Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/mEi44tndVjCeFfwGi-YMNfGXqhE.roa
File: mEi44tndVjCeFfwGi-YMNfGXqhE.roa (raw, json)
Hash identifier: sP86CWmQ5uCPIkioqT5hDJBh9pQNbMxt0JbKJSQElSs=
Subject key identifier: 98:48:B8:E2:D9:DD:56:30:9E:15:FC:06:8B:E6:0C:35:F1:97:AA:11
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018BA36CC49FB69516A75DBBD5DAA9CFCC78
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/mEi44tndVjCeFfwGi-YMNfGXqhE.roa
Signing time: Mon 06 Nov 2023 06:58:16 +0000
ROA not before: Mon 06 Nov 2023 06:58:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39600
IP address blocks: 176.221.30.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a3:6c:c4:9f:b6:95:16:a7:5d:bb:d5:da:a9:cf:cc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Nov 6 06:58:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9848b8e2d9dd56309e15fc068be60c35f197aa11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:b1:23:2c:76:8c:03:fc:5e:6e:7a:e7:e8:
d3:6f:d4:83:05:e5:f4:42:fd:0d:89:49:b4:b7:32:
37:e5:87:44:d4:4d:cc:47:0e:9d:d4:5e:be:89:5a:
43:4a:fa:42:3c:bc:0a:f3:00:92:af:72:8a:fa:f8:
39:80:aa:ad:c4:f8:a6:44:a4:84:92:86:b4:c6:16:
67:96:47:f7:6d:3e:c9:e2:f8:cd:1d:14:50:f2:84:
8b:8b:0c:83:87:7d:f3:e5:62:f5:54:68:fb:f8:3a:
c6:a7:7d:0e:26:27:b0:c3:9d:44:99:9e:b1:33:e6:
b8:e9:7b:2e:7a:fe:45:55:42:90:0f:d6:86:e3:6b:
d9:a9:48:bb:eb:20:4b:d1:80:22:ee:2b:96:79:48:
9e:68:4d:be:eb:4c:0b:61:7d:93:bd:ee:6b:4e:03:
64:1f:b7:7a:d3:38:eb:9b:c6:d3:ad:84:54:e6:31:
76:eb:13:0b:da:cb:e8:6d:df:38:32:c4:33:a9:af:
4b:e7:c2:c4:aa:1c:57:ee:7d:85:9b:32:77:cd:0b:
1b:21:f5:ba:cf:35:ee:39:06:b6:e3:9a:0e:fe:94:
12:85:18:81:52:fc:22:36:b7:a2:3b:d5:18:43:96:
f2:f8:94:08:e9:18:0a:03:7e:d9:10:96:c7:9e:ea:
80:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:48:B8:E2:D9:DD:56:30:9E:15:FC:06:8B:E6:0C:35:F1:97:AA:11
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/mEi44tndVjCeFfwGi-YMNfGXqhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.30.0/23
Signature Algorithm: sha256WithRSAEncryption
06:01:0c:76:53:2c:da:48:1d:3e:5e:8b:8b:a8:4c:44:39:e3:
1f:6d:f5:1a:99:92:c9:4c:ad:d2:43:87:f4:0f:39:8d:5c:09:
98:a9:e4:ae:16:a9:63:31:cf:f7:62:4e:d7:bf:18:19:07:20:
c7:05:de:8a:db:59:7e:78:40:03:ef:0b:cd:ce:19:b7:19:79:
37:c8:ee:0e:0e:03:33:1a:2e:75:3f:75:66:50:80:38:4d:01:
64:dd:72:42:9c:b5:b0:a8:ec:e4:60:b9:2e:09:b8:45:15:55:
79:56:ea:fe:cf:d9:bf:0b:db:57:3d:30:32:1d:8c:ce:10:60:
d6:d0:2f:e5:a7:6a:0e:11:7b:c1:21:f0:db:4a:67:02:36:c0:
22:b9:8d:5b:e9:4b:4c:5b:80:00:2f:ad:25:44:73:bb:e6:b5:
3f:0b:48:c1:3a:17:45:97:42:d9:24:15:c4:6c:bc:52:a9:4f:
34:10:0e:b6:2e:3f:a8:1c:bf:bc:54:56:7e:32:72:c8:ab:89:
12:f8:b0:81:6d:07:32:30:d4:95:a3:c8:88:90:e4:3b:49:f1:
ba:cb:56:eb:3c:82:2c:ed:5e:34:3d:ba:30:1e:45:07:58:3a:
a0:e4:6e:3e:ae:e1:a5:64:6e:c3:5e:17:e5:7e:54:23:48:a4:
61:d5:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:54 2025 by rpki-client