Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/tNykU4WFVbL-0VNlSNPu_1T7Sco.roa
File: tNykU4WFVbL-0VNlSNPu_1T7Sco.roa (raw, json)
Hash identifier: o5lenSRWef3fTGN4gZhfUrbU4T/7m8fGMG90WNV5xAU=
Subject key identifier: B4:DC:A4:53:85:85:55:B2:FE:D1:53:65:48:D3:EE:FF:54:FB:49:CA
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018C6704A3ECC1554E614EB51DE6A3CEE3B0
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/tNykU4WFVbL-0VNlSNPu_1T7Sco.roa
Signing time: Thu 14 Dec 2023 06:30:06 +0000
ROA not before: Thu 14 Dec 2023 06:30:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6167
IP address blocks: 176.46.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:04:a3:ec:c1:55:4e:61:4e:b5:1d:e6:a3:ce:e3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Dec 14 06:30:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4dca453858555b2fed1536548d3eeff54fb49ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:48:b5:8a:f9:76:67:a6:5c:4a:4e:51:c5:
b1:0f:1c:4e:f6:74:60:de:e1:be:71:51:ba:97:4d:
93:5a:65:06:e0:b6:c7:0c:7b:27:f6:09:1a:3d:79:
7c:d1:e3:55:00:55:26:59:d9:a6:3d:5b:4c:56:e7:
3e:63:9f:7a:61:c8:04:ef:d6:39:27:ff:c6:fc:9f:
d6:fa:14:76:69:84:87:60:12:46:1f:90:2c:2a:3e:
06:1a:af:18:61:85:e5:c3:61:fe:4a:6c:92:4e:6b:
7e:3a:96:c8:47:c9:85:9e:d1:1a:c0:43:0b:c3:35:
4b:be:fb:3a:fb:21:10:45:d0:d2:24:0a:85:ba:df:
9f:ee:97:3d:a3:c8:53:df:92:38:6b:34:f3:32:c9:
d6:cb:bd:e3:58:a7:a9:b4:4b:63:7e:ab:7a:f1:e0:
56:28:f8:89:19:7d:09:18:a2:fd:c5:95:ab:ba:a5:
1e:3d:8a:8d:e7:cc:f0:af:8a:31:54:8c:a2:01:62:
df:eb:96:da:97:b4:80:34:39:fb:77:11:3a:e9:df:
c2:e9:3b:df:e6:03:92:61:8e:1e:84:93:aa:2c:eb:
71:7f:f3:2d:ee:ac:04:04:13:98:37:4e:11:5d:14:
b8:fb:b2:6c:fc:3b:c6:51:e8:8e:c3:e5:21:b6:ba:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DC:A4:53:85:85:55:B2:FE:D1:53:65:48:D3:EE:FF:54:FB:49:CA
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/tNykU4WFVbL-0VNlSNPu_1T7Sco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.46.159.0/24
Signature Algorithm: sha256WithRSAEncryption
02:93:62:c5:ab:21:2d:fd:9e:50:68:37:09:bc:79:2d:a9:b9:
0c:33:80:d9:28:2b:b9:21:0a:30:36:ed:21:c5:fb:6f:64:53:
34:9c:6b:9b:bc:ab:92:d6:f1:03:2c:df:c1:69:06:74:ca:b6:
f4:8a:6d:88:aa:cb:29:c7:43:31:c3:1b:cc:14:ac:d5:85:0d:
da:7e:58:d8:76:5c:93:1f:83:3e:ef:91:5a:68:03:52:8f:e4:
8b:2c:8c:62:84:d8:39:de:34:b0:f6:a9:02:11:b1:41:86:4a:
8a:9a:61:fb:c6:62:ec:45:a1:3e:f8:b4:0b:ee:7d:0e:21:f3:
df:60:82:86:53:04:a5:d1:04:0f:d0:34:2c:30:9d:ef:18:90:
95:54:1e:be:de:d8:32:f2:1c:60:84:1c:f2:76:e4:27:0d:91:
fc:b1:f3:46:6b:f3:02:84:46:87:47:65:59:e3:29:73:33:ab:
b3:90:df:bf:1d:40:cb:4a:df:95:75:e9:37:2a:c8:58:a1:36:
29:0e:b6:6f:16:f6:e9:41:3b:87:30:db:5a:2d:e7:31:25:df:
38:ea:34:70:e5:d4:ee:3e:82:d7:60:a8:e3:97:34:17:d0:ca:
74:18:2a:fc:64:fe:4f:af:5f:36:9f:f2:24:bb:6b:c6:e6:81:
12:99:f2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:07 2025 by rpki-client