Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/h8vzAOCgg9qFWale6i7QUPlSOHw.roa
File: h8vzAOCgg9qFWale6i7QUPlSOHw.roa (raw, json)
Hash identifier: mGUB1fbRQyokITgOyjM2RPSWtCfMlEbNC45XbheQA+A=
Subject key identifier: 87:CB:F3:00:E0:A0:83:DA:85:59:A9:5E:EA:2E:D0:50:F9:52:38:7C
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 0194C67A8883E17775B98C26B309C4C3AB61
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/h8vzAOCgg9qFWale6i7QUPlSOHw.roa
Signing time: Sun 02 Feb 2025 11:45:06 +0000
ROA not before: Sun 02 Feb 2025 11:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57564
IP address blocks: 176.102.128.0/19 maxlen: 19
2a02:2088:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c6:7a:88:83:e1:77:75:b9:8c:26:b3:09:c4:c3:ab:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Feb 2 11:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87cbf300e0a083da8559a95eea2ed050f952387c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:73:a8:89:99:cc:42:60:0a:d2:40:f6:06:
84:8a:eb:e3:f2:57:da:16:c8:22:df:41:0e:3a:19:
1c:74:09:56:e0:8d:c2:63:3d:66:fd:9b:03:e9:72:
61:3a:98:c5:05:86:d1:30:9a:ee:3f:f2:61:ab:dd:
e5:50:14:06:ef:7e:dc:89:6b:2b:23:7d:1e:9f:d2:
19:ec:b5:f9:90:53:69:d8:1e:56:d7:fa:30:1e:42:
3e:0e:82:c3:2f:6f:2e:29:3b:5f:bc:6d:b2:e1:9e:
f0:6d:b1:d0:ba:ba:1b:6f:df:82:31:ee:b0:fb:36:
eb:f9:57:09:1a:b5:dc:1a:43:4b:55:ec:f3:b8:be:
82:0e:21:45:93:38:0b:4c:76:7f:66:23:e4:6d:0a:
6f:6d:2b:6f:e1:6e:84:23:45:69:46:8a:87:49:9b:
86:10:ed:a7:bb:02:7d:ed:65:74:ee:df:75:2a:f4:
50:65:b1:17:13:0c:bd:fd:72:43:4d:61:a1:e7:65:
bd:b0:54:92:81:d6:ce:e6:ff:b6:20:40:af:56:d2:
4a:1b:13:fd:8c:1e:5f:8f:48:c7:d8:5f:93:62:f0:
64:a6:00:bc:25:63:48:7d:eb:54:2f:2f:3b:2a:6f:
0c:c9:f9:df:0c:91:4a:df:6f:ca:14:7f:63:04:9c:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CB:F3:00:E0:A0:83:DA:85:59:A9:5E:EA:2E:D0:50:F9:52:38:7C
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/h8vzAOCgg9qFWale6i7QUPlSOHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.128.0/19
IPv6:
2a02:2088:1000::/36
Signature Algorithm: sha256WithRSAEncryption
13:af:a7:8a:a0:6f:4f:26:fc:fa:3d:d7:35:da:ab:08:04:a7:
8c:b7:5c:e5:d3:34:52:92:c6:1f:04:a2:4d:25:1f:d6:7c:e6:
d9:6d:5c:52:c4:e6:17:cc:4c:9f:5b:d2:cb:90:18:38:75:6f:
fa:32:1d:d3:27:92:e2:5e:2f:e5:8b:66:b4:cc:77:ef:0f:fd:
25:63:ec:8c:bc:4d:08:a0:87:24:3b:19:42:e5:25:9d:fd:64:
6c:3c:38:d4:7d:e7:36:b9:79:ca:1f:76:7a:21:c3:88:0a:da:
76:15:9e:cd:4f:1d:db:94:0d:25:e8:f7:dd:5b:ca:98:35:56:
9c:84:3b:0c:86:0b:5d:6d:9b:ff:1a:15:13:68:8f:7c:9e:af:
1f:bf:df:53:ea:ca:d9:d1:9b:41:26:73:8a:04:d2:f9:12:62:
07:c0:d2:ac:8f:96:06:67:d8:01:4e:ef:26:08:9a:0a:26:24:
90:8f:83:ec:9a:5d:8a:90:ec:82:1e:a1:40:34:c1:92:ef:95:
b3:bb:82:95:80:9d:4f:a6:89:89:af:8b:3c:1e:cb:21:10:4d:
c2:45:72:af:68:1d:78:30:61:1f:f2:3f:1d:8f:5a:a1:d5:21:
d2:e7:b5:7f:ba:bc:3e:35:d7:7a:a8:19:38:8e:d1:2c:67:14:
4d:a3:73:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:28:43 2025 by rpki-client