Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/h1bxrd9ZQSHnWEsCAF5tNHnFIO4.roa
File: h1bxrd9ZQSHnWEsCAF5tNHnFIO4.roa (raw, json)
Hash identifier: bzjeTqPcjaJhOMAteDMwXrvi1f6qBvlBTlDeNbXA0mc=
Subject key identifier: 87:56:F1:AD:DF:59:41:21:E7:58:4B:02:00:5E:6D:34:79:C5:20:EE
Certificate issuer: /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Certificate serial: 01942067F7D9EF06958EFFA567C95809F6CC
Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/h1bxrd9ZQSHnWEsCAF5tNHnFIO4.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8473
IP address blocks: 176.124.224.0/23 maxlen: 23
176.124.224.0/24 maxlen: 24
176.124.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f7:d9:ef:06:95:8e:ff:a5:67:c9:58:09:f6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8756f1addf594121e7584b02005e6d3479c520ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:35:05:2c:e8:48:f4:61:20:e5:3f:46:45:41:
71:8c:77:c6:bf:40:46:8d:8c:93:db:b9:02:ad:c8:
1f:24:bc:40:ca:40:43:a8:bd:d7:e0:ad:7c:10:a1:
ab:51:9a:7a:25:5a:71:87:85:c3:f5:b2:99:ba:21:
f3:4b:f6:57:59:05:cd:09:d7:5a:44:11:65:c4:f8:
28:20:62:2a:82:92:d8:d2:8c:f3:65:89:fe:9d:6f:
3e:6d:35:c2:e4:81:71:ef:fc:e0:7d:ef:38:e5:f1:
fa:44:06:fa:17:bd:e4:79:02:e9:eb:7e:ab:4b:1a:
56:4f:c0:13:7e:41:88:75:04:68:3e:e4:28:8b:a3:
e8:9b:e4:a8:24:e8:b8:5a:19:d4:b8:d7:70:22:14:
7d:67:b9:60:f7:00:e1:1e:a1:61:a1:dd:a6:8d:31:
06:38:e2:af:0d:b3:2a:30:05:ff:3f:44:fb:0a:c5:
56:72:3d:62:32:15:0f:ca:1a:89:ba:ba:18:a6:23:
1e:6e:f4:5a:6e:26:0e:b3:5e:28:05:68:1f:46:24:
d3:b1:46:3a:63:6e:fe:4e:f5:93:dc:de:b0:5e:b3:
05:8f:fd:12:a3:76:af:70:22:c7:13:db:ae:75:bb:
76:28:8d:02:cb:45:7e:9c:6e:e0:4a:bc:22:e9:1a:
67:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:56:F1:AD:DF:59:41:21:E7:58:4B:02:00:5E:6D:34:79:C5:20:EE
X509v3 Authority Key Identifier:
keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/h1bxrd9ZQSHnWEsCAF5tNHnFIO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.224.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:7a:78:da:10:04:f9:41:b7:29:cb:e8:04:7a:17:0e:60:56:
8e:d5:e0:5a:e3:ed:a6:c5:e0:5a:89:44:4e:9b:f8:6a:58:f4:
af:f4:51:4a:72:31:47:f6:8c:b1:ec:b8:01:34:2a:46:58:52:
79:0b:d6:2a:95:07:6e:70:29:91:9e:46:00:f7:05:ed:6b:e6:
6a:ed:fd:ce:63:d0:f7:96:5e:86:df:22:50:71:b9:31:00:3d:
b0:1c:db:8a:b5:1b:f9:d2:11:69:8b:63:9c:39:12:be:c8:f5:
9a:32:99:79:b2:fa:6c:ed:6d:8f:45:78:c9:ac:8d:93:9d:30:
6f:43:25:33:fd:c3:ea:9b:95:e3:a7:99:03:98:32:cb:03:10:
4c:94:23:3b:57:1d:aa:ec:54:d9:31:5f:80:23:05:cc:27:a6:
93:15:b7:0d:fb:4c:b1:f8:6c:e7:9e:07:a3:51:23:70:50:2a:
a5:4b:b8:cd:ba:6e:27:f7:85:b3:3a:57:78:e0:9b:78:26:a5:
28:57:76:e0:47:35:41:be:b4:14:28:b7:a8:c5:03:ae:81:b2:
b8:7f:11:af:77:78:7b:88:21:22:8f:0a:c3:81:b6:6a:51:bd:
e1:31:2d:87:e9:78:18:d7:75:ef:88:ea:23:69:03:4b:d5:ad:
33:d2:74:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:28:08 2025 by rpki-client