Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/hGLFuG8QDtTNJ3hZs7Rvbjtzr8E.roa
File: hGLFuG8QDtTNJ3hZs7Rvbjtzr8E.roa (raw, json)
Hash identifier: Pl/xqIfMObLZhmZ2HBn4tMm4NbB218l1Rvbabskmj+s=
Subject key identifier: 84:62:C5:B8:6F:10:0E:D4:CD:27:78:59:B3:B4:6F:6E:3B:73:AF:C1
Certificate issuer: /CN=b520449d4455cf789c64ea63cbf48fc3bb2c766a
Certificate serial: 01862F9B41E41082CC1FBCA87FFA135BF315
Authority key identifier: B5:20:44:9D:44:55:CF:78:9C:64:EA:63:CB:F4:8F:C3:BB:2C:76:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSBEnURVz3icZOpjy_SPw7ssdmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/hGLFuG8QDtTNJ3hZs7Rvbjtzr8E.roa
Signing time: Wed 08 Feb 2023 05:59:09 +0000
ROA not before: Wed 08 Feb 2023 05:59:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 176.53.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2f:9b:41:e4:10:82:cc:1f:bc:a8:7f:fa:13:5b:f3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520449d4455cf789c64ea63cbf48fc3bb2c766a
Validity
Not Before: Feb 8 05:59:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8462c5b86f100ed4cd277859b3b46f6e3b73afc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:49:bc:52:51:57:23:d2:e8:05:e1:82:8a:
6a:3e:75:a2:6a:b5:d0:cb:49:2e:8e:23:79:b6:a2:
2a:f6:c0:3e:51:62:bd:43:dc:da:83:9a:ed:15:01:
34:06:3d:7e:71:ce:1f:d8:f3:a5:ff:e4:22:42:a8:
03:c7:22:c2:98:00:75:d9:22:b0:3d:d3:80:d5:94:
db:05:73:c7:88:65:9d:03:dd:72:46:c2:34:fa:28:
33:2e:b9:9a:6e:3c:e4:41:e3:a9:fc:da:97:2a:92:
30:63:01:6b:70:3a:b3:14:08:0b:00:0f:3b:bf:58:
fd:41:e6:b9:e3:03:64:6d:a7:f1:30:bf:11:dd:cd:
0f:02:d7:89:ad:e2:47:b0:c0:65:14:f4:cc:89:43:
bc:36:33:a8:8c:72:20:bf:a5:bc:8e:cf:a3:87:3e:
1c:a7:95:32:53:01:47:fe:4b:2e:50:58:31:04:84:
7f:78:e6:3c:62:cc:84:b4:0f:58:bd:30:b9:b9:ca:
0a:ca:72:99:48:ee:cf:3b:1a:10:ab:99:74:6f:ed:
34:2d:86:5c:23:ad:5e:5c:45:b1:6b:e9:23:43:5b:
20:b8:6e:ad:9e:d4:89:c6:aa:01:2c:07:7d:eb:e0:
cc:80:f4:8f:05:cf:6a:db:88:41:08:eb:53:ec:70:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:62:C5:B8:6F:10:0E:D4:CD:27:78:59:B3:B4:6F:6E:3B:73:AF:C1
X509v3 Authority Key Identifier:
keyid:B5:20:44:9D:44:55:CF:78:9C:64:EA:63:CB:F4:8F:C3:BB:2C:76:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSBEnURVz3icZOpjy_SPw7ssdmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/hGLFuG8QDtTNJ3hZs7Rvbjtzr8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/tSBEnURVz3icZOpjy_SPw7ssdmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.146.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0f:dc:ff:10:c5:eb:7c:fa:b6:35:89:b2:96:b0:24:7d:bd:
f5:34:04:90:fd:f6:ca:ee:e0:4f:a6:08:47:d1:c0:80:93:fe:
b2:fb:ba:02:86:29:90:ed:b5:8c:8c:75:46:61:4b:e5:a4:61:
de:4c:52:37:b5:d0:6b:8d:ed:2b:83:99:9e:0c:03:5e:d9:b7:
7d:a4:e5:fb:ea:7e:4a:d3:8a:18:91:12:3b:d3:da:2b:88:11:
d1:80:de:aa:40:aa:c6:8b:6e:83:8a:a7:12:dc:d4:3e:b1:e1:
4d:e4:44:08:d6:fd:82:5b:17:5e:2a:5f:9a:4c:ea:7b:a0:91:
ae:cb:b4:e1:8e:08:26:45:69:f0:30:e0:a7:65:24:c4:cb:a3:
68:a5:7e:4e:96:b4:b1:57:6b:d4:77:ca:e3:81:71:27:3c:cb:
eb:d2:6d:ef:90:c2:f2:5f:40:4a:e8:07:b0:95:35:c7:d0:8b:
ad:aa:d3:90:d9:db:b7:65:59:84:3c:9e:4e:ff:0c:75:98:a0:
00:52:84:d3:e6:83:71:97:b2:4f:f8:68:1c:bc:2c:c7:b0:3a:
ff:e6:09:60:db:4d:44:52:bd:26:84:ad:64:07:da:74:38:fa:
68:95:ac:5f:eb:0b:67:da:dc:60:3f:4e:25:52:91:04:0f:6e:
b0:d9:96:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:35:01 2025 by rpki-client