Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/OI8bXUhkEdNYGomS29_wgNPVLEQ.roa
File: OI8bXUhkEdNYGomS29_wgNPVLEQ.roa (raw, json)
Hash identifier: V7l+84m9axQ4QfjVeKyU/1kRg1jxb8OQKFvQ4BeaVgk=
Subject key identifier: 38:8F:1B:5D:48:64:11:D3:58:1A:89:92:DB:DF:F0:80:D3:D5:2C:44
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018CC801C2874ABA6C8BA20B745EAB85C9D0
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/OI8bXUhkEdNYGomS29_wgNPVLEQ.roa
Signing time: Tue 02 Jan 2024 02:30:07 +0000
ROA not before: Tue 02 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6167
IP address blocks: 176.46.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c2:87:4a:ba:6c:8b:a2:0b:74:5e:ab:85:c9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 2 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=388f1b5d486411d3581a8992dbdff080d3d52c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ec:b5:dd:0a:9c:45:59:94:c2:ea:f9:4a:39:
6c:87:46:84:81:ab:fb:06:49:93:bb:6e:cd:90:9c:
77:a8:79:3e:62:fc:0e:56:ec:c6:82:12:78:d4:e6:
c9:91:35:f1:83:6f:8e:4e:0d:14:9a:ff:bb:8b:a2:
3b:23:c1:7f:b1:4c:03:b7:29:a2:12:13:83:cb:43:
c0:f4:a6:9b:5d:9b:68:37:01:f8:a3:60:7f:ce:e8:
2a:f7:e2:69:fc:a2:62:61:45:84:0e:ac:ba:bb:3a:
20:f3:87:6d:cc:1a:6e:f1:95:15:d4:ac:d6:49:5c:
6a:e3:bb:75:71:e7:e4:ac:72:c7:9b:50:44:3a:36:
41:d3:7f:2e:bf:cd:7d:6a:d0:01:87:da:cb:43:55:
21:61:a6:c2:a7:ac:88:ca:a2:ac:8b:d2:4e:eb:0c:
c7:d5:1f:bc:9f:0d:fa:a1:d8:89:fc:2e:06:c5:cd:
47:87:98:6c:4f:bb:b7:eb:fd:b5:ce:3c:c6:2c:e1:
30:52:44:80:6f:69:ee:1c:63:32:dd:2d:1a:ec:09:
d4:bf:24:31:23:d4:db:a9:de:a6:66:fe:5a:ea:9f:
e1:8a:67:b5:0d:73:fd:36:77:23:bb:7f:de:5a:f1:
7f:c2:66:31:48:24:ee:95:15:47:32:98:9c:dc:72:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8F:1B:5D:48:64:11:D3:58:1A:89:92:DB:DF:F0:80:D3:D5:2C:44
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/OI8bXUhkEdNYGomS29_wgNPVLEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.46.159.0/24
Signature Algorithm: sha256WithRSAEncryption
88:21:d9:9c:6c:01:cc:6e:02:72:f3:79:28:be:6b:aa:47:e6:
bf:c9:88:5f:23:ed:31:a1:60:1f:2d:d2:e4:3b:4f:fe:50:28:
52:21:39:4e:5a:83:9d:21:cb:a1:26:5d:09:cf:ca:bd:85:4a:
b7:ad:f8:7a:a6:48:83:bb:85:df:2f:8e:36:6e:25:c6:68:f4:
cd:2f:e9:1f:c8:1c:ca:29:cc:5e:ee:a7:2c:44:c3:39:73:5f:
dd:ff:d0:ec:e7:70:59:db:25:7c:af:6e:45:a1:0c:4e:cd:cc:
74:92:d4:52:f3:52:f4:cd:22:65:87:fc:97:4b:a8:5d:3d:63:
a5:9c:6e:0f:37:cc:d2:7f:a9:62:62:8c:c6:4b:6d:c0:9a:7c:
5e:63:66:3f:e4:66:25:b0:fb:d4:80:18:a6:c3:07:61:ba:72:
fc:92:8a:f6:df:76:7c:c1:90:4a:8d:47:8d:b7:cb:cd:6c:12:
d8:ac:4d:05:28:f5:f8:6c:36:de:4f:b1:bc:24:56:d6:80:37:
1c:e7:ff:45:51:41:a5:2c:d9:bf:69:6e:cf:83:4d:1b:54:81:
dd:cb:62:16:a9:ba:c2:c6:51:d4:4f:38:93:b9:f3:2e:8c:ea:
fe:ad:ad:a2:89:85:94:22:c9:ce:8f:b8:e8:50:74:53:1a:fb:
ee:44:1f:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAcKHSrpsi6ILdF6rhcnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjQwMTAyMDIzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODhmMWI1ZDQ4NjQxMWQzNTgxYTg5OTJkYmRmZjA4MGQzZDUyYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOy13QqcRVmUwur5Sjlsh0aEgav7
BkmTu27NkJx3qHk+YvwOVuzGghJ41ObJkTXxg2+OTg0Umv+7i6I7I8F/sUwDtymi
EhODy0PA9KabXZtoNwH4o2B/zugq9+Jp/KJiYUWEDqy6uzog84dtzBpu8ZUV1KzW
SVxq47t1cefkrHLHm1BEOjZB038uv819atABh9rLQ1UhYabCp6yIyqKsi9JO6wzH
1R+8nw36odiJ/C4Gxc1Hh5hsT7u36/21zjzGLOEwUkSAb2nuHGMy3S0a7AnUvyQx
I9Tbqd6mZv5a6p/hime1DXP9Nncju3/eWvF/wmYxSCTulRVHMpic3HLlRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDiPG11IZBHTWBqJktvf8IDT1SxEMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvT0k4YlhVaGtFZE5ZR29tUzI5X3dnTlBWTEVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsC6fMA0G
CSqGSIb3DQEBCwUAA4IBAQCIIdmcbAHMbgJy83kovmuqR+a/yYhfI+0xoWAfLdLk
O0/+UChSITlOWoOdIcuhJl0Jz8q9hUq3rfh6pkiDu4XfL442biXGaPTNL+kfyBzK
Kcxe7qcsRMM5c1/d/9Ds53BZ2yV8r25FoQxOzcx0ktRS81L0zSJlh/yXS6hdPWOl
nG4PN8zSf6liYozGS23AmnxeY2Y/5GYlsPvUgBimwwdhunL8kor233Z8wZBKjUeN
t8vNbBLYrE0FKPX4bDbeT7G8JFbWgDcc5/9FUUGlLNm/aW7Pg00bVIHdy2IWqbrC
xlHUTziTufMujOr+ra2iiYWUIsnOj7joUHRTGvvuRB+o
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:14 2025 by rpki-client