Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/dhaZ9rJEY3VSapdxzWuOpswb-w0.roa
File: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (raw, json)
Hash identifier: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=
Subject key identifier: 76:16:99:F6:B2:44:63:75:52:6A:97:71:CD:6B:8E:A6:CC:1B:FB:0D
Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial: 0194236992ED79BBF2278900D3923FD085A7
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/dhaZ9rJEY3VSapdxzWuOpswb-w0.roa
Signing time: Wed 01 Jan 2025 19:48:28 +0000
ROA not before: Wed 01 Jan 2025 19:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197829
IP address blocks: 176.12.80.0/21 maxlen: 21
176.12.80.0/22 maxlen: 22
176.12.80.0/23 maxlen: 23
176.12.82.0/23 maxlen: 23
176.12.84.0/23 maxlen: 23
176.12.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:92:ed:79:bb:f2:27:89:00:d3:92:3f:d0:85:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Validity
Not Before: Jan 1 19:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=761699f6b2446375526a9771cd6b8ea6cc1bfb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:0d:ad:4f:91:52:12:d8:4e:a4:4c:80:f8:
66:e3:9c:6f:a0:8b:80:83:d8:2d:5b:61:15:2d:80:
41:46:7c:16:cd:6b:d1:c4:a6:c1:5c:45:48:ff:cf:
1b:1c:fe:e2:c2:48:04:08:2b:98:41:7e:34:63:ac:
b6:37:3f:9e:d6:1e:53:ae:34:89:fd:72:d8:40:5e:
f7:63:39:ba:62:c0:fb:83:78:b8:94:9b:53:fc:63:
29:b7:ba:39:b5:ea:c5:9e:c6:c4:97:05:50:cf:b4:
78:02:8e:25:b4:16:dc:56:9f:ab:9e:68:53:fb:95:
2e:5b:16:39:40:67:60:09:b6:ee:3c:4e:31:12:70:
32:d8:f4:73:57:b3:14:24:93:84:c9:91:38:6b:e5:
a0:8b:af:4a:72:df:8a:20:35:a8:c1:c2:ae:60:18:
ed:3b:90:63:87:3d:14:c9:6a:6c:6c:13:96:a3:eb:
8d:b9:77:fe:be:4f:17:82:69:e4:16:0e:a9:25:33:
c3:0e:4e:b2:c4:ba:dc:ed:10:e8:e5:91:6b:20:e8:
0b:f4:22:ff:27:ea:71:4c:3d:89:07:2f:d6:79:6b:
16:ab:d2:e4:7a:34:ad:75:e8:9e:9a:81:12:79:e7:
f9:75:51:3c:06:b7:f5:8f:82:cc:9b:a2:44:85:ce:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:16:99:F6:B2:44:63:75:52:6A:97:71:CD:6B:8E:A6:CC:1B:FB:0D
X509v3 Authority Key Identifier:
keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/dhaZ9rJEY3VSapdxzWuOpswb-w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.12.80.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:af:3b:ca:5e:f1:34:bb:80:20:6b:fb:6a:c6:9f:cd:9b:e3:
ee:2e:19:b3:1e:b1:da:32:de:4e:5b:be:30:63:a1:ba:8d:a4:
31:f4:82:ff:84:45:20:8e:d8:0e:7f:95:c8:8e:2e:21:bf:53:
f7:3f:9c:0b:7a:bd:55:c1:cd:21:70:a3:d0:6b:e9:b5:3f:b3:
b2:d9:e9:1e:86:48:8f:75:53:d9:54:3e:d0:3f:45:ad:e1:2d:
fb:42:d0:7b:a4:d9:a8:c7:28:e2:a2:5f:76:d4:d1:25:93:ea:
da:e3:77:ed:1b:a0:19:62:80:cc:08:e4:12:ca:54:ed:22:3d:
3b:f4:b2:d5:81:5b:37:8d:6c:49:39:14:90:62:93:de:7f:c3:
d0:d2:39:df:7b:78:90:77:ca:50:bd:74:52:b3:95:47:2c:e9:
3b:52:fd:dc:bb:52:57:8d:79:a3:54:6d:82:3b:e2:16:c8:1d:
a5:12:4a:21:89:51:85:7d:67:8e:a5:3f:a8:f6:aa:11:5f:72:
0a:81:12:45:9d:60:24:b3:4e:c0:73:11:11:6a:a6:8d:5f:70:
c5:1b:5e:c6:9c:12:f9:b4:74:cb:cf:00:f1:4c:70:1a:f1:b6:
46:97:f4:db:27:27:04:79:d2:63:7b:58:06:32:f6:73:15:9f:
c4:93:a0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:19 2025 by rpki-client