Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/mvYSv4zAbsamd8555bkuTx8CI0E.roa
File: mvYSv4zAbsamd8555bkuTx8CI0E.roa (raw, json)
Hash identifier: j5muCORhqkstbnZdY0kfJypcpUip4HmftzQD9H+o6ps=
Subject key identifier: 9A:F6:12:BF:8C:C0:6E:C6:A6:77:CE:79:E5:B9:2E:4F:1F:02:23:41
Certificate issuer: /CN=b520449d4455cf789c64ea63cbf48fc3bb2c766a
Certificate serial: 018BC852E31247080261BC5E2282469DE1E5
Authority key identifier: B5:20:44:9D:44:55:CF:78:9C:64:EA:63:CB:F4:8F:C3:BB:2C:76:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSBEnURVz3icZOpjy_SPw7ssdmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/mvYSv4zAbsamd8555bkuTx8CI0E.roa
Signing time: Mon 13 Nov 2023 10:55:57 +0000
ROA not before: Mon 13 Nov 2023 10:55:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 176.53.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:52:e3:12:47:08:02:61:bc:5e:22:82:46:9d:e1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520449d4455cf789c64ea63cbf48fc3bb2c766a
Validity
Not Before: Nov 13 10:55:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9af612bf8cc06ec6a677ce79e5b92e4f1f022341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d1:3d:2b:89:aa:eb:53:be:67:2c:17:15:e0:
39:9b:1b:ad:d0:63:54:7d:93:3c:05:a3:a5:fe:0e:
63:2e:2d:a3:e9:e6:86:65:07:44:0f:f2:47:02:d7:
92:f3:45:84:0b:f7:f9:9e:36:c3:e0:86:4f:bb:c6:
14:11:d3:37:b9:0b:72:92:c5:57:66:92:e9:5f:5e:
f3:0b:06:e4:f9:58:4b:72:ad:90:7b:f2:59:db:a9:
b9:4f:86:d6:92:a6:ab:08:94:68:88:00:91:36:ee:
a4:e4:d3:23:c4:a1:a7:2e:02:a2:dd:e8:a9:a1:09:
d8:c2:c7:86:5a:9b:b3:42:43:fd:52:20:75:89:97:
26:60:5a:af:9b:a6:1b:09:f9:a1:53:4b:2b:00:33:
cd:03:f0:2b:01:f4:0e:bc:3f:d9:57:bc:39:81:31:
31:f4:ab:44:6e:d0:c0:5b:75:d5:b4:d4:43:b9:d8:
e8:04:f3:71:ab:e0:3c:f6:eb:9a:dd:23:6b:a8:d5:
8c:17:ca:27:ea:dc:16:9a:8b:44:06:b7:81:97:c6:
38:8e:0f:b1:95:02:79:30:3e:15:78:a7:27:f0:f2:
55:32:82:74:64:f3:9f:62:78:c9:15:f6:22:25:32:
55:da:71:7d:34:b0:b7:d9:49:6b:93:02:ab:da:3b:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F6:12:BF:8C:C0:6E:C6:A6:77:CE:79:E5:B9:2E:4F:1F:02:23:41
X509v3 Authority Key Identifier:
keyid:B5:20:44:9D:44:55:CF:78:9C:64:EA:63:CB:F4:8F:C3:BB:2C:76:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSBEnURVz3icZOpjy_SPw7ssdmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/mvYSv4zAbsamd8555bkuTx8CI0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/tSBEnURVz3icZOpjy_SPw7ssdmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.146.0/24
Signature Algorithm: sha256WithRSAEncryption
89:1c:69:4e:0b:02:c2:23:f7:12:87:2e:e1:d8:9b:60:35:ac:
fe:a7:8f:65:2a:ca:1b:07:9b:cc:4a:8f:7f:01:14:78:28:90:
4f:ff:27:d6:70:95:04:62:22:ee:5e:37:96:fa:f1:03:73:96:
0a:ec:9d:b5:5f:4e:33:23:20:91:70:b0:ec:df:0f:fb:9a:39:
59:29:4b:b2:9f:83:a7:77:45:79:fa:e5:c6:3f:1c:4f:56:35:
46:78:11:bd:da:4e:33:b1:78:67:8f:d2:ac:89:39:42:1e:e7:
67:7f:e4:0c:9c:5b:5e:ef:8f:b1:a0:d3:4f:1c:06:ec:ed:88:
be:11:7e:bb:95:9b:fd:e6:b9:2e:0b:c2:9a:33:ad:99:62:bd:
a5:61:74:8e:71:4a:68:e6:59:09:2e:ba:c4:a9:56:28:42:68:
0a:e9:14:dc:49:cf:e6:e5:1c:e2:ed:8c:51:d7:14:11:2a:f6:
3f:f5:3a:3a:cd:96:6f:a1:08:40:dc:4c:1e:bc:86:f3:6d:9d:
f1:88:cb:e6:08:6f:80:fd:b8:93:ca:dc:4b:d2:ed:4a:bc:cf:
29:b8:5c:c3:08:d3:f2:79:03:5e:28:24:9c:0a:45:78:0d:51:
58:43:9d:77:fe:99:2e:78:ad:d3:91:a2:d2:a2:1e:3c:30:aa:
ee:c2:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:31:01 2025 by rpki-client