Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/xsal1CSDIvLe84vIOCJHNRNq2dQ.roa
File: xsal1CSDIvLe84vIOCJHNRNq2dQ.roa (raw, json)
Hash identifier: Pwv642C6/MXnMrsxuTczMnkE2GFA1zoA0p5SPRHaFeY=
Subject key identifier: C6:C6:A5:D4:24:83:22:F2:DE:F3:8B:C8:38:22:47:35:13:6A:D9:D4
Certificate issuer: /CN=3bf6a3db7a15ab57fabaa6feca289e7557715bac
Certificate serial: 9DA7F0
Authority key identifier: 3B:F6:A3:DB:7A:15:AB:57:FA:BA:A6:FE:CA:28:9E:75:57:71:5B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_aj23oVq1f6uqb-yiiedVdxW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/xsal1CSDIvLe84vIOCJHNRNq2dQ.roa
Signing time: Sat 01 Jan 2022 03:01:37 +0000
ROA not before: Sat 01 Jan 2022 03:01:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 176.116.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10332144 (0x9da7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf6a3db7a15ab57fabaa6feca289e7557715bac
Validity
Not Before: Jan 1 03:01:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6c6a5d4248322f2def38bc838224735136ad9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:5b:04:0d:72:98:9d:c9:80:0b:b1:5a:13:
cf:32:2f:32:78:3e:83:33:ae:ff:08:5d:92:16:f9:
e2:01:dc:e0:5f:c7:2f:ee:d9:e6:80:a2:34:c7:ce:
00:2f:57:6b:1d:89:30:8a:a3:50:cb:42:b0:5f:4d:
d8:2f:14:cc:8b:4f:47:ef:29:6c:91:41:06:03:a8:
3d:e7:54:75:f6:8c:2a:79:df:4f:38:b5:13:8e:5e:
4c:9c:8b:33:1d:a0:18:f4:58:bd:9e:0d:96:7a:1a:
c1:77:10:b4:e8:da:72:c7:53:bf:d9:ec:bb:4c:e8:
48:d7:33:34:e9:91:a4:a9:00:86:86:d6:22:d7:e4:
e6:d2:18:35:79:48:c3:f7:74:6f:64:fa:ae:32:a0:
1c:2c:7b:6e:d5:3e:29:a3:b9:2c:c0:3d:16:2b:00:
97:c7:a2:58:40:ce:50:8b:01:dc:a9:6a:77:70:d9:
7f:5c:f5:cb:3d:e6:e5:75:ed:cd:32:21:51:72:44:
8f:7b:73:fd:31:d0:e1:9c:9b:05:50:e7:7a:77:ea:
8f:28:71:b7:39:30:07:60:7b:d5:9a:73:5f:d0:31:
00:bd:4c:3a:7d:d6:bd:bb:25:ad:b9:60:2f:13:c7:
0b:62:38:68:b9:61:f4:64:d2:10:7c:3f:1f:b5:25:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C6:A5:D4:24:83:22:F2:DE:F3:8B:C8:38:22:47:35:13:6A:D9:D4
X509v3 Authority Key Identifier:
keyid:3B:F6:A3:DB:7A:15:AB:57:FA:BA:A6:FE:CA:28:9E:75:57:71:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_aj23oVq1f6uqb-yiiedVdxW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/xsal1CSDIvLe84vIOCJHNRNq2dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/O_aj23oVq1f6uqb-yiiedVdxW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:59:ee:7e:79:d5:ca:de:7e:1d:1b:fc:83:bd:9b:e0:8c:43:
ca:ef:ca:fd:c6:03:55:f2:dd:5a:fa:45:ae:ad:4d:51:c7:41:
1d:0e:cb:bf:ec:80:c0:fb:b4:b1:fc:12:e8:ef:d8:25:4b:f3:
e5:2a:cc:85:3e:4c:0b:9f:b8:1d:81:be:62:bb:5e:96:1c:e6:
40:27:46:87:56:c2:85:f1:fa:fa:33:50:07:66:d1:53:bf:19:
2d:fb:47:fd:63:ae:cc:5a:b5:f8:16:33:d6:77:ce:cf:6a:46:
71:b0:93:58:5a:fa:70:28:22:1c:19:a2:e2:17:77:41:35:2d:
76:1f:56:66:af:e9:45:18:cf:2a:1e:e8:04:ba:c2:3e:91:5d:
4e:b9:39:b3:60:be:04:7f:c9:6a:9f:23:c7:1a:d5:c2:bb:d9:
7d:c7:b6:ae:b1:18:4d:a8:e1:77:26:9c:da:5a:e1:53:3e:98:
c0:49:38:8b:82:28:2c:f6:ef:d0:dc:93:17:74:02:a8:e5:89:
6c:78:3b:6f:cb:1b:5e:1e:a5:7a:99:0b:19:ce:2b:9f:cc:33:
2e:fd:4b:cf:02:66:e4:7a:1f:05:c2:da:db:bc:81:a4:2e:53:
b0:00:f0:16:0c:99:95:d0:f2:d7:ee:79:9b:f1:69:21:71:5c:
82:24:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:07:46 2025 by rpki-client