Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/DrfGPep8pQRknCdAdTzMf0PuUck.roa
File: DrfGPep8pQRknCdAdTzMf0PuUck.roa (raw, json)
Hash identifier: L7aN/pZAluYxX0MkFlofCql/7QdYjTrfLJjaJIwKRpE=
Subject key identifier: 0E:B7:C6:3D:EA:7C:A5:04:64:9C:27:40:75:3C:CC:7F:43:EE:51:C9
Certificate issuer: /CN=211b57e26f1c5a004dfbb0fed34736da9088ae3c
Certificate serial: 018570704415FBFBAC238F16E493A2655B8C
Authority key identifier: 21:1B:57:E2:6F:1C:5A:00:4D:FB:B0:FE:D3:47:36:DA:90:88:AE:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRtX4m8cWgBN-7D-00c22pCIrjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/DrfGPep8pQRknCdAdTzMf0PuUck.roa
Signing time: Mon 02 Jan 2023 03:04:43 +0000
ROA not before: Mon 02 Jan 2023 03:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210052
IP address blocks: 176.118.178.0/24 maxlen: 24
176.118.179.0/24 maxlen: 24
176.118.176.0/24 maxlen: 24
176.118.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:44:15:fb:fb:ac:23:8f:16:e4:93:a2:65:5b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=211b57e26f1c5a004dfbb0fed34736da9088ae3c
Validity
Not Before: Jan 2 03:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0eb7c63dea7ca504649c2740753ccc7f43ee51c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:0d:94:6f:b7:78:71:15:3c:a9:d0:9e:f5:
e6:83:bc:a5:38:e9:e0:60:4b:c7:83:60:af:f9:4e:
f5:33:2c:6a:87:96:ba:17:f4:60:ae:57:dd:25:61:
49:53:58:b6:11:da:e4:f7:a8:62:ef:a0:68:41:b1:
d6:e1:e4:5f:dd:f7:ac:17:9d:0f:7c:1a:12:96:35:
f1:ca:13:76:b2:55:09:6c:80:55:6d:a8:fa:65:b5:
8d:29:a9:ab:f9:b9:41:ee:d1:89:04:80:28:8a:30:
e4:dc:c9:38:b4:f8:02:e5:c7:38:89:a9:f8:1e:d6:
86:ad:db:a1:eb:ae:c0:a4:aa:10:94:5b:6b:73:d2:
51:48:78:30:75:ee:06:cb:c3:dc:1d:14:8c:4c:1a:
84:5d:4a:6b:f3:1b:78:0e:98:ae:7b:da:27:a3:f3:
07:02:63:87:7c:a7:bc:74:18:4a:00:da:50:39:c4:
fe:a9:0c:c7:52:e6:1b:b7:f4:e1:35:e5:04:db:1d:
1f:d8:b1:9c:eb:2b:5a:3d:e7:9f:3c:42:37:02:5b:
b0:d3:7e:97:4a:18:8a:03:01:74:08:71:d1:67:a0:
8b:84:09:60:d2:ec:a2:2f:b0:bd:a1:fb:eb:49:3c:
18:f9:ae:6b:d3:6d:05:80:6e:74:84:5a:78:ff:64:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B7:C6:3D:EA:7C:A5:04:64:9C:27:40:75:3C:CC:7F:43:EE:51:C9
X509v3 Authority Key Identifier:
keyid:21:1B:57:E2:6F:1C:5A:00:4D:FB:B0:FE:D3:47:36:DA:90:88:AE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRtX4m8cWgBN-7D-00c22pCIrjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/DrfGPep8pQRknCdAdTzMf0PuUck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/e66adf-0afa-4884-b321-115594be647b/1/IRtX4m8cWgBN-7D-00c22pCIrjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.176.0/22
Signature Algorithm: sha256WithRSAEncryption
06:68:a4:fe:1b:91:28:77:77:76:72:58:65:8d:28:32:30:60:
2f:2d:19:df:94:0a:b1:c4:c5:b2:7a:5b:d3:4a:17:62:c5:12:
dc:b5:03:7b:a4:78:00:73:ca:5a:9a:58:de:d3:4b:7a:15:c2:
5c:9d:22:e6:a0:f4:52:86:a3:93:99:4a:be:65:16:14:af:e7:
92:94:8b:80:fd:75:98:99:00:41:c1:a0:00:94:d7:16:f2:ad:
83:22:85:91:c1:4e:67:74:78:6f:14:43:4d:67:d3:94:fd:d1:
9e:1c:fc:f7:07:7e:03:97:97:2b:c2:20:ed:78:3d:e6:fe:ff:
0f:5d:9b:ed:d2:f3:bc:21:8b:fb:1f:4b:23:f6:4e:6a:29:9e:
aa:d8:34:1a:ee:97:cd:a2:d9:6d:9b:8a:98:23:f2:74:c6:d0:
07:8a:df:43:b8:35:1a:d3:17:e3:a1:62:72:b4:f4:a2:bb:ed:
6f:24:2d:9a:23:f9:9f:7f:28:f2:50:35:d3:cd:3a:cf:1c:31:
f9:03:2e:e2:62:e9:e4:e5:cd:93:2c:32:06:a7:17:a3:f9:b2:
4d:11:bf:29:30:bf:00:58:66:fc:20:ce:c0:b9:d4:94:41:06:
cd:f5:3d:39:4d:c5:5c:57:37:53:e4:b1:d2:8b:1d:cb:8d:4f:
b5:19:f2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:23:45 2025 by rpki-client