Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0b60f0-a7e9-4130-8c51-34334d81a488/1/AZtPDTydyqK0JHVoDRTrqcq-b5o.roa
File: AZtPDTydyqK0JHVoDRTrqcq-b5o.roa (raw, json)
Hash identifier: 9zIn9u9KVr03yB1WNrUBILyXM6At5YjWjUeLsql8FUw=
Subject key identifier: 01:9B:4F:0D:3C:9D:CA:A2:B4:24:75:68:0D:14:EB:A9:CA:BE:6F:9A
Certificate issuer: /CN=d258e28f74d9c8a61cebc3be00ffdc501eed1d4d
Certificate serial: 0189654A8C97D222E0AD65F838A6DDD08E35
Authority key identifier: D2:58:E2:8F:74:D9:C8:A6:1C:EB:C3:BE:00:FF:DC:50:1E:ED:1D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ljij3TZyKYc68O-AP_cUB7tHU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0b60f0-a7e9-4130-8c51-34334d81a488/1/AZtPDTydyqK0JHVoDRTrqcq-b5o.roa
Signing time: Mon 17 Jul 2023 19:18:51 +0000
ROA not before: Mon 17 Jul 2023 19:18:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 176.126.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:8c:97:d2:22:e0:ad:65:f8:38:a6:dd:d0:8e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d258e28f74d9c8a61cebc3be00ffdc501eed1d4d
Validity
Not Before: Jul 17 19:18:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=019b4f0d3c9dcaa2b42475680d14eba9cabe6f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:74:b2:8c:cd:ec:0a:80:1c:bc:4f:39:ab:
c2:ea:59:c3:58:b8:cc:fe:28:12:51:47:6c:11:f3:
8a:1b:cd:61:71:d9:b6:09:bc:83:26:3a:ea:f0:dc:
ac:79:f5:d0:c6:5e:47:86:36:61:8b:6d:a8:1b:a4:
6b:87:9d:6d:f7:1d:9e:08:d9:8e:9a:1b:e7:4e:94:
39:07:b0:00:43:cd:d7:79:e8:ec:39:0a:62:ca:1e:
25:c7:ca:94:ff:97:80:ee:7a:46:11:2a:25:00:99:
a6:22:3e:95:76:97:42:ba:55:88:2e:f8:81:06:68:
c0:13:60:4d:18:76:59:e4:5b:46:7e:6b:21:ba:97:
b5:80:45:2f:95:76:71:e0:86:5d:2a:3c:f8:78:32:
75:9c:68:f8:dd:be:ff:bf:b7:f2:d7:89:fb:b7:e5:
be:f1:cf:24:3a:b2:7c:02:19:9a:65:0e:e5:45:47:
aa:15:03:9c:bf:01:bd:c3:4e:6b:60:4c:b4:05:81:
bc:92:fa:de:62:0c:43:27:4e:dd:21:1c:4e:7f:96:
0b:37:80:a5:3b:f4:6a:f7:a3:b8:07:b3:d0:4c:e9:
73:e9:d9:7f:67:a8:aa:b3:ca:bf:3f:48:c9:b9:48:
20:ba:0c:d3:f8:86:66:e2:43:17:50:3d:06:cf:6e:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9B:4F:0D:3C:9D:CA:A2:B4:24:75:68:0D:14:EB:A9:CA:BE:6F:9A
X509v3 Authority Key Identifier:
keyid:D2:58:E2:8F:74:D9:C8:A6:1C:EB:C3:BE:00:FF:DC:50:1E:ED:1D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ljij3TZyKYc68O-AP_cUB7tHU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0b60f0-a7e9-4130-8c51-34334d81a488/1/AZtPDTydyqK0JHVoDRTrqcq-b5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0b60f0-a7e9-4130-8c51-34334d81a488/1/0ljij3TZyKYc68O-AP_cUB7tHU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.98.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5f:e6:bb:a4:43:e2:65:7a:86:1a:6c:bf:c2:f3:7e:02:b9:
b6:c4:b6:ad:51:60:97:5b:75:2d:3a:b1:02:e3:12:3f:aa:a0:
e8:31:60:4b:9d:a3:b4:fa:b2:65:52:1e:58:d4:fd:da:41:62:
ef:4c:9b:3f:53:3d:39:a3:c1:3a:e3:91:1b:a2:c7:47:b1:75:
37:a4:88:d9:ca:4b:5c:59:7a:30:2d:14:f8:17:10:3f:8f:0e:
09:0c:87:5a:2e:18:63:13:4f:c3:28:91:78:13:c3:af:bf:91:
10:7d:4a:ce:2a:ba:ae:18:e0:bf:ba:69:60:d8:49:ca:41:f6:
37:64:f5:1d:e6:a9:66:32:68:69:de:27:37:6c:de:e0:44:62:
52:d4:54:d7:f5:52:fb:f6:22:7c:ed:56:9a:c5:9d:f7:79:c3:
86:da:a5:9e:16:70:28:8d:79:10:36:5e:14:e6:e0:d5:4a:05:
7a:b4:59:c5:2e:af:9e:13:fa:2b:10:88:aa:13:20:9e:e6:f1:
9c:bc:16:ac:35:bc:7d:ef:2e:62:a8:bf:e9:b7:15:3f:03:82:
0d:18:95:3f:e6:b8:6d:df:ec:fb:63:3b:49:7b:76:b7:c1:0b:
07:34:df:b9:c1:b8:d0:7e:e5:a1:b3:31:ff:37:f0:fb:63:87:
b8:57:a4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:28:53 2025 by rpki-client