Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/ss1gihVVToicSpjIll9T_OSx9gU.roa
File: ss1gihVVToicSpjIll9T_OSx9gU.roa (raw, json)
Hash identifier: FhBaaNRK7eLkeLLuE6sWEDb9sN1AQ9CWDHvMeiUHSs0=
Subject key identifier: B2:CD:60:8A:15:55:4E:88:9C:4A:98:C8:96:5F:53:FC:E4:B1:F6:05
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 019422FB72FF6F8A7D5DFD78C7120CAFF2E7
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/ss1gihVVToicSpjIll9T_OSx9gU.roa
Signing time: Wed 01 Jan 2025 17:48:11 +0000
ROA not before: Wed 01 Jan 2025 17:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24768
IP address blocks: 176.111.108.0/22 maxlen: 22
176.111.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:72:ff:6f:8a:7d:5d:fd:78:c7:12:0c:af:f2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2cd608a15554e889c4a98c8965f53fce4b1f605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:01:10:b9:68:9a:38:d4:61:27:d8:bb:2f:
df:96:57:c5:a8:1d:c9:99:8d:e8:6a:30:fb:eb:45:
ff:9e:fe:d3:53:de:de:4a:a1:cb:d7:97:bd:c5:f9:
c6:d3:64:c1:74:60:36:9f:1b:6a:e7:7b:e7:67:65:
1f:64:b1:71:1c:91:08:03:0f:c9:1c:9f:bd:ea:30:
15:ba:64:25:4b:9a:1b:07:50:f1:a4:0d:7a:99:50:
1f:13:41:91:96:d5:3b:35:da:5c:5c:b8:95:06:5f:
05:38:9c:d2:dc:d4:d1:ef:f6:68:51:13:40:19:66:
a0:c8:c4:45:c1:b3:28:24:2a:b4:16:a8:e8:29:f5:
51:42:81:8f:9c:ed:05:a0:6a:f7:f7:7c:32:71:30:
42:a2:26:88:7b:d9:5b:9e:8a:36:19:d6:6d:b0:b7:
ae:6a:83:6c:73:48:3b:63:63:bf:94:be:2b:91:4c:
a6:da:0c:84:f7:11:40:43:b2:eb:a5:72:28:8a:1c:
76:b8:c5:92:98:34:ab:01:d3:ac:2f:28:1f:1a:3f:
0c:d2:7d:d7:8a:db:40:03:8b:63:39:e9:69:6b:c1:
fe:c5:73:15:80:34:a3:9f:d0:aa:ae:32:04:2d:fc:
2d:27:fe:d5:88:83:34:39:30:c4:f8:b3:d8:07:59:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CD:60:8A:15:55:4E:88:9C:4A:98:C8:96:5F:53:FC:E4:B1:F6:05
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/ss1gihVVToicSpjIll9T_OSx9gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.108.0/22
Signature Algorithm: sha256WithRSAEncryption
02:e8:27:8b:b5:7d:31:82:a1:26:e9:a2:f5:5b:0d:4a:8d:91:
22:60:3d:88:65:37:f7:8f:6f:13:8c:96:70:19:da:b8:70:0c:
2b:57:49:c8:f5:96:b0:62:bb:3a:b6:2d:bf:e8:d6:52:f5:4b:
17:0d:81:04:8f:1f:dc:89:84:a1:94:18:60:f1:eb:d1:56:0d:
96:1b:ea:cc:e7:35:49:88:a5:bd:1b:28:d3:94:94:54:68:a6:
66:90:18:f9:b5:5c:86:85:bf:fe:5e:bc:1e:5a:f5:ce:c4:86:
45:45:0b:cb:05:81:38:24:36:9c:ef:ca:5f:31:41:6d:e6:73:
3c:0d:b0:d0:90:75:48:78:60:cb:26:c8:05:9b:79:07:a9:79:
04:39:93:d6:b5:02:d1:02:80:1e:13:5a:5a:b4:46:9f:b2:fa:
e8:33:b7:73:34:ff:71:90:d5:15:16:0a:82:16:a2:ec:7d:35:
0a:64:98:a6:18:5e:ab:3b:43:70:ec:e3:1d:a4:a0:90:23:11:
ec:50:8b:35:13:f0:6e:88:ce:63:1c:1c:3b:23:d1:8a:33:8c:
32:73:6d:5b:87:a9:51:cd:9e:a4:50:5d:b4:c4:d0:f5:08:2e:
13:63:24:df:48:7e:ef:72:be:a0:61:97:7c:90:09:26:48:a9:
9c:6e:d5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:02 2025 by rpki-client