Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/IZHMmqPmt3UlljgeogJmO322ssc.roa
File: IZHMmqPmt3UlljgeogJmO322ssc.roa (raw, json)
Hash identifier: PycVs9gX0pMXEW+1UcglBSJJRtamvhRH7S93lKKOQPE=
Subject key identifier: 21:91:CC:9A:A3:E6:B7:75:25:96:38:1E:A2:02:66:3B:7D:B6:B2:C7
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01941F8C7C0200EFEA946847673B86C0CF30
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/IZHMmqPmt3UlljgeogJmO322ssc.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60721
IP address blocks: 176.103.224.0/24 maxlen: 24
176.103.225.0/24 maxlen: 24
176.103.226.0/24 maxlen: 24
176.103.227.0/24 maxlen: 24
176.103.232.0/24 maxlen: 24
176.103.233.0/24 maxlen: 24
176.103.234.0/24 maxlen: 24
176.103.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7c:02:00:ef:ea:94:68:47:67:3b:86:c0:cf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2191cc9aa3e6b7752596381ea202663b7db6b2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:91:2d:06:6c:93:7d:0b:65:ca:bf:d9:82:
93:b2:c0:d8:50:cd:11:04:8e:72:e0:40:e9:f3:c0:
15:65:92:20:96:14:a3:56:1e:26:60:9a:7c:c2:3b:
57:20:2f:63:4b:c8:48:84:89:4c:d7:64:c2:b5:38:
98:93:02:02:41:46:33:88:ab:03:a2:0e:cb:90:ce:
2a:76:0e:f3:a3:67:a8:88:6e:30:5a:8e:a8:6a:74:
33:78:39:27:ee:15:8c:0a:49:ed:82:fb:81:01:9f:
62:7b:a8:55:45:cd:b4:a3:ee:29:c4:ff:18:d3:e8:
5f:65:a5:aa:97:3f:c6:d8:24:fa:51:bf:b2:11:4f:
63:ec:7b:6a:8f:6e:f9:7b:46:ea:a8:76:3a:cc:bd:
29:89:63:92:77:af:2c:43:78:31:6f:ee:21:7b:10:
d8:a1:9f:fc:40:67:6c:a3:d4:cd:25:10:d2:5f:4f:
ec:ba:fb:6c:11:04:fd:9f:e5:c8:08:42:11:c1:d8:
57:7d:fa:02:00:4c:f6:5d:20:c5:a6:14:79:80:9c:
ab:90:6e:9d:eb:22:1d:fa:90:53:a3:c0:bb:7c:91:
78:6c:86:62:be:d0:23:75:40:18:b7:86:e4:97:54:
99:2c:e5:6d:e4:90:db:eb:2a:14:8a:2b:74:94:ff:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:91:CC:9A:A3:E6:B7:75:25:96:38:1E:A2:02:66:3B:7D:B6:B2:C7
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/IZHMmqPmt3UlljgeogJmO322ssc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.224.0/22
176.103.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:4a:ad:71:f8:86:69:2c:ef:2a:10:d6:77:d2:9d:88:0e:13:
bc:4c:da:72:ed:f5:41:b9:79:74:8b:ec:ee:0a:f1:7f:25:59:
02:09:9b:46:e0:e3:18:80:26:8f:62:d9:fa:a0:d8:97:3b:56:
64:26:4d:73:c9:1d:97:cc:72:88:12:2b:f9:77:92:6d:ca:45:
21:25:15:6a:11:a2:5e:23:6b:45:88:3c:41:a7:13:f8:5b:93:
8e:9d:fd:71:2d:97:30:04:a1:53:c6:a5:90:bc:35:97:78:43:
ff:f2:8a:70:ae:27:82:51:a6:6c:75:ef:84:f0:e7:f0:d7:3a:
61:7a:88:02:af:70:f9:1d:94:f7:da:e7:ff:fd:ce:f1:06:bc:
52:06:19:17:0b:b3:ac:78:3e:dd:d8:9c:c8:3d:7a:7c:8b:e9:
de:73:ab:e7:41:e7:96:0a:b5:e8:6c:a6:33:3a:5f:0f:15:0f:
d7:25:6c:da:3c:aa:45:71:07:fe:bd:d6:46:1c:f6:e1:e2:da:
75:6e:5d:cb:2e:9a:b4:e7:67:31:6a:c6:5f:25:ea:c6:41:ff:
b4:e8:11:32:52:ed:06:5e:60:ff:80:c9:6f:c7:24:6c:ce:c5:
85:d2:23:e2:b3:5a:ae:c1:08:71:f1:9b:6f:94:ba:da:fb:10:
c0:9b:b8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:45 2025 by rpki-client