Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/Z7h5qadGJoQ6FUOneZqqbZNwHng.roa
File: Z7h5qadGJoQ6FUOneZqqbZNwHng.roa (raw, json)
Hash identifier: l8WEv/DVA3/x8QQSyaVc6ay+0r3lEE5lR9pYa08V1FE=
Subject key identifier: 67:B8:79:A9:A7:46:26:84:3A:15:43:A7:79:9A:AA:6D:93:70:1E:78
Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Certificate serial: 019425FC3C258D45B6A6C8595A84F264BD7D
Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/Z7h5qadGJoQ6FUOneZqqbZNwHng.roa
Signing time: Thu 02 Jan 2025 07:47:54 +0000
ROA not before: Thu 02 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 176.100.147.0/24 maxlen: 24
176.100.150.0/24 maxlen: 24
176.100.156.0/24 maxlen: 24
176.100.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3c:25:8d:45:b6:a6:c8:59:5a:84:f2:64:bd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938
Validity
Not Before: Jan 2 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67b879a9a74626843a1543a7799aaa6d93701e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:c0:15:b9:87:1c:95:8e:f1:03:6f:c5:67:
8a:3c:dc:a1:85:1e:cd:bc:d1:d4:aa:4a:eb:8a:23:
1a:f3:58:09:8f:7e:0d:7c:ce:d3:a1:79:bb:19:64:
60:37:4a:17:39:25:0b:8c:1c:85:91:2c:45:68:7f:
55:be:97:d0:5c:a3:f3:aa:9f:79:8f:10:8f:28:7d:
27:4a:e4:ec:04:24:c9:41:c6:e1:23:6e:00:78:15:
92:89:58:56:0d:9d:9e:c2:2a:91:ed:70:82:e4:46:
b6:10:f5:ed:c2:bf:55:cf:5d:28:c7:e3:f8:18:23:
29:82:a6:61:cc:ec:38:7b:9a:0c:0d:e1:c3:0e:7b:
10:f9:a3:9a:79:b8:3a:4c:19:91:34:c4:83:8a:3c:
65:e5:dd:d4:4c:6e:2e:fc:51:e7:ca:47:38:52:c2:
47:e9:2f:41:b2:53:7a:92:7a:f9:27:17:9f:e0:a8:
68:a1:6a:04:39:f1:c1:91:15:74:5f:ba:42:e7:ba:
e0:3c:f9:49:46:d3:fc:16:de:3f:96:c6:07:02:3b:
24:2e:22:ea:dd:69:ab:16:85:8f:8f:07:65:e1:2c:
f8:6c:0b:7b:4a:27:9c:45:77:ec:4b:6f:fa:e1:e6:
af:65:27:26:58:40:49:de:08:99:52:f0:c0:0a:a6:
c0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B8:79:A9:A7:46:26:84:3A:15:43:A7:79:9A:AA:6D:93:70:1E:78
X509v3 Authority Key Identifier:
keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/Z7h5qadGJoQ6FUOneZqqbZNwHng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.147.0/24
176.100.150.0/24
176.100.156.0/23
Signature Algorithm: sha256WithRSAEncryption
71:06:20:6a:12:0f:57:d8:d3:a5:b7:e5:da:dd:c7:f7:2f:70:
12:0a:53:14:1c:8b:09:ca:95:ab:2b:64:93:26:25:f7:48:62:
f8:12:a9:07:ff:a4:75:ec:76:42:1f:5c:3b:96:dd:38:bd:a5:
fe:26:1b:08:de:00:50:d4:66:74:0a:fc:d3:ca:ab:05:cb:7c:
04:cc:3c:60:ee:7b:1a:c9:eb:b2:bf:30:07:9c:88:1e:3b:c6:
d9:b8:6a:fe:92:d1:46:ca:c4:6a:42:38:9e:54:43:ec:1d:f2:
8f:1d:51:6e:52:bd:0d:17:f3:40:a2:00:bb:87:7b:71:b5:ca:
2f:91:71:ac:c4:e3:e1:31:d8:ea:04:70:10:7c:ae:34:20:6d:
0c:36:dc:90:22:99:f6:86:41:7b:61:63:3e:40:ec:91:41:ea:
b1:34:87:20:87:a9:86:60:56:5e:ac:5b:77:bc:be:d8:69:62:
be:ea:22:f0:d1:3d:75:a8:ff:78:fe:f2:cc:ec:63:87:19:3e:
fb:01:e8:c0:66:6c:b4:f9:33:57:5d:b8:fb:b5:b5:bf:da:55:
4a:ed:6d:f3:2a:9a:e6:c7:f8:e1:f2:10:d7:da:1b:5e:7f:c9:
ca:ea:bf:41:b4:e3:23:5e:5c:0b:7a:d2:ad:72:aa:d2:ff:5a:
0e:f7:86:da
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQl/DwljUW2pshZWoTyZL19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZjM2YjBhZGVlNmNiNTUxODc2M2I1YmM4ZWFhM2Q0MWYy
M2U5MzgwHhcNMjUwMTAyMDc0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2I4NzlhOWE3NDYyNjg0M2ExNTQzYTc3OTlhYWE2ZDkzNzAxZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqLAFbmHHJWO8QNvxWeKPNyhhR7N
vNHUqkrriiMa81gJj34NfM7ToXm7GWRgN0oXOSULjByFkSxFaH9VvpfQXKPzqp95
jxCPKH0nSuTsBCTJQcbhI24AeBWSiVhWDZ2ewiqR7XCC5Ea2EPXtwr9Vz10ox+P4
GCMpgqZhzOw4e5oMDeHDDnsQ+aOaebg6TBmRNMSDijxl5d3UTG4u/FHnykc4UsJH
6S9BslN6knr5Jxef4KhooWoEOfHBkRV0X7pC57rgPPlJRtP8Ft4/lsYHAjskLiLq
3WmrFoWPjwdl4Sz4bAt7SiecRXfsS2/64eavZScmWEBJ3giZUvDACqbA5QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGe4eamnRiaEOhVDp3maqm2TcB54MB8GA1UdIwQY
MBaAFIPzawre5stVGHY7W8jqo9QfI+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGIt
YWY2NGYzZmEyNDU5LzEvWjdoNXFhZEdKb1E2RlVPbmVacXFiWk53SG5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGItYWY2NGYzZmEyNDU5
LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsGSTAwQA
sGSWAwQBsGScMA0GCSqGSIb3DQEBCwUAA4IBAQBxBiBqEg9X2NOlt+Xa3cf3L3AS
ClMUHIsJypWrK2STJiX3SGL4EqkH/6R17HZCH1w7lt04vaX+JhsI3gBQ1GZ0CvzT
yqsFy3wEzDxg7nsayeuyvzAHnIgeO8bZuGr+ktFGysRqQjieVEPsHfKPHVFuUr0N
F/NAogC7h3txtcovkXGsxOPhMdjqBHAQfK40IG0MNtyQIpn2hkF7YWM+QOyRQeqx
NIcgh6mGYFZerFt3vL7YaWK+6iLw0T11qP94/vLM7GOHGT77AejAZmy0+TNXXbj7
tbW/2lVK7W3zKprmx/jh8hDX2htef8nK6r9BtOMjXlwLetKtcqrS/1oO94ba
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:05:44 2025 by rpki-client