Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/kE7OWpIpbSYSatcryFRJA9d3ct4.roa
File: kE7OWpIpbSYSatcryFRJA9d3ct4.roa (raw, json)
Hash identifier: ZZsyCumoTLc2oTwOiBWSKeo4sqh5CuFtRkLz9ot4izs=
Subject key identifier: 90:4E:CE:5A:92:29:6D:26:12:6A:D7:2B:C8:54:49:03:D7:77:72:DE
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018B964CCA5DE8340B5E536DE4D643DBD7CA
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/kE7OWpIpbSYSatcryFRJA9d3ct4.roa
Signing time: Fri 03 Nov 2023 17:48:16 +0000
ROA not before: Fri 03 Nov 2023 17:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216050
IP address blocks: 176.46.128.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:4c:ca:5d:e8:34:0b:5e:53:6d:e4:d6:43:db:d7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 3 17:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=904ece5a92296d26126ad72bc8544903d77772de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:ad:64:3e:bf:41:a7:b5:f1:84:5e:4f:10:
a9:bb:c6:10:b7:8c:a2:00:8a:2f:da:10:c1:a0:57:
c0:97:18:b3:73:ff:70:1b:e8:93:23:9e:49:47:ae:
9e:df:b8:81:a5:46:d4:d1:c3:b6:48:96:58:31:87:
2e:2e:ab:2b:fa:a6:67:5f:31:7e:02:2f:1d:a9:ff:
e2:d6:a1:ca:f3:d2:f1:e9:17:51:9b:36:a3:e3:86:
98:3b:dd:25:ea:e6:db:aa:62:32:77:43:09:66:77:
0b:99:4d:70:98:5e:6e:1c:fe:ab:0d:cf:2a:17:e4:
7a:a4:6e:f6:f3:fc:01:ae:d6:ab:ca:be:ac:a0:f7:
44:c3:36:8b:65:52:c4:bd:ed:14:cc:db:a9:08:ec:
2d:ba:6f:2f:d7:ab:ea:cc:0c:11:a5:40:96:ae:b2:
9e:6b:ed:9f:9d:55:8d:4c:13:23:86:26:e0:71:bc:
69:09:8c:64:4b:f5:3d:84:cc:7b:d6:68:0a:5d:f8:
36:87:11:bf:4e:52:08:22:0e:86:2f:9f:cd:ed:26:
52:96:cd:80:82:60:4a:6c:5e:97:60:0f:43:62:d6:
e8:8b:29:9d:14:e9:b1:eb:66:57:d9:d8:d9:2d:d4:
76:3b:3f:87:d2:80:f7:c2:3f:27:8d:08:60:d8:66:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4E:CE:5A:92:29:6D:26:12:6A:D7:2B:C8:54:49:03:D7:77:72:DE
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/kE7OWpIpbSYSatcryFRJA9d3ct4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.46.128.0/24
176.46.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:87:72:f2:f4:ff:75:f2:46:e4:16:3c:30:d4:f8:f8:cf:4e:
7d:74:1d:d4:b7:54:76:a0:a2:00:97:77:7a:a4:62:21:77:36:
15:56:2a:8b:e9:e8:d6:32:1b:ab:9a:1e:ea:79:2f:eb:c4:c8:
06:3c:64:b1:e5:f8:12:47:38:bd:0c:8d:53:ce:5a:e0:bc:fe:
07:bf:bc:6c:b3:4b:ce:0e:62:77:3c:cb:8f:43:31:a4:73:58:
68:2f:20:06:8c:0f:c1:d2:48:d4:86:1b:ae:d5:6d:ac:cc:44:
9d:a4:28:dd:5a:c7:06:a5:a0:d0:e1:25:a8:1f:e0:22:c8:81:
f5:ae:47:9f:75:77:39:b2:ea:7c:41:a8:6d:43:8b:be:54:4b:
51:d3:8a:ff:5c:47:c2:3f:3f:67:f1:24:05:69:3e:1f:ac:dd:
73:0f:3d:ae:a2:c8:5d:56:19:f9:70:55:ab:fb:84:f2:32:8e:
3e:c5:a4:cb:78:04:e6:a5:5d:91:c0:f2:01:00:9a:69:5d:cd:
f8:0c:d7:4d:71:05:c3:cc:c5:c6:21:c1:c4:a8:08:0f:ac:c3:
5f:b6:fa:4d:d9:6b:51:83:bd:34:f8:d5:0b:88:ae:08:0e:a3:
e8:65:87:90:4a:ff:82:19:23:b0:6a:ed:0a:e2:40:d5:95:b9:
8b:f6:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:44 2025 by rpki-client