Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/H3_z0MHtoBru_5dtKJwALeNJwyU.roa
File: H3_z0MHtoBru_5dtKJwALeNJwyU.roa (raw, json)
Hash identifier: 1yVY7SfMl78d4ZfydLKHYqbDR19+VMCVI2Slo0t3Pdo=
Subject key identifier: 1F:7F:F3:D0:C1:ED:A0:1A:EE:FF:97:6D:28:9C:00:2D:E3:49:C3:25
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01899142933978198E4FE8CA9219D98B49F6
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/H3_z0MHtoBru_5dtKJwALeNJwyU.roa
Signing time: Wed 26 Jul 2023 08:13:26 +0000
ROA not before: Wed 26 Jul 2023 08:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48165
IP address blocks: 176.124.112.0/24 maxlen: 24
185.187.152.0/24 maxlen: 24
176.124.113.0/24 maxlen: 24
185.187.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:42:93:39:78:19:8e:4f:e8:ca:92:19:d9:8b:49:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jul 26 08:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f7ff3d0c1eda01aeeff976d289c002de349c325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:66:2b:d7:cb:8d:48:e3:3e:e5:6b:97:64:df:
e2:16:76:bd:11:04:5d:74:ef:b7:99:e9:bf:6f:83:
33:e9:bc:e0:76:b9:9f:e0:40:ba:b3:3a:d6:50:e5:
2b:0f:98:a8:94:81:9b:8d:0a:75:52:f7:9d:db:d0:
dd:72:94:ae:d3:4f:1b:d9:91:cc:4a:2e:1a:a7:5a:
8e:12:77:a1:dd:47:9b:db:b1:c8:f0:d2:33:61:24:
38:ec:1d:23:27:0d:05:94:97:59:8c:0a:d2:f2:73:
8c:21:60:41:96:45:3d:f5:f8:2d:b5:8b:cb:4f:fe:
39:88:30:07:98:f3:5c:67:66:c5:3e:24:a5:81:f4:
b6:9c:bc:85:2c:48:1f:48:10:05:14:8f:8d:2d:c5:
34:b9:23:45:fa:a9:1c:6e:9a:e1:8e:c2:25:61:18:
14:35:72:73:77:14:9b:fa:45:a1:29:5e:aa:90:a1:
1f:a4:1a:21:01:45:a1:7a:97:7d:a0:f8:c5:c6:e6:
2a:ab:cb:82:b4:48:51:29:e4:4a:58:04:38:68:9a:
d8:3e:de:32:cd:ed:5d:ae:59:83:a7:62:70:68:29:
5a:0f:a7:df:6d:7c:65:97:da:8f:cf:ec:e1:c4:30:
62:06:65:b9:9a:7e:ed:28:d6:85:3d:2e:a0:cd:bb:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7F:F3:D0:C1:ED:A0:1A:EE:FF:97:6D:28:9C:00:2D:E3:49:C3:25
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/H3_z0MHtoBru_5dtKJwALeNJwyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.112.0/23
185.187.152.0/23
Signature Algorithm: sha256WithRSAEncryption
77:f4:13:d4:46:07:29:10:f5:aa:d1:1d:7f:e0:5a:66:f6:fd:
65:85:27:c6:4a:ab:0d:f5:1a:71:95:01:1d:b5:7f:c1:dd:37:
03:49:a4:73:27:36:93:b7:ab:3b:42:0c:0f:65:ae:2e:78:3d:
1a:a6:aa:bc:ae:3a:f8:cc:e3:36:6d:45:c1:b2:ec:21:f8:99:
ae:ca:df:42:0c:98:52:c2:23:d9:07:bb:9d:50:37:78:db:c6:
09:ce:1a:7d:0b:fe:52:1d:f9:d0:e7:50:3e:34:23:53:e1:01:
31:74:a4:ba:ab:c8:5c:48:1b:7b:e1:cd:64:cb:fb:16:e3:4e:
d2:91:b4:c9:10:85:7c:f3:47:fa:f6:d3:8f:a3:e4:ae:84:65:
cc:51:cc:1b:e8:4a:e2:e7:2f:82:73:c1:0c:cf:f1:bb:c4:20:
b0:77:1a:74:26:5a:29:52:a4:e1:19:84:0a:78:a3:f7:fc:fe:
42:e1:21:33:6e:54:3b:82:f5:43:fe:ac:7b:94:ca:b4:54:cc:
87:11:31:52:5b:ce:fe:13:e9:08:6d:fd:23:75:f1:6d:41:38:
ff:2e:81:d4:31:d9:88:11:8a:c7:82:77:93:85:3d:95:de:14:
18:76:8c:f0:f4:5b:90:bb:75:e2:e0:0d:f4:3c:cd:e4:e0:e5:
63:6c:f3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:40 2025 by rpki-client