Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/D6pvp9exGoAv4Fjni5vR2Sb2Jhg.roa
File: D6pvp9exGoAv4Fjni5vR2Sb2Jhg.roa (raw, json)
Hash identifier: 7ummeZWhXvxjEX54lXU+dJ5Fl+ldbxWm0dddjLg/WHA=
Subject key identifier: 0F:AA:6F:A7:D7:B1:1A:80:2F:E0:58:E7:8B:9B:D1:D9:26:F6:26:18
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 019422202ABB3762E2BF4A79B0DE6B6E1E9C
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/D6pvp9exGoAv4Fjni5vR2Sb2Jhg.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201012
IP address blocks: 176.114.124.0/24 maxlen: 24
176.114.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2a:bb:37:62:e2:bf:4a:79:b0:de:6b:6e:1e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0faa6fa7d7b11a802fe058e78b9bd1d926f62618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:a9:4c:64:ae:94:52:ce:d8:52:d2:f7:05:
2d:d9:c4:00:50:6c:b0:7e:29:10:a5:1e:ac:17:1e:
0a:6a:c7:9c:b7:10:bd:a7:4c:7d:8c:2a:97:2c:0d:
cd:ff:bf:15:16:d6:61:15:17:03:ae:2f:6f:85:25:
4c:d0:71:ca:31:9e:45:1e:2a:66:0b:e8:f2:51:4c:
e6:47:2a:46:bb:0d:5b:68:21:6d:6f:b7:6f:08:39:
b3:56:53:4b:67:ac:55:a2:2d:87:cd:86:b8:96:b5:
62:3e:db:79:d4:72:c7:fa:08:37:0e:66:1d:af:e5:
19:f8:4b:6f:f6:9e:0b:89:f4:d8:32:40:24:16:15:
cc:96:1a:8f:8f:ea:06:b7:78:39:5a:34:ad:50:c8:
79:78:40:01:44:69:26:3f:86:07:e9:c1:9a:e4:fe:
e2:d8:4b:7a:f0:28:e3:22:10:df:21:a6:68:d0:b0:
67:34:95:b9:ce:48:82:76:61:c1:64:ef:92:16:71:
60:c0:5f:9b:63:d5:7d:c2:33:8a:86:4b:76:2d:30:
0b:e3:2c:0c:8c:41:60:14:30:fb:f3:fc:06:c9:7b:
f0:b1:75:04:26:56:05:4d:c9:44:7e:67:22:05:e8:
16:62:35:84:42:2b:8c:15:04:6a:6a:fc:b1:b6:d0:
47:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AA:6F:A7:D7:B1:1A:80:2F:E0:58:E7:8B:9B:D1:D9:26:F6:26:18
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/D6pvp9exGoAv4Fjni5vR2Sb2Jhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.114.124.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:21:2c:15:34:41:f4:5c:79:cb:21:ef:b8:3c:f5:94:4a:63:
2b:48:2c:88:75:89:9b:d8:87:0d:65:41:00:19:b4:2f:e6:49:
b2:1f:58:cd:59:30:e0:dc:0f:dd:70:20:2b:b8:69:52:26:5f:
99:7c:75:95:f4:48:3a:cb:18:c6:64:db:41:18:3e:62:2f:ed:
3c:06:bb:bd:3c:d1:a4:3e:dd:ec:fd:d1:73:41:c9:51:d5:f8:
b4:b0:32:fa:f7:c4:8e:a4:14:6e:61:47:e9:4a:5f:4d:37:87:
3d:f9:aa:71:1c:95:56:a2:fe:5a:8d:11:d1:65:1b:45:2b:18:
77:c4:00:d9:93:0e:39:23:d1:59:b4:d4:64:87:0b:59:45:3e:
24:1d:a7:8c:d5:c6:60:83:cd:69:fd:5f:ed:03:87:0b:41:14:
e3:41:62:88:87:ca:12:e3:b3:18:88:f6:b6:cf:c8:e3:6a:90:
c4:2c:0c:ed:28:d2:49:a5:8c:01:08:29:b7:0f:75:36:ad:9e:
fc:fa:ba:b3:23:32:ec:2e:bb:d0:4b:d4:1d:7a:21:d0:17:a4:
62:5b:ea:96:ba:e0:54:ae:ce:85:48:d4:d9:0c:c1:e4:75:df:
a3:96:e2:e5:25:8c:03:08:f6:dc:61:ed:3e:99:ee:e6:be:4d:
6c:69:6f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:37:38 2025 by rpki-client