Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/xBPL3tcq4vshC-tIIRs3e2hPPZA.roa
File: xBPL3tcq4vshC-tIIRs3e2hPPZA.roa (raw, json)
Hash identifier: uGHk54ejyNHUJ7dwaQEg9Ltn2hWGROPxlffKCoYi+aE=
Subject key identifier: C4:13:CB:DE:D7:2A:E2:FB:21:0B:EB:48:21:1B:37:7B:68:4F:3D:90
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0188E7186AD10B1343F2BA7ACCD9713FBBB1
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/xBPL3tcq4vshC-tIIRs3e2hPPZA.roa
Signing time: Fri 23 Jun 2023 07:11:57 +0000
ROA not before: Fri 23 Jun 2023 07:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 176.116.232.0/22 maxlen: 22
176.96.88.0/22 maxlen: 22
176.103.240.0/21 maxlen: 22
178.212.184.0/22 maxlen: 22
178.212.184.0/21 maxlen: 21
178.212.188.0/22 maxlen: 22
176.102.124.0/22 maxlen: 22
176.102.120.0/22 maxlen: 22
176.102.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:18:6a:d1:0b:13:43:f2:ba:7a:cc:d9:71:3f:bb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jun 23 07:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c413cbded72ae2fb210beb48211b377b684f3d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:2e:fc:d9:3e:b9:c7:05:29:42:f0:06:f6:
a3:60:98:a4:f9:06:12:73:98:05:53:bd:d1:c5:eb:
65:e4:b9:4a:b4:9c:14:97:d6:f6:4d:9f:63:6c:a4:
ef:82:8a:eb:4d:da:ae:1a:61:be:78:ff:93:fa:6f:
14:f8:5f:45:ae:ac:91:37:73:c2:12:6f:82:57:a4:
41:c5:bc:5f:23:41:7c:2d:8d:d7:6f:19:58:32:ac:
12:b1:8c:5f:be:60:78:ba:a7:c1:03:d6:8b:26:8e:
22:7a:63:fd:41:76:ee:f6:c7:04:f5:4a:01:bf:70:
37:7c:df:aa:22:b9:d6:9d:3c:f8:1e:2a:0f:28:52:
46:ad:b8:87:02:56:27:8e:75:8a:e2:82:e9:02:2d:
74:c7:d8:96:7f:74:b4:c5:23:4f:02:48:f6:53:45:
5b:9d:e0:92:bd:4f:f6:b9:1d:e7:62:e9:c7:2a:5b:
4c:47:5b:dc:85:9f:a4:c1:ec:d0:1c:f0:dc:64:23:
ab:d8:11:12:69:7e:7e:10:58:ac:07:8b:c8:ed:a6:
be:53:16:9c:c4:10:bc:c4:48:11:5b:c2:85:76:6e:
2f:5e:37:71:ed:ce:10:92:eb:71:92:7c:ff:10:7d:
c6:3e:0f:38:49:48:85:01:49:8f:2c:47:04:a7:dc:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:13:CB:DE:D7:2A:E2:FB:21:0B:EB:48:21:1B:37:7B:68:4F:3D:90
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/xBPL3tcq4vshC-tIIRs3e2hPPZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.88.0/22
176.102.120.0/21
176.103.240.0/21
176.116.232.0/22
178.212.184.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:51:71:43:85:bf:4d:9a:e8:40:5a:37:6a:40:c3:34:0d:e5:
63:9f:5a:be:33:48:4c:c7:fb:be:e7:2d:6a:bb:00:62:c9:09:
3c:b6:48:22:91:36:64:f2:f4:e1:f1:70:91:7b:a8:6e:a5:29:
37:c0:db:90:06:02:32:60:cb:12:3e:f1:95:ca:47:5c:23:a3:
67:5c:17:b1:a2:c0:99:08:25:f6:54:53:ac:5b:20:af:9b:f5:
73:bd:58:3b:f0:5f:9b:15:aa:07:28:96:6e:8c:71:61:2b:30:
53:cd:e6:01:40:bb:99:95:b0:f7:34:ae:a3:1f:5b:03:89:c1:
4a:c8:f3:46:98:e1:8e:33:1f:09:0a:09:a2:23:3c:eb:7c:e4:
14:16:88:b2:5c:89:b2:d8:63:93:3e:74:bc:89:97:c3:56:c4:
f3:45:42:db:bd:f2:f9:d0:a9:24:65:98:71:0e:8a:cc:a9:a4:
ce:c1:79:61:2b:5b:e4:3d:e5:80:42:be:e9:ca:e5:fa:b6:28:
5e:04:de:cb:63:39:f5:3f:e6:2d:0b:2a:93:73:0f:d4:cd:3c:
bf:32:ad:b2:6d:35:09:be:40:7c:87:d3:51:15:7b:00:dc:d6:
49:31:70:a0:df:29:ea:06:12:3c:b7:46:bd:ab:ce:7a:79:bb:
3f:2b:20:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:03:10 2025 by rpki-client