Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84abd2-f594-448e-9f00-404885ad50dc/1/TB6FdNVBBpUctdXEZi0ZVFlpGpw.roa
File: TB6FdNVBBpUctdXEZi0ZVFlpGpw.roa (raw, json)
Hash identifier: +VkToJuyh1qJP5LaoDZFS9EASpms3JQW3+j6ZN+Ou94=
Subject key identifier: 4C:1E:85:74:D5:41:06:95:1C:B5:D5:C4:66:2D:19:54:59:69:1A:9C
Certificate issuer: /CN=7bf3fb694f38ae79d2476cc4d3e4f8171579cc58
Certificate serial: 01EF6C2B
Authority key identifier: 7B:F3:FB:69:4F:38:AE:79:D2:47:6C:C4:D3:E4:F8:17:15:79:CC:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_P7aU84rnnSR2zE0-T4FxV5zFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84abd2-f594-448e-9f00-404885ad50dc/1/TB6FdNVBBpUctdXEZi0ZVFlpGpw.roa
Signing time: Sat 01 Jan 2022 05:52:13 +0000
ROA not before: Sat 01 Jan 2022 05:52:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201502
IP address blocks: 176.124.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32468011 (0x1ef6c2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf3fb694f38ae79d2476cc4d3e4f8171579cc58
Validity
Not Before: Jan 1 05:52:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c1e8574d54106951cb5d5c4662d195459691a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:8e:e3:d1:b5:4b:10:ea:e9:31:b7:55:f0:
02:fb:bf:56:62:d6:85:3c:27:01:a6:bd:38:a3:c4:
35:4f:ca:ac:2a:d8:01:0b:93:c2:f4:96:28:bf:ac:
65:c2:3c:04:67:a0:98:ed:0e:be:3f:cf:6f:f2:b4:
ab:68:fd:39:24:d2:6e:f3:9f:9b:d2:3d:bc:0b:8e:
88:a4:f3:d3:e1:15:3d:fd:05:0c:86:02:84:b1:26:
d1:20:5f:71:5b:e2:f5:fc:2f:23:00:96:dd:ea:22:
fd:35:7d:0e:bc:bb:c4:58:be:78:4b:82:bc:05:6e:
58:da:c8:bb:d4:1a:ef:b9:24:43:cf:56:7e:18:02:
83:1d:27:12:9f:da:3c:29:d3:d6:74:f6:7c:61:f4:
fa:f9:d6:3a:d1:fe:63:ac:8f:e6:9a:c3:b6:39:38:
26:69:d2:db:15:92:3e:02:98:15:48:80:45:9c:c9:
1b:b6:d5:01:0e:8a:12:cc:ce:68:e1:5a:02:75:e7:
70:00:f6:be:e9:a9:c1:5c:91:05:73:21:09:59:46:
9e:42:c9:c5:06:a9:b2:65:3e:a4:33:af:04:b1:21:
af:fc:e7:51:c6:df:e4:f2:0d:68:71:71:f3:ea:40:
0b:7d:b9:c4:55:a0:cb:fb:5c:8c:64:e7:2c:60:45:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1E:85:74:D5:41:06:95:1C:B5:D5:C4:66:2D:19:54:59:69:1A:9C
X509v3 Authority Key Identifier:
keyid:7B:F3:FB:69:4F:38:AE:79:D2:47:6C:C4:D3:E4:F8:17:15:79:CC:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_P7aU84rnnSR2zE0-T4FxV5zFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84abd2-f594-448e-9f00-404885ad50dc/1/TB6FdNVBBpUctdXEZi0ZVFlpGpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84abd2-f594-448e-9f00-404885ad50dc/1/e_P7aU84rnnSR2zE0-T4FxV5zFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.114.0/24
Signature Algorithm: sha256WithRSAEncryption
93:0b:ec:f6:e4:f9:93:fd:e2:06:5a:b4:10:2d:2e:8e:80:4f:
f9:18:58:0b:89:6d:2d:e5:24:73:b8:e3:fa:fe:37:d5:4a:4d:
98:47:1b:c2:68:cc:1a:44:c7:ae:18:28:58:51:e0:d6:04:02:
b1:05:64:ab:d2:4d:0c:88:db:ce:d1:eb:6c:04:b8:f2:ba:3e:
c3:6f:0b:9f:78:83:55:17:18:54:7c:a8:05:04:c3:24:f4:02:
f4:da:db:15:37:08:fd:8c:fe:53:96:ff:f5:ef:a2:39:02:10:
40:62:18:24:0f:a2:10:a0:4b:7a:e7:b2:18:d2:1b:c1:ed:84:
b7:0f:cc:d3:27:50:90:16:bd:f9:5d:63:08:3b:a2:d2:8e:d1:
8e:2a:e3:c0:0c:e7:47:28:d0:7a:26:fa:17:cd:21:ff:f2:a9:
d9:3b:99:e4:d4:54:d3:22:7c:ca:c0:51:76:b6:2b:42:8e:74:
4d:58:b1:7d:18:0a:dd:4c:59:db:9b:f4:4f:87:ac:a7:1a:a7:
b9:7d:36:1c:32:87:84:a1:bc:d6:c9:8d:4e:52:98:f5:bf:67:
ca:2f:c5:eb:87:96:0a:e5:b7:49:4e:04:e7:ec:70:47:1b:06:
c7:e2:54:75:4f:d7:3f:4a:d6:6b:1a:06:3a:e9:c9:36:bc:ba:
81:f2:12:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:00 2025 by rpki-client