Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/99Vo969Em8LkeNv_IEQWiRSe1Gg.roa
File: 99Vo969Em8LkeNv_IEQWiRSe1Gg.roa (raw, json)
Hash identifier: ib05Tj/mzC3vKYmwadOgxUV6hLtmBIgF3iebD7jXMLg=
Subject key identifier: F7:D5:68:F7:AF:44:9B:C2:E4:78:DB:FF:20:44:16:89:14:9E:D4:68
Certificate issuer: /CN=856356462b6fa07f39ce2083ce457d6541890e48
Certificate serial: 018A1D1E9DC9DF4980C42D8CDFFE2C3B6F2E
Authority key identifier: 85:63:56:46:2B:6F:A0:7F:39:CE:20:83:CE:45:7D:65:41:89:0E:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWNWRitvoH85ziCDzkV9ZUGJDkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/99Vo969Em8LkeNv_IEQWiRSe1Gg.roa
Signing time: Tue 22 Aug 2023 12:01:00 +0000
ROA not before: Tue 22 Aug 2023 12:01:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 176.126.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:1e:9d:c9:df:49:80:c4:2d:8c:df:fe:2c:3b:6f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856356462b6fa07f39ce2083ce457d6541890e48
Validity
Not Before: Aug 22 12:01:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7d568f7af449bc2e478dbff20441689149ed468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:10:7b:1c:0a:ac:4d:b2:df:b0:77:5a:26:c3:
11:86:ad:12:8a:08:e1:1a:72:31:af:55:d7:96:d7:
6e:35:46:ef:10:23:77:8c:34:d2:31:9e:60:57:e4:
f6:5f:7e:42:a8:f7:79:87:2c:7b:ab:77:fc:a9:09:
48:d4:f7:5f:08:f8:03:92:24:f6:fb:2b:85:8a:98:
08:c8:0b:33:a5:ba:b8:c4:66:a2:89:36:00:2c:d3:
b4:c0:f4:c8:e0:ce:dc:0b:61:e5:f0:b8:be:3f:d4:
ed:ab:c3:a6:00:f1:e0:ac:17:4f:81:14:10:23:e2:
64:d2:60:d3:2b:65:a5:d9:1f:c2:7a:5c:aa:07:c8:
3c:2c:39:e2:91:69:26:ea:f5:97:9c:ee:b4:1b:24:
f1:df:00:99:39:6f:25:51:21:9f:85:ca:79:45:c3:
af:38:ac:60:fe:0f:bf:e5:05:36:93:ae:b6:a5:41:
f0:01:8e:6c:e0:8b:4c:b2:d0:ed:37:98:e7:80:24:
25:16:e0:c6:61:e7:9e:4f:bd:8a:d8:8b:97:69:ed:
68:79:84:5c:47:8d:1c:f0:81:71:e1:a7:7a:60:ca:
0f:61:90:29:ae:89:0c:b7:32:48:93:20:aa:cd:cd:
b1:0b:b5:65:76:5c:31:84:c4:12:29:a5:ec:14:da:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D5:68:F7:AF:44:9B:C2:E4:78:DB:FF:20:44:16:89:14:9E:D4:68
X509v3 Authority Key Identifier:
keyid:85:63:56:46:2B:6F:A0:7F:39:CE:20:83:CE:45:7D:65:41:89:0E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWNWRitvoH85ziCDzkV9ZUGJDkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/99Vo969Em8LkeNv_IEQWiRSe1Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/hWNWRitvoH85ziCDzkV9ZUGJDkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.99.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ee:50:ac:11:ea:bc:d3:bc:d7:f7:c0:e5:64:2a:88:04:2f:
33:e7:b0:05:3d:8e:1d:b9:ca:2a:28:39:e8:95:52:26:dd:58:
72:6c:25:e5:cd:81:9c:01:68:14:36:a6:a6:c3:f4:3b:89:4a:
46:71:0c:eb:38:1d:a5:26:00:21:87:5f:3a:19:2b:5e:a8:da:
d5:b6:4e:00:39:07:ef:3e:c5:b2:f9:17:bf:42:f2:84:38:d2:
65:a3:5e:9a:df:36:52:0a:e5:d1:f1:94:77:92:70:78:25:1a:
84:67:a8:5d:b4:bd:3b:13:6a:29:92:ad:1f:75:93:68:39:6d:
b9:6e:f1:53:b7:de:05:8c:2a:06:10:ba:4a:55:44:7c:34:76:
c4:de:c9:35:66:c5:f5:75:33:2e:bc:e9:02:34:bc:af:67:cb:
17:5b:a3:02:79:54:76:15:25:68:02:d6:99:cc:37:c2:a5:54:
eb:4b:84:4b:49:4c:dd:06:33:cd:8c:52:37:88:36:a3:26:e0:
da:16:c9:05:61:f3:4d:32:00:eb:fa:40:4c:fd:f6:fc:9d:18:
34:d9:cf:a0:4a:a9:8f:53:f3:32:cc:5e:74:d9:bc:a8:36:4e:
06:eb:7b:27:cd:f6:5c:3d:51:18:a6:4c:a4:89:fb:f6:09:54:
f2:4c:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:33 2025 by rpki-client