Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/_bX74_w1oEwgLrgAZnQVIU-cSZ4.roa
File: _bX74_w1oEwgLrgAZnQVIU-cSZ4.roa (raw, json)
Hash identifier: KHaAUhSlqOxQmRu7iriH0WDDD4QIxMf3JGOZ+VNOHOo=
Subject key identifier: FD:B5:FB:E3:FC:35:A0:4C:20:2E:B8:00:66:74:15:21:4F:9C:49:9E
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747C2895E3CDBA28356C3662CDACA27
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/_bX74_w1oEwgLrgAZnQVIU-cSZ4.roa
Signing time: Thu 02 Jan 2025 13:50:01 +0000
ROA not before: Thu 02 Jan 2025 13:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198412
IP address blocks: 176.124.112.0/23 maxlen: 24
176.124.112.0/24 maxlen: 24
176.124.113.0/24 maxlen: 24
185.187.152.0/24 maxlen: 24
185.187.153.0/24 maxlen: 24
2a05:b0c0::/48 maxlen: 48
2a05:b0c1::/48 maxlen: 48
2a05:b0c4::/48 maxlen: 48
2a05:b0c4:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c2:89:5e:3c:db:a2:83:56:c3:66:2c:da:ca:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdb5fbe3fc35a04c202eb800667415214f9c499e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:4a:f0:80:69:7a:d6:6f:ba:63:7b:90:97:
42:64:b2:b3:82:07:08:b2:43:a0:93:98:e7:ee:f8:
eb:61:ca:62:b0:d8:55:04:75:11:51:4c:47:66:36:
df:fb:b7:51:d9:9a:7e:ef:6f:53:4c:d1:47:aa:73:
6f:c6:16:f7:50:39:2f:07:53:00:ef:54:15:60:34:
a0:7c:09:5f:ec:b4:94:19:07:cc:fa:43:22:c4:14:
0a:33:5e:ee:31:a9:21:7c:08:de:96:31:d2:99:11:
91:b7:ae:87:37:90:d2:00:c4:11:71:be:ec:51:0a:
53:fd:ee:69:e6:5f:0d:a7:66:17:a4:7c:9b:a9:1f:
b2:3c:c5:a4:d9:98:7a:29:8e:1e:1c:1d:c4:3d:df:
32:60:78:fb:d7:d7:02:55:f4:0a:6c:14:54:7d:43:
2b:34:f1:45:79:5e:2b:79:c1:1e:fd:13:85:bd:ee:
77:13:9d:4e:ba:57:87:28:eb:5f:63:bd:03:d8:1b:
7c:db:70:cf:ad:f9:40:11:15:dd:06:70:54:fe:ce:
e1:c1:a4:9e:86:1b:dc:95:a8:b8:cc:9f:a2:5d:75:
2b:e4:a2:d9:10:24:ae:b8:aa:6b:e0:71:62:46:d2:
7b:e8:63:f6:de:2b:6a:ce:c7:3f:2f:85:d1:71:84:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B5:FB:E3:FC:35:A0:4C:20:2E:B8:00:66:74:15:21:4F:9C:49:9E
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/_bX74_w1oEwgLrgAZnQVIU-cSZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.112.0/23
185.187.152.0/23
IPv6:
2a05:b0c0::/48
2a05:b0c1::/48
2a05:b0c4::/47
Signature Algorithm: sha256WithRSAEncryption
39:f4:bd:ea:4e:7a:64:48:29:5b:ed:bd:d7:62:5d:6f:1c:d8:
f9:b3:0a:1e:13:80:3f:85:f4:b4:68:e4:bc:de:19:6a:69:24:
68:36:a3:81:3a:a0:e3:6b:5a:0c:a2:f6:49:41:4f:a7:ce:11:
5a:c8:d4:11:49:57:38:6e:b2:96:be:3d:63:37:65:cb:a2:c8:
57:5e:4c:8b:b6:9a:cb:7a:5f:9c:04:58:36:49:c0:74:3a:2e:
9b:bf:51:62:2c:a2:97:c5:52:80:aa:07:28:23:0c:47:fc:d3:
67:86:30:1c:3c:d2:81:0c:52:8c:e7:48:8e:a8:67:a8:4a:e1:
db:26:8e:b9:1a:f9:b1:d3:b8:77:e5:e0:ab:b1:29:58:43:d6:
36:ff:7f:4c:e5:c9:30:a6:83:5c:99:1b:12:21:88:43:f7:c3:
42:28:70:d7:89:65:8e:66:4d:b4:f2:34:b3:4a:7c:f7:03:03:
3e:57:cd:ea:86:35:c2:c7:1d:19:68:a9:e5:0c:9a:a9:04:a9:
f9:33:74:5e:0e:49:51:d4:b4:e8:a0:0b:88:aa:90:3b:66:a6:
f0:ad:47:5d:72:7f:2b:64:25:b3:30:31:de:b2:57:74:18:cd:
08:1b:8b:55:13:f2:2c:00:6e:cd:27:fe:ca:af:0c:26:3d:73:
f2:8d:84:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:06:28 2025 by rpki-client