Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/hptAWO3sQ0MzovsIOIq7XjKx9QY.roa
File: hptAWO3sQ0MzovsIOIq7XjKx9QY.roa (raw, json)
Hash identifier: RkNwY7prFGxzpl3RMdMwYz4yBlqdjR7F/b5H1+0hdGk=
Subject key identifier: 86:9B:40:58:ED:EC:43:43:33:A2:FB:08:38:8A:BB:5E:32:B1:F5:06
Certificate issuer: /CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Certificate serial: 0185708CA1A61CC08E94D740663DFB074D55
Authority key identifier: F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/hptAWO3sQ0MzovsIOIq7XjKx9QY.roa
Signing time: Mon 02 Jan 2023 03:35:42 +0000
ROA not before: Mon 02 Jan 2023 03:35:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211190
IP address blocks: 176.126.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:a1:a6:1c:c0:8e:94:d7:40:66:3d:fb:07:4d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Validity
Not Before: Jan 2 03:35:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=869b4058edec434333a2fb08388abb5e32b1f506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2b:f8:92:fd:b4:71:b8:86:85:b4:cf:9d:a3:
54:9c:15:33:d0:17:c5:00:2b:a8:08:ea:55:00:51:
ea:6d:c2:0c:c7:3b:a4:70:aa:49:68:93:fb:dc:e5:
5f:8f:45:22:37:b0:34:81:b8:56:83:5d:17:64:a7:
4e:01:d6:a6:db:e8:73:71:c7:d3:ef:01:c1:86:1a:
1c:ae:10:fb:79:c6:b9:21:ab:1c:ae:6e:e8:aa:24:
32:56:6b:0d:6a:82:2b:4b:8c:f9:b1:bc:29:68:4e:
f8:7a:6b:b5:58:db:3f:41:ba:d5:f9:1e:b1:c2:92:
08:e8:10:f4:4e:af:74:c1:a1:7c:4a:31:b3:1a:9c:
06:31:1e:ad:ec:fd:8e:8f:04:18:85:8b:28:5f:25:
38:42:50:ea:ce:be:d7:86:2d:44:94:5e:35:ad:2a:
26:23:2b:b1:11:c1:f0:cc:e4:a9:76:aa:e6:61:90:
1e:ac:62:46:a5:de:eb:27:25:a3:d4:a5:f4:a0:a3:
65:45:35:21:f1:1f:97:44:96:17:0e:05:3e:0f:06:
e0:fd:5e:01:fd:56:de:9f:ad:bb:9a:1f:71:34:02:
38:1d:e0:30:1f:03:28:2f:59:02:02:55:a5:7f:63:
86:94:62:5c:cd:4f:7d:ff:ba:7e:ce:35:82:77:d7:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9B:40:58:ED:EC:43:43:33:A2:FB:08:38:8A:BB:5E:32:B1:F5:06
X509v3 Authority Key Identifier:
keyid:F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/hptAWO3sQ0MzovsIOIq7XjKx9QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/9OLptfuWen09eND7uTDAgOydkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:3f:e4:61:8f:4f:87:6f:ce:38:03:d1:36:69:4f:29:ca:1c:
ad:35:44:90:54:df:9b:cb:6e:84:45:13:40:4b:21:d7:80:a2:
b8:17:b6:a8:86:5f:6f:18:6c:94:99:89:09:9c:bd:3d:b8:0b:
e5:5c:3c:66:b4:89:f7:a9:2c:04:02:da:59:92:41:05:e3:49:
c6:dd:5d:13:ea:57:b8:4c:7c:7e:1f:aa:ef:62:b4:85:67:b1:
ec:55:cf:e3:37:48:b8:aa:2c:9c:72:4a:0b:c2:e0:59:10:3f:
2b:c8:f9:a7:3d:a8:5d:9e:25:5a:ed:80:3d:03:1e:0a:77:c3:
a6:1b:87:85:17:c3:00:57:ae:08:f7:d8:d7:0e:98:72:a0:d8:
80:f6:40:ca:b3:32:d7:fc:35:ae:50:cb:35:73:31:9c:fa:e9:
f2:0c:f3:a5:40:f6:bb:2b:52:98:d3:2b:5e:55:3c:3f:80:8c:
e1:b7:8e:fb:aa:10:53:da:76:40:ce:1d:36:34:4c:be:fa:a7:
d4:a8:c6:d7:df:83:95:b7:30:71:23:d4:cc:6c:2d:86:9f:6a:
24:af:41:8d:85:22:93:94:44:d2:9c:39:35:7c:41:39:8a:2d:
01:b9:18:2d:2c:cf:8c:56:df:40:f0:37:cf:52:5a:f8:70:1e:
5e:fa:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:15 2025 by rpki-client