Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/mr0Qmg6B1Dp0nUYB8mL2kDbIwGw.roa
File: mr0Qmg6B1Dp0nUYB8mL2kDbIwGw.roa (raw, json)
Hash identifier: ERgCSQN4c5MdCicHq/TzNWqkbQXrvPDz+0NRhXqUSG4=
Subject key identifier: 9A:BD:10:9A:0E:81:D4:3A:74:9D:46:01:F2:62:F6:90:36:C8:C0:6C
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018D9A674452770740AA35CE80DD801D6F0C
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/mr0Qmg6B1Dp0nUYB8mL2kDbIwGw.roa
Signing time: Sun 11 Feb 2024 23:01:15 +0000
ROA not before: Sun 11 Feb 2024 23:01:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 176.221.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9a:67:44:52:77:07:40:aa:35:ce:80:dd:80:1d:6f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Feb 11 23:01:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9abd109a0e81d43a749d4601f262f69036c8c06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:b9:74:35:cf:e1:c6:8d:e9:ec:70:48:c7:
4b:90:26:fa:fb:71:20:e7:a8:c8:6e:d8:25:fe:34:
b8:5f:a9:9b:83:67:5a:da:6f:49:50:d7:4b:80:7a:
01:37:5a:dc:b9:21:4d:1e:f2:cd:db:62:ef:47:3a:
63:54:a1:13:19:78:be:75:27:07:c1:af:46:66:f2:
f0:eb:68:26:66:72:5a:de:18:a0:be:04:c1:8a:33:
31:e3:75:8e:5f:12:4e:21:99:91:ed:0b:ba:51:52:
f3:c7:ba:c4:d0:88:af:7e:0d:82:d3:e4:0a:51:4f:
41:c1:ac:e0:2d:c0:ed:72:14:82:50:1c:35:71:58:
04:9a:09:00:61:70:57:90:f1:34:be:74:4a:13:9b:
dc:ee:41:00:a4:e2:d3:13:4c:47:b3:8e:8c:7d:6a:
22:3b:37:b6:45:10:88:25:d4:2e:cc:37:c6:d7:ed:
46:74:68:9c:3c:ee:45:42:49:4c:8d:d9:38:18:5e:
0d:d2:7a:37:87:38:94:de:5e:05:e4:ca:14:e0:1f:
b3:f7:89:89:9e:78:39:67:e0:5b:19:ea:07:e9:06:
dd:cb:0b:f1:ae:44:f1:31:0c:f4:09:a0:51:62:d0:
e8:0d:93:99:5e:00:05:47:25:0b:79:74:8d:59:1c:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BD:10:9A:0E:81:D4:3A:74:9D:46:01:F2:62:F6:90:36:C8:C0:6C
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/mr0Qmg6B1Dp0nUYB8mL2kDbIwGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.24.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:20:4c:5b:38:2b:2c:80:0a:c4:05:1e:8b:56:e0:a3:a9:16:
94:68:27:73:ee:d0:c0:58:5c:a4:5b:ea:fa:8c:15:e4:7d:fc:
26:0f:dc:b7:a1:b8:a0:e7:ca:90:34:99:45:1b:a1:ee:1c:c2:
fb:6b:a1:dd:de:c4:88:91:36:53:e3:23:3f:f0:2d:1e:43:32:
65:1c:17:b0:f2:d3:1b:00:2f:ab:6f:04:3d:83:1f:ed:8c:95:
f1:48:ef:70:3f:dd:61:4b:b6:cf:3b:32:37:56:c6:81:f5:5f:
37:33:0d:b9:84:c0:ea:22:ff:0d:21:05:99:e6:b7:51:bd:b7:
99:f4:72:8a:4c:57:46:da:50:53:86:14:83:64:d4:10:a0:02:
14:54:54:5b:b5:25:13:9d:91:91:4c:17:a8:1d:b0:b6:f8:9a:
47:08:20:fb:79:27:64:09:17:95:e4:2a:a2:28:88:f7:1e:1f:
aa:95:e0:29:98:80:09:41:0d:01:aa:e3:a3:3d:7d:81:0e:df:
4c:c7:a6:d5:58:8e:4f:01:f0:e5:c6:fe:3b:23:fa:39:fb:2d:
5f:1e:77:31:a3:e5:21:57:16:47:7b:17:d5:c6:02:aa:09:9c:
9e:1b:af:bf:b9:44:d7:26:00:06:c5:75:7e:79:96:50:9f:39:
38:ea:3d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:13 2025 by rpki-client