Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/cA1K0PVMR92D8alo5xojeQQvlAQ.roa
File: cA1K0PVMR92D8alo5xojeQQvlAQ.roa (raw, json)
Hash identifier: 6j0l0Yxi/XiYBVNQAC3GfFhG+WV/GxmdZe5V5lLCZ7s=
Subject key identifier: 70:0D:4A:D0:F5:4C:47:DD:83:F1:A9:68:E7:1A:23:79:04:2F:94:04
Certificate issuer: /CN=0af378cf73de8f0e272a55f75db0098036ec5680
Certificate serial: 01856FCBAEF5A8FE0499F087631BA774CD74
Authority key identifier: 0A:F3:78:CF:73:DE:8F:0E:27:2A:55:F7:5D:B0:09:80:36:EC:56:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvN4z3Pejw4nKlX3XbAJgDbsVoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/cA1K0PVMR92D8alo5xojeQQvlAQ.roa
Signing time: Mon 02 Jan 2023 00:04:57 +0000
ROA not before: Mon 02 Jan 2023 00:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209810
IP address blocks: 176.118.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:ae:f5:a8:fe:04:99:f0:87:63:1b:a7:74:cd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af378cf73de8f0e272a55f75db0098036ec5680
Validity
Not Before: Jan 2 00:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=700d4ad0f54c47dd83f1a968e71a2379042f9404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:ce:d8:7b:60:70:d9:ee:64:88:54:5c:5c:
9b:d5:3a:d9:34:ee:b3:d3:d6:c4:2a:f9:5b:b0:0c:
55:64:83:78:d4:1c:a0:47:4d:a5:6b:8b:f7:5e:ac:
b7:3c:0d:8a:16:fe:d6:54:e2:d1:0e:5d:ce:87:ef:
f4:ba:ce:58:86:0d:8f:9f:cc:65:a7:76:4b:75:e0:
72:ef:4b:4e:9e:ec:18:0b:fb:39:35:e6:5e:39:ff:
08:2b:c6:8d:61:37:c3:78:60:72:43:c5:69:6a:35:
2d:25:5d:86:f8:87:5c:1f:13:85:73:9e:b5:ca:62:
d5:0e:68:7e:6e:5b:34:3c:bd:57:3e:2a:5a:aa:0b:
9d:fe:ad:56:4a:17:e6:b1:f6:30:b4:7f:8f:60:b4:
40:1b:ac:d7:8c:a4:4a:0d:f5:12:e7:ef:7d:e8:38:
31:3e:2a:1d:e2:17:f4:ad:02:b5:c3:5a:be:0b:7c:
af:f9:52:77:e6:8e:53:16:01:6b:75:ed:72:e3:8c:
4c:43:f1:72:df:8f:86:41:92:44:ae:ce:2d:93:18:
32:10:63:06:2a:43:79:74:28:4b:a5:65:95:05:f3:
8c:d2:65:9e:b9:90:cb:0f:6e:9b:2c:f7:49:30:89:
f3:be:c3:38:4e:18:65:c4:00:09:12:98:76:b5:9a:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0D:4A:D0:F5:4C:47:DD:83:F1:A9:68:E7:1A:23:79:04:2F:94:04
X509v3 Authority Key Identifier:
keyid:0A:F3:78:CF:73:DE:8F:0E:27:2A:55:F7:5D:B0:09:80:36:EC:56:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvN4z3Pejw4nKlX3XbAJgDbsVoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/cA1K0PVMR92D8alo5xojeQQvlAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1801b6-cf49-4405-970d-cf9e8c6a412e/1/CvN4z3Pejw4nKlX3XbAJgDbsVoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.170.0/23
Signature Algorithm: sha256WithRSAEncryption
45:21:d4:2f:7e:df:3e:aa:ef:aa:90:54:79:d5:e5:70:d5:6e:
79:64:1d:f2:fb:e6:1d:92:94:5a:70:03:17:0a:38:67:c9:ae:
7a:f4:95:05:26:2f:ff:e6:27:ca:51:2b:79:26:87:ca:fa:f5:
19:05:10:fc:45:74:d5:e6:0e:09:0e:0d:e2:3c:18:33:03:82:
b1:ad:32:ed:73:ce:69:e0:af:83:13:7d:5d:e2:7c:53:2c:2e:
c3:a2:50:19:e3:0c:93:97:a4:04:4b:97:74:8d:8a:79:0c:d3:
db:45:9a:5a:04:66:0f:c7:b3:e4:62:b4:54:dd:05:53:9f:6c:
3a:75:31:a9:60:02:18:d9:50:9c:15:50:eb:06:30:40:d6:8d:
c4:2f:ce:d8:19:f3:93:b1:cb:2b:65:3c:b8:d0:81:8d:b0:39:
2c:99:cd:d2:7f:bb:4a:a2:11:a6:77:d8:c6:35:d6:2b:1e:6d:
36:48:02:e7:94:7a:9b:5b:fe:b7:db:10:ee:4a:f9:ea:d6:8d:
07:cf:ec:29:aa:e9:0d:a5:e3:ec:77:4c:9c:d5:d1:f1:f0:9e:
7c:ad:07:4a:e2:cf:9c:a0:0b:39:0c:c7:e2:be:83:b3:08:84:
1a:27:80:b2:2a:a2:8f:be:56:fb:68:3a:13:02:7d:db:5d:2b:
b8:62:3a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:18 2025 by rpki-client