c:27:df:4f:ab:9b:04:63:49:5f:79:47:da:
69:eb:f5:8b:a0:88:54:cf:a9:81:00:0e:07:77:b3:ea:43:0c:
89:ec:af:31:11:b0:00:c3:ce:4b:de:83:7b:1b:51:ff:45:fc:
78:27:fe:60:d6:d6:86:2d:1b:ff:61:b6:f7:6d:f7:dd:aa:04:
87:91:f3:3c:62:4f:b8:b7:2b:3e:9e:24:d5:10:2f:45:34:54:
19:ea:11:7a:17:d7:c9:b9:26:80:ed:e2:f9:84:ef:92:a4:92:
a9:95:be:85:05:ed:3b:6a:a8:44:c3:c0:9b:90:fd:d8:f9:51:
49:e8:7f:99:fb:10:97:64:61:aa:01:fe:cf:b3:df:6c:9f:05:
ed:e5:de:ac:bb:66:37:bd:df:4d:a1:d1:1c:6f:00:c5:c3:76:
4f:2b:1a:28:b9:22:2a:26:c9:fc:11:a0:df:80:3c:04:63:a9:
84:96:16:5a:84:af:c2:84:c8:fd:96:4f:e5:e8:76:b2:90:c9:
e7:b7:50:09:a1:d2:60:46:ea:13:6f:54:30:f6:70:9f:8e:c4:
db:8f:1b:67:73:df:32:36:d9:6e:5c:be:e5:08:de:ea:16:11:
21:f7:80:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:25 2025 by rpki-client