Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/C_eJHPJkxbKBhvM9tuSk0MSnH8E.roa
File: C_eJHPJkxbKBhvM9tuSk0MSnH8E.roa (raw, json)
Hash identifier: h3Z7Ycn0eEnGUWg0psA+12AVSkrLMnYTiHH1BXohgLc=
Subject key identifier: 0B:F7:89:1C:F2:64:C5:B2:81:86:F3:3D:B6:E4:A4:D0:C4:A7:1F:C1
Certificate issuer: /CN=b520449d4455cf789c64ea63cbf48fc3bb2c766a
Certificate serial: 01860D19AF60B06B34CB84727D6E7F3EE164
Authority key identifier: B5:20:44:9D:44:55:CF:78:9C:64:EA:63:CB:F4:8F:C3:BB:2C:76:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSBEnURVz3icZOpjy_SPw7ssdmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/C_eJHPJkxbKBhvM9tuSk0MSnH8E.roa
Signing time: Wed 01 Feb 2023 13:10:32 +0000
ROA not before: Wed 01 Feb 2023 13:10:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207967
IP address blocks: 176.53.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:19:af:60:b0:6b:34:cb:84:72:7d:6e:7f:3e:e1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520449d4455cf789c64ea63cbf48fc3bb2c766a
Validity
Not Before: Feb 1 13:10:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bf7891cf264c5b28186f33db6e4a4d0c4a71fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c0:69:11:d9:23:41:e8:7f:b8:5b:c9:8a:2d:
17:1e:b6:d5:7c:e3:ea:15:a3:13:cd:65:fe:7c:6f:
fe:d7:40:15:7e:c9:bd:35:e5:b5:da:b3:ba:7f:9d:
22:0f:af:47:ec:73:6d:99:22:a4:ed:b5:8e:e8:3e:
5e:d5:e1:9f:bc:5b:27:91:33:73:a6:0f:de:e4:85:
d8:b1:7c:3b:79:38:f9:10:8b:66:33:d1:28:e3:f3:
83:d1:c3:4f:06:4f:11:09:d6:8f:3b:73:54:d7:eb:
d3:f9:a1:af:fc:28:8e:e1:6e:fb:81:80:b0:0c:a1:
23:1c:88:71:0f:98:19:99:cd:d6:f1:79:4b:f1:8f:
f4:2c:67:53:d3:88:c2:fe:88:e7:c8:e1:92:89:d5:
75:35:22:09:d3:a1:ff:b4:58:59:3e:c5:91:a5:df:
6d:6e:ee:95:0a:04:d6:04:66:cc:65:d5:c2:73:80:
91:bb:a5:b0:16:5a:42:1c:cf:1d:85:9d:be:c6:a5:
70:e3:cd:3e:57:8c:d6:75:75:2b:72:3a:cc:2a:98:
98:34:71:92:a4:db:47:a7:58:f6:57:5e:db:a2:b4:
25:cf:2a:72:d4:b9:55:48:3f:65:ab:1c:26:d0:17:
41:75:ce:a2:5c:da:1e:bf:21:dd:2b:01:c3:dc:5a:
f8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F7:89:1C:F2:64:C5:B2:81:86:F3:3D:B6:E4:A4:D0:C4:A7:1F:C1
X509v3 Authority Key Identifier:
keyid:B5:20:44:9D:44:55:CF:78:9C:64:EA:63:CB:F4:8F:C3:BB:2C:76:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSBEnURVz3icZOpjy_SPw7ssdmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/C_eJHPJkxbKBhvM9tuSk0MSnH8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/tSBEnURVz3icZOpjy_SPw7ssdmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.146.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1a:a8:10:bb:a3:fc:4e:fd:7a:de:8d:45:cd:70:35:d5:df:
27:89:06:b1:8e:9c:a8:6c:56:af:a0:54:41:a2:e7:c4:dc:31:
05:00:1e:ed:25:ec:ea:3a:9b:59:51:64:c1:bc:ea:9f:40:b9:
81:24:cd:87:f2:5b:0b:48:a1:71:30:9c:6d:45:b8:b7:5e:ea:
9d:28:a1:42:40:9c:e4:e8:ab:07:02:f7:8a:8c:ca:5a:25:8c:
06:f6:ba:fc:ef:d6:a2:c6:75:c0:eb:d5:2a:84:ef:3a:c0:5a:
47:94:27:a4:36:da:ce:d6:a7:c1:9e:d8:4e:c3:ad:a3:09:f1:
22:57:b4:c0:49:da:c7:d3:ad:74:3c:cd:02:04:8f:70:62:a2:
a3:71:f4:70:5b:b3:10:63:e2:fc:bf:3e:f9:0d:72:de:fa:1e:
3d:56:98:5e:a3:65:65:55:89:38:fa:88:e4:58:92:2d:8d:57:
d3:ad:af:f1:34:16:22:b6:36:ce:f8:69:34:67:f8:11:5c:76:
8c:31:70:a9:c4:bc:40:b3:87:b1:9b:9d:8d:67:6d:e7:80:3d:
f1:d3:05:2f:be:6e:a0:f2:1c:d5:11:03:47:32:0e:ba:0d:d9:
65:09:0f:10:27:ec:50:c8:6c:2c:03:fc:b9:c9:a0:8d:60:1d:
29:c1:ff:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYNGa9gsGs0y4RyfW5/PuFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjA0NDlkNDQ1NWNmNzg5YzY0ZWE2M2NiZjQ4ZmMzYmIy
Yzc2NmEwHhcNMjMwMjAxMTMxMDMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmY3ODkxY2YyNjRjNWIyODE4NmYzM2RiNmU0YTRkMGM0YTcxZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsBpEdkjQeh/uFvJii0XHrbVfOPq
FaMTzWX+fG/+10AVfsm9NeW12rO6f50iD69H7HNtmSKk7bWO6D5e1eGfvFsnkTNz
pg/e5IXYsXw7eTj5EItmM9Eo4/OD0cNPBk8RCdaPO3NU1+vT+aGv/CiO4W77gYCw
DKEjHIhxD5gZmc3W8XlL8Y/0LGdT04jC/ojnyOGSidV1NSIJ06H/tFhZPsWRpd9t
bu6VCgTWBGbMZdXCc4CRu6WwFlpCHM8dhZ2+xqVw480+V4zWdXUrcjrMKpiYNHGS
pNtHp1j2V17borQlzypy1LlVSD9lqxwm0BdBdc6iXNoevyHdKwHD3Fr4jwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAv3iRzyZMWygYbzPbbkpNDEpx/BMB8GA1UdIwQY
MBaAFLUgRJ1EVc94nGTqY8v0j8O7LHZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNCRW5VUlZ6M2ljWk9wanlfU1B3N3NzZG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mMGQ1ZTctZWRiNi00MmFkLTg0ODIt
YTE0ZDg1Zjk5NWNiLzEvQ19lSkhQSmt4YktCaHZNOXR1U2swTVNuSDhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9mMGQ1ZTctZWRiNi00MmFkLTg0ODItYTE0ZDg1Zjk5NWNi
LzEvdFNCRW5VUlZ6M2ljWk9wanlfU1B3N3NzZG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDWSMA0G
CSqGSIb3DQEBCwUAA4IBAQAuGqgQu6P8Tv163o1FzXA11d8niQaxjpyobFavoFRB
oufE3DEFAB7tJezqOptZUWTBvOqfQLmBJM2H8lsLSKFxMJxtRbi3XuqdKKFCQJzk
6KsHAveKjMpaJYwG9rr879aixnXA69UqhO86wFpHlCekNtrO1qfBnthOw62jCfEi
V7TASdrH0610PM0CBI9wYqKjcfRwW7MQY+L8vz75DXLe+h49Vpheo2VlVYk4+ojk
WJItjVfTra/xNBYitjbO+Gk0Z/gRXHaMMXCpxLxAs4exm52NZ23ngD3x0wUvvm6g
8hzVEQNHMg66DdllCQ8QJ+xQyGwsA/y5yaCNYB0pwf/9
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:35 2025 by rpki-client