Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/3mgP9DrHq_E84M4g5nyj39KGrww.roa
File: 3mgP9DrHq_E84M4g5nyj39KGrww.roa (raw, json)
Hash identifier: JjU2E2yM3qXKm2+bX94STgIawOIl+f3U2gXV8ORDSaE=
Subject key identifier: DE:68:0F:F4:3A:C7:AB:F1:3C:E0:CE:20:E6:7C:A3:DF:D2:86:AF:0C
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228DAD63C8E6B1D757F8B31984320E8A
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/3mgP9DrHq_E84M4g5nyj39KGrww.roa
Signing time: Wed 01 Jan 2025 15:48:17 +0000
ROA not before: Wed 01 Jan 2025 15:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204348
IP address blocks: 176.236.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ad:63:c8:e6:b1:d7:57:f8:b3:19:84:32:0e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de680ff43ac7abf13ce0ce20e67ca3dfd286af0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:17:00:5a:d8:13:1c:61:2b:2c:2f:d9:f7:
af:02:80:ce:b5:ed:64:c7:05:96:04:dd:78:8a:0b:
eb:8e:9c:71:df:41:a2:f9:9d:b0:9c:70:ab:32:6c:
d6:19:4b:41:b4:aa:23:eb:a4:1d:98:29:e1:f7:1a:
0f:00:74:56:47:84:5c:08:c9:b5:b6:86:69:28:95:
63:3b:c8:1d:be:18:3d:c4:ee:2a:bd:06:14:ab:32:
80:36:2f:af:fa:24:9d:be:77:01:7e:6c:1f:e5:3b:
df:c9:50:e5:31:bc:04:43:f4:9f:44:a2:43:c1:8b:
34:b7:dd:e4:e1:2f:81:77:69:dd:64:97:49:3e:9a:
30:0e:01:63:3d:4a:c4:5a:4c:b6:74:f8:6d:f7:4b:
c6:c6:ae:c2:49:55:85:7b:d7:53:36:7d:5a:05:08:
a5:4b:5e:c1:2c:2d:fb:d3:bd:fb:74:33:be:fe:8c:
33:c9:dd:a0:9c:77:5e:43:f6:86:62:ab:84:74:99:
23:68:9f:8d:d4:b2:2b:fa:93:e5:9e:01:86:35:85:
d8:36:f4:2e:48:e8:24:5e:dd:d6:6e:6c:51:1a:0f:
be:0a:a6:2b:63:fb:63:7e:3c:16:9a:aa:7a:28:04:
a7:0e:25:f3:f6:77:85:ac:52:ab:8a:c9:8e:b1:ef:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:68:0F:F4:3A:C7:AB:F1:3C:E0:CE:20:E6:7C:A3:DF:D2:86:AF:0C
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/3mgP9DrHq_E84M4g5nyj39KGrww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.236.249.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4b:03:a4:aa:e8:63:ad:56:64:c7:58:8b:99:25:3e:ef:ef:
0e:9a:f8:e5:98:d6:ea:fb:82:e8:fe:08:09:ce:b3:33:6e:01:
75:5c:7a:48:15:ff:9c:bc:59:89:b6:68:42:38:54:bd:31:e5:
44:72:95:d6:bf:4b:73:da:02:31:b3:ce:8c:80:89:35:7e:52:
f4:c4:f9:6f:9e:1d:ea:13:78:3d:e9:d7:64:dc:50:c6:b6:73:
84:ee:01:c7:4c:f7:1e:18:b0:5a:e3:73:8c:70:04:d4:29:fc:
c5:b0:f6:01:6c:77:d8:a5:6a:02:d9:98:f8:2c:f1:d1:1b:18:
51:e1:80:f0:2e:2c:fa:8b:97:7e:65:c3:78:61:ed:8c:03:21:
77:e8:4c:ad:52:fc:76:4e:d9:97:7a:a2:d1:3a:ad:35:c3:e5:
0a:88:e8:29:e4:1d:52:99:3f:3c:51:38:3d:c2:5e:e0:ae:97:
7a:93:bc:66:e7:9d:e4:c7:fb:81:0a:54:1f:bc:ae:ff:5c:66:
dd:e8:b0:0e:f7:de:f2:e8:7e:fe:2f:5c:73:94:21:8a:15:68:
ce:4b:73:4c:0b:93:64:7c:ce:17:84:a1:44:50:02:d0:9b:fb:
b4:19:d1:0b:b1:3c:47:3b:25:5e:ec:be:de:c7:3b:ae:63:1b:
91:49:f5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:44:22 2025 by rpki-client