Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/lH4fIYJENFDV-ZaWwfRZsXFsA4w.roa
File: lH4fIYJENFDV-ZaWwfRZsXFsA4w.roa (raw, json)
Hash identifier: oPrO7/KBvmTyunbCmRk+sGzGeynEg+g3BOvjqFeoK4w=
Subject key identifier: 94:7E:1F:21:82:44:34:50:D5:F9:96:96:C1:F4:59:B1:71:6C:03:8C
Certificate issuer: /CN=b520449d4455cf789c64ea63cbf48fc3bb2c766a
Certificate serial: 01885768C8226C49BBB666F7A4E44A48F486
Authority key identifier: B5:20:44:9D:44:55:CF:78:9C:64:EA:63:CB:F4:8F:C3:BB:2C:76:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSBEnURVz3icZOpjy_SPw7ssdmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/lH4fIYJENFDV-ZaWwfRZsXFsA4w.roa
Signing time: Fri 26 May 2023 09:34:24 +0000
ROA not before: Fri 26 May 2023 09:34:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212030
IP address blocks: 176.53.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:68:c8:22:6c:49:bb:b6:66:f7:a4:e4:4a:48:f4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520449d4455cf789c64ea63cbf48fc3bb2c766a
Validity
Not Before: May 26 09:34:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=947e1f2182443450d5f99696c1f459b1716c038c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:ae:31:15:a5:bc:1a:0e:16:7b:a8:3f:70:
cf:90:ad:83:3e:bf:a5:46:b8:83:f1:ce:1c:80:31:
4e:cf:99:29:f2:d9:78:89:5b:b6:99:e6:f3:c7:f0:
e3:5f:39:25:83:ae:88:30:28:e8:9d:8f:4f:03:c8:
a0:b8:23:e5:4c:c1:15:98:e5:8b:df:5d:45:dd:4a:
ad:1c:43:7c:32:8c:e0:09:5a:b5:54:20:a7:aa:90:
74:9b:1d:07:05:c0:c2:78:df:90:93:46:9e:eb:23:
b3:a0:f8:33:e7:ca:ae:26:4e:fe:d3:ff:46:04:55:
02:b7:cd:dd:3c:30:d6:f5:b1:03:91:cc:68:78:6b:
0d:2e:46:68:99:cb:28:f5:43:c4:ce:1d:72:98:8b:
54:9d:61:96:b8:1c:fa:00:29:b9:d9:33:b3:00:cf:
3c:09:19:43:b9:65:f9:fd:a3:a1:a4:6c:3d:2b:55:
0b:3a:58:fa:37:84:c1:d4:68:9b:f1:bb:79:d7:ec:
d7:d4:40:ea:30:59:f1:42:ac:10:1f:2c:c2:42:af:
3a:fc:5b:ab:05:4a:e7:ad:1f:6e:60:a8:5e:20:1e:
b0:de:c7:7c:6c:26:cc:15:b4:0e:58:2b:db:69:66:
10:f2:fc:04:2b:1f:4c:c3:ab:ce:f1:43:e2:8a:0f:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7E:1F:21:82:44:34:50:D5:F9:96:96:C1:F4:59:B1:71:6C:03:8C
X509v3 Authority Key Identifier:
keyid:B5:20:44:9D:44:55:CF:78:9C:64:EA:63:CB:F4:8F:C3:BB:2C:76:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSBEnURVz3icZOpjy_SPw7ssdmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/lH4fIYJENFDV-ZaWwfRZsXFsA4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/tSBEnURVz3icZOpjy_SPw7ssdmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.146.0/24
Signature Algorithm: sha256WithRSAEncryption
68:79:0c:66:83:23:1b:79:f9:76:cb:20:fb:2b:fb:5c:74:4b:
d2:96:11:f4:e1:ea:b7:a5:43:cb:b7:6e:7f:d4:4f:37:b3:c2:
90:f2:42:69:af:7c:00:63:a3:48:85:e6:a3:ae:6f:cc:01:ec:
98:76:ed:e2:71:d4:33:c3:b6:be:56:fd:ef:c9:bd:b8:12:dd:
c9:e8:50:56:bc:46:f8:cc:5e:38:3c:9d:bc:7c:55:87:fe:83:
49:7d:cd:bd:a4:d2:0e:1f:47:13:2a:d9:60:10:93:a0:02:f0:
cb:e9:54:b4:8d:c6:63:e9:ac:04:31:07:67:9d:28:8a:dd:62:
27:e0:3f:71:f5:69:30:48:85:02:39:e7:b7:3d:21:2d:37:e9:
05:66:83:1e:30:fe:d0:ca:f7:19:6a:0a:b5:e1:16:91:c6:e5:
9c:1f:1c:68:cb:bc:98:54:5e:eb:1a:49:c0:63:d0:f3:21:02:
74:5b:9b:2f:a3:9c:14:ca:ba:e1:31:35:58:9f:42:60:d8:82:
a0:48:90:66:6f:9c:c0:a4:59:fd:85:e7:20:90:b9:03:9e:19:
fc:a4:28:4f:23:4c:76:2b:3a:86:1e:08:65:48:56:06:5b:5a:
d7:73:25:3d:9f:04:f1:10:1b:84:f8:f9:b5:3b:b3:c7:04:21:
fc:33:94:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:02 2025 by rpki-client