Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6efa0b-b838-47dd-b4ed-2306d0ae3fcd/1/CuHBTG1GlE7lAKXmdrD66CvfUIo.roa
File: CuHBTG1GlE7lAKXmdrD66CvfUIo.roa (raw, json)
Hash identifier: S7bKtSHIQq002cMbpg7EZVHINsAJiQ1M+KnX4ooMuRg=
Subject key identifier: 0A:E1:C1:4C:6D:46:94:4E:E5:00:A5:E6:76:B0:FA:E8:2B:DF:50:8A
Certificate issuer: /CN=bc61bfbac54675fe0a8a2f17c73e936e4e1151a5
Certificate serial: 0182D09B9E341A37B5129115E4BBF6718CE3
Authority key identifier: BC:61:BF:BA:C5:46:75:FE:0A:8A:2F:17:C7:3E:93:6E:4E:11:51:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGG_usVGdf4Kii8Xxz6Tbk4RUaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/6efa0b-b838-47dd-b4ed-2306d0ae3fcd/1/CuHBTG1GlE7lAKXmdrD66CvfUIo.roa
Signing time: Wed 24 Aug 2022 16:07:15 +0000
ROA not before: Wed 24 Aug 2022 16:07:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 176.126.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:9b:9e:34:1a:37:b5:12:91:15:e4:bb:f6:71:8c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc61bfbac54675fe0a8a2f17c73e936e4e1151a5
Validity
Not Before: Aug 24 16:07:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ae1c14c6d46944ee500a5e676b0fae82bdf508a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:d5:eb:dc:52:f4:ae:5e:8e:f7:78:dc:2e:
ca:f9:81:fb:f2:04:78:2f:9d:0c:6e:11:84:40:e6:
2c:cf:bc:47:d0:3c:bd:ab:af:77:4c:04:f0:4d:56:
ce:6d:7c:a1:02:6f:77:c8:a0:27:a5:48:ca:0c:57:
bc:6c:7c:49:50:7c:bc:60:a7:a6:f1:09:79:eb:70:
4f:64:f3:aa:52:0f:e4:42:63:06:a7:c4:dc:a1:5e:
cc:1d:5c:d6:e0:1d:11:c1:58:4c:63:30:f7:0f:50:
53:9d:74:3e:2d:6f:12:98:b4:92:e6:e1:d8:9f:d7:
a4:f4:0f:16:9e:86:11:8e:23:43:06:c8:5f:a8:da:
3e:fb:ba:d2:0f:3e:4a:db:45:fc:ee:0e:aa:24:6d:
8b:32:8c:55:3c:1e:7f:4c:ee:d3:af:6d:3b:62:a4:
d9:08:00:09:bd:18:5d:d6:e8:af:ad:b1:84:24:53:
8f:07:a0:ba:98:17:a4:22:59:3b:76:4f:6d:6f:0c:
2d:1c:0e:5f:f2:37:2f:b4:51:d7:68:e5:c8:72:2e:
37:b5:88:55:01:9c:c6:6d:ef:b8:2a:30:b2:da:87:
e8:e9:83:be:92:e2:f7:61:96:48:a0:7e:ae:ed:d0:
b5:36:df:e1:90:43:05:ea:98:17:a5:be:cc:51:7d:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E1:C1:4C:6D:46:94:4E:E5:00:A5:E6:76:B0:FA:E8:2B:DF:50:8A
X509v3 Authority Key Identifier:
keyid:BC:61:BF:BA:C5:46:75:FE:0A:8A:2F:17:C7:3E:93:6E:4E:11:51:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGG_usVGdf4Kii8Xxz6Tbk4RUaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6efa0b-b838-47dd-b4ed-2306d0ae3fcd/1/CuHBTG1GlE7lAKXmdrD66CvfUIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6efa0b-b838-47dd-b4ed-2306d0ae3fcd/1/vGG_usVGdf4Kii8Xxz6Tbk4RUaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.113.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:b7:3f:a0:74:0a:79:02:e9:61:87:83:9e:21:bb:e9:dc:12:
b9:98:0a:0a:7b:c0:a6:a5:33:5a:11:6c:17:0d:ca:8a:4d:b0:
92:bd:e6:83:b2:44:35:71:ca:51:8b:4b:8e:41:a3:56:d8:47:
5e:7d:d0:21:73:04:d0:49:63:79:75:52:65:82:eb:68:44:5c:
34:9e:53:e3:de:01:8f:c4:c5:5f:db:44:75:17:10:ca:79:33:
f4:28:2c:18:27:00:4b:86:76:79:1a:6d:39:da:e3:b1:64:ad:
79:0e:81:0f:fc:de:00:96:b6:d9:a5:3a:61:6f:58:dc:fc:a5:
e2:87:e8:4c:3e:31:eb:a3:f3:61:74:d2:50:99:96:f2:18:93:
25:fd:33:82:3a:46:9d:df:84:72:9a:04:1f:cd:93:93:53:06:
b6:47:71:91:c4:5c:6b:90:31:b5:47:b9:a7:1d:08:03:9c:ee:
a5:e0:bf:3a:ff:c0:d0:78:77:c1:50:5e:8d:83:a2:d7:cd:61:
2c:3f:fc:4b:7b:2f:76:27:25:cf:e9:35:55:66:2b:a2:ae:29:
49:3d:7c:ed:11:01:76:1f:43:95:8d:73:0a:d1:41:92:bd:11:
4c:f6:59:49:13:74:1a:0f:59:cd:1d:6c:d0:c5:ba:b2:a6:2d:
7d:a7:c6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:44 2025 by rpki-client