Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/3GgX7NW8G2Z5xjTJkNAigWeRylk.roa
File: 3GgX7NW8G2Z5xjTJkNAigWeRylk.roa (raw, json)
Hash identifier: ZF1k2ju4jnR2Rmd4QLtM4JVp0KPtIpRclteWtL03q7Y=
Subject key identifier: DC:68:17:EC:D5:BC:1B:66:79:C6:34:C9:90:D0:22:81:67:91:CA:59
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018DBDD57E6019584D3B3DF081746BE97875
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/3GgX7NW8G2Z5xjTJkNAigWeRylk.roa
Signing time: Sun 18 Feb 2024 20:08:21 +0000
ROA not before: Sun 18 Feb 2024 20:08:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 176.221.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bd:d5:7e:60:19:58:4d:3b:3d:f0:81:74:6b:e9:78:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Feb 18 20:08:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc6817ecd5bc1b6679c634c990d022816791ca59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:a1:e7:93:86:4b:ac:b1:52:3c:c9:ab:e0:
d4:96:a9:f4:5b:03:fc:44:98:b2:3b:74:15:af:02:
19:8d:8f:d8:23:f7:86:17:38:ba:f0:1b:8e:f8:9a:
70:61:79:36:48:09:68:cd:a4:f2:c1:75:0e:5a:6c:
ef:3a:e3:c5:64:a3:95:d2:ee:c5:09:17:cf:9a:1a:
cc:6c:b2:31:cf:4e:96:a9:99:c5:85:cc:b8:40:78:
8d:10:f9:5e:06:c3:b6:ce:d3:9d:79:46:88:d1:99:
63:af:89:69:b4:18:ff:bf:e5:ea:57:26:c0:d9:43:
1b:f5:dc:d1:e6:10:3c:f6:f1:9b:f3:26:74:24:b1:
82:76:53:a5:8f:78:d1:34:94:9c:f5:d3:e7:77:ef:
11:62:c2:05:fe:44:ac:98:1d:f8:56:6e:e4:f6:50:
6c:e7:9e:c8:0f:ee:56:61:a6:84:56:f4:54:05:f3:
8c:4f:b6:c2:f5:2f:47:04:95:0c:fd:1d:e2:21:e7:
d1:d2:c5:cb:20:1e:d0:69:8a:40:da:20:ae:28:e8:
a9:82:3f:83:44:83:b8:41:62:d1:6f:f0:1f:e9:eb:
53:bc:81:8d:13:d9:3f:13:02:d0:4c:bf:f8:e8:c8:
dc:99:b6:b9:c0:24:15:0f:d9:94:c7:8e:0d:07:8f:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:68:17:EC:D5:BC:1B:66:79:C6:34:C9:90:D0:22:81:67:91:CA:59
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/3GgX7NW8G2Z5xjTJkNAigWeRylk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.20.0/23
Signature Algorithm: sha256WithRSAEncryption
70:cc:75:05:55:c1:d4:2f:99:19:cb:47:91:e8:7c:b0:7a:5a:
ce:0f:cb:d0:be:17:6c:a9:b9:4f:8b:3e:5d:87:5e:ea:ad:43:
36:16:4b:24:64:5f:d7:2a:cd:bf:7c:53:bf:61:ce:99:96:bf:
ce:f0:82:55:a9:24:8d:c9:a4:b4:22:43:0b:1e:86:20:7a:27:
51:7a:48:b7:b9:e1:8f:a0:f9:c7:10:46:3a:67:b1:1a:ac:11:
6c:ca:3d:b8:2b:f9:02:b4:57:79:3f:23:f8:51:e9:15:a2:6e:
fc:17:96:07:4a:d6:36:93:fb:11:61:4a:76:9b:d6:9b:0f:fb:
a2:0f:12:f2:ff:ac:c6:29:1b:71:c0:ee:29:68:9a:50:de:2d:
df:81:c1:02:1a:2b:66:53:3e:b3:de:5a:65:7b:98:d9:d1:82:
bf:eb:b5:5d:13:0c:8c:51:5f:3c:96:4c:89:73:23:ac:f2:77:
45:03:ac:22:57:a0:41:66:43:99:86:6c:97:66:fa:30:e5:ff:
c6:74:c4:2b:5a:62:23:c5:81:ef:a3:a6:51:c7:bc:09:90:f3:
ce:4b:08:3c:73:58:dd:f6:c1:f2:04:13:0a:22:48:26:c9:3a:
39:af:b5:d0:ec:10:66:b0:3a:e4:6a:e3:e0:6f:2f:36:cc:99:
89:ae:02:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY291X5gGVhNOz3wgXRr6Xh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjQwMjE4MjAwODIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzY4MTdlY2Q1YmMxYjY2NzljNjM0Yzk5MGQwMjI4MTY3OTFjYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt42h55OGS6yxUjzJq+DUlqn0WwP8
RJiyO3QVrwIZjY/YI/eGFzi68BuO+JpwYXk2SAlozaTywXUOWmzvOuPFZKOV0u7F
CRfPmhrMbLIxz06WqZnFhcy4QHiNEPleBsO2ztOdeUaI0Zljr4lptBj/v+XqVybA
2UMb9dzR5hA89vGb8yZ0JLGCdlOlj3jRNJSc9dPnd+8RYsIF/kSsmB34Vm7k9lBs
557ID+5WYaaEVvRUBfOMT7bC9S9HBJUM/R3iIefR0sXLIB7QaYpA2iCuKOipgj+D
RIO4QWLRb/Af6etTvIGNE9k/EwLQTL/46Mjcmba5wCQVD9mUx44NB4+buQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNxoF+zVvBtmecY0yZDQIoFnkcpZMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvM0dnWDdOVzhHMlo1eGpUSmtOQWlnV2VSeWxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsN0UMA0G
CSqGSIb3DQEBCwUAA4IBAQBwzHUFVcHUL5kZy0eR6HywelrOD8vQvhdsqblPiz5d
h17qrUM2FkskZF/XKs2/fFO/Yc6Zlr/O8IJVqSSNyaS0IkMLHoYgeidReki3ueGP
oPnHEEY6Z7EarBFsyj24K/kCtFd5PyP4UekVom78F5YHStY2k/sRYUp2m9abD/ui
DxLy/6zGKRtxwO4paJpQ3i3fgcECGitmUz6z3lple5jZ0YK/67VdEwyMUV88lkyJ
cyOs8ndFA6wiV6BBZkOZhmyXZvow5f/GdMQrWmIjxYHvo6ZRx7wJkPPOSwg8c1jd
9sHyBBMKIkgmyTo5r7XQ7BBmsDrkauPgby82zJmJrgLo
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:10 2025 by rpki-client