Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/u65K3Z6c8cEFoabHDI08d9qletY.roa
File: u65K3Z6c8cEFoabHDI08d9qletY.roa (raw, json)
Hash identifier: +EQ6CVv9NIB6ifa9zKvdc1dLZdxOT6FRzta+1KWOQcw=
Subject key identifier: BB:AE:4A:DD:9E:9C:F1:C1:05:A1:A6:C7:0C:8D:3C:77:DA:A5:7A:D6
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018FD9BA2B1A01B80C424F3BAE990CD5F077
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/u65K3Z6c8cEFoabHDI08d9qletY.roa
Signing time: Sun 02 Jun 2024 16:13:27 +0000
ROA not before: Sun 02 Jun 2024 16:13:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 131775
IP address blocks: 176.221.26.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d9:ba:2b:1a:01:b8:0c:42:4f:3b:ae:99:0c:d5:f0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jun 2 16:13:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbae4add9e9cf1c105a1a6c70c8d3c77daa57ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:64:87:da:6d:e8:f2:b6:0f:99:a4:0d:fd:
04:62:6d:b0:f5:9f:96:64:2c:82:99:ad:4d:20:7c:
04:09:43:41:98:f3:55:db:2d:c6:c9:fe:34:c5:b0:
98:4c:91:45:56:cd:89:b8:32:a5:d8:64:56:f6:7f:
f6:65:4f:cc:4a:1b:c9:72:06:3c:fa:7a:0f:03:9d:
aa:f4:d1:f4:e6:5b:b2:53:54:9e:c2:e2:e7:e7:fb:
47:76:cb:ec:a8:f1:56:7d:a6:66:80:f9:b9:5a:23:
fd:69:81:94:8a:a7:ac:8c:27:e9:3a:34:c6:c1:23:
fc:4e:02:1d:ab:e9:2a:73:3b:55:03:60:f1:6c:ff:
40:e6:e4:a5:44:36:b2:78:b8:6b:cf:0e:e7:77:9a:
36:40:b9:04:d7:80:a2:a1:cb:78:3d:cf:68:24:48:
d6:fe:98:de:02:0a:a5:43:ce:05:a4:65:39:df:73:
ab:2c:9c:7c:16:a7:18:70:ea:20:81:92:9e:16:9f:
5b:62:48:ec:ae:a1:96:8e:60:ab:fa:c4:d8:91:52:
04:2a:98:5e:1c:8c:d3:2a:17:a9:4d:9f:05:bd:1a:
b6:ff:a0:f6:71:5a:d3:50:5c:1e:68:96:b3:78:e8:
3d:bb:87:67:b6:74:b3:f6:67:cb:c9:94:ae:76:eb:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AE:4A:DD:9E:9C:F1:C1:05:A1:A6:C7:0C:8D:3C:77:DA:A5:7A:D6
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/u65K3Z6c8cEFoabHDI08d9qletY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.26.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:ad:a6:c6:57:3a:fe:e2:57:91:61:15:7a:7b:d2:af:0c:f9:
67:e3:25:5d:da:36:e1:7d:4e:86:ea:85:78:5d:ed:83:e7:76:
ba:59:0f:1b:2a:0f:8c:30:44:5c:41:0c:ba:2f:69:97:23:a5:
8a:9d:40:55:4c:38:27:1c:06:84:33:32:15:1d:08:5f:dd:58:
42:1f:93:34:e1:fd:f4:84:06:26:2a:f5:fa:05:26:cb:16:16:
21:bb:61:9a:2b:dd:48:13:94:28:6e:8f:71:35:5e:6e:01:43:
3e:ca:40:6b:37:c7:2c:08:33:79:85:54:a3:e4:9e:a3:eb:6b:
48:37:59:6d:70:b8:4c:a7:1f:76:17:b7:5c:d0:ed:b2:e3:23:
d4:c4:67:70:90:14:09:f0:36:f7:b3:2e:a4:6a:eb:1b:71:93:
e9:7d:7a:71:dd:86:55:e1:5c:18:64:ba:8c:35:af:d6:7b:19:
a3:01:94:5c:8c:56:6b:99:0e:28:2d:2c:08:d4:d7:ff:53:bc:
0f:a5:72:dc:69:d1:41:82:cf:ba:56:ff:1b:5d:26:f0:fb:a9:
4a:e1:1b:0d:76:0a:34:b9:5a:be:10:e3:04:f6:99:57:01:24:
ca:09:62:a1:c2:3f:33:e1:ba:12:6b:3e:21:fc:6a:7c:77:b3:
70:11:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:27 2025 by rpki-client