Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8cd8ba-a04a-43b9-9807-3f8f8fb83ccf/1/nDMDkgwfGMCrg86qXPBqReqbUZU.roa
File: nDMDkgwfGMCrg86qXPBqReqbUZU.roa (raw, json)
Hash identifier: jeiVkyay25SjEdmgGdM1p/cu+vj2SgaJlxL+8FbCFoQ=
Subject key identifier: 9C:33:03:92:0C:1F:18:C0:AB:83:CE:AA:5C:F0:6A:45:EA:9B:51:95
Certificate issuer: /CN=b59d9d0c28ef47fe4142ea51905587172cb03306
Certificate serial: 018964753DACB3D34CEC3A336875D66A9DE6
Authority key identifier: B5:9D:9D:0C:28:EF:47:FE:41:42:EA:51:90:55:87:17:2C:B0:33:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZ2dDCjvR_5BQupRkFWHFyywMwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8cd8ba-a04a-43b9-9807-3f8f8fb83ccf/1/nDMDkgwfGMCrg86qXPBqReqbUZU.roa
Signing time: Mon 17 Jul 2023 15:25:52 +0000
ROA not before: Mon 17 Jul 2023 15:25:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 176.126.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:75:3d:ac:b3:d3:4c:ec:3a:33:68:75:d6:6a:9d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59d9d0c28ef47fe4142ea51905587172cb03306
Validity
Not Before: Jul 17 15:25:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c3303920c1f18c0ab83ceaa5cf06a45ea9b5195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a7:3e:d1:29:d1:f0:32:02:77:33:5f:71:81:
f0:8b:24:ce:a7:37:f2:07:52:f7:e3:70:fd:78:13:
79:cf:bc:e9:da:2a:8f:db:32:7c:d9:a8:be:13:2e:
66:06:ad:67:1a:58:2a:06:c1:64:36:80:65:d3:9b:
77:ef:98:22:98:65:d7:1d:f2:3f:4a:95:e2:5f:0c:
90:66:cc:f5:5f:ed:91:2e:f1:96:c1:14:7a:29:49:
c8:16:20:dc:6d:cc:5f:6e:63:a8:e6:31:79:f7:18:
53:80:e2:2f:60:af:89:77:3d:3a:4c:ec:9e:8f:fd:
10:80:b9:46:d5:f6:df:aa:22:c2:f9:db:20:43:55:
a0:d8:75:89:0f:f2:1d:1b:26:d8:fe:a8:ac:4e:cc:
d3:e0:06:10:62:7d:1d:5e:f6:d3:45:6e:f7:29:3e:
27:90:3e:91:d7:96:70:85:69:b8:04:57:89:98:61:
84:0a:69:1a:10:50:ee:9e:0c:5d:df:43:25:71:44:
2d:ad:e5:7d:7d:84:de:44:dc:53:df:c6:bc:63:ca:
ed:e3:43:f1:ee:a5:f5:64:76:22:ba:ea:87:63:f4:
ae:e1:86:e0:b4:e5:e0:24:bf:09:0a:05:16:98:38:
7f:82:34:cf:81:ec:3f:56:f1:d3:fb:d6:40:ac:34:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:33:03:92:0C:1F:18:C0:AB:83:CE:AA:5C:F0:6A:45:EA:9B:51:95
X509v3 Authority Key Identifier:
keyid:B5:9D:9D:0C:28:EF:47:FE:41:42:EA:51:90:55:87:17:2C:B0:33:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZ2dDCjvR_5BQupRkFWHFyywMwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8cd8ba-a04a-43b9-9807-3f8f8fb83ccf/1/nDMDkgwfGMCrg86qXPBqReqbUZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8cd8ba-a04a-43b9-9807-3f8f8fb83ccf/1/tZ2dDCjvR_5BQupRkFWHFyywMwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.109.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b1:6b:94:18:30:0f:56:ab:d4:f8:94:bd:af:2c:69:3b:62:
09:26:39:30:6a:9f:26:4b:7d:c7:80:4d:a2:0a:1c:bd:cd:28:
3a:b3:d2:b2:11:a6:d3:39:0a:9d:2f:4a:48:fa:16:e1:80:71:
b0:6b:a3:46:af:d2:bc:aa:28:9e:bf:f5:c5:c1:49:eb:5b:b6:
58:29:33:31:0c:47:ca:e5:3d:c5:e1:c9:10:c2:67:da:51:23:
2c:e2:9b:db:82:05:5d:08:20:82:0a:70:af:b9:e7:b3:3f:c9:
76:37:71:cf:4e:8d:c9:7d:59:a5:29:79:13:b7:7a:62:c7:aa:
d4:0f:14:60:0e:eb:23:cd:cb:d9:f8:a4:c4:59:fc:fd:17:8a:
d7:4e:6f:73:57:ff:1c:2c:ba:8d:fd:bd:5f:d4:aa:33:0b:84:
75:93:03:0d:a0:c8:34:6e:88:3a:e9:31:1d:64:bd:8f:ef:9b:
1e:20:9f:97:0a:46:78:d9:ff:e0:97:59:c1:7b:09:fc:80:ac:
e4:e9:40:98:e1:95:1a:7f:6d:85:57:31:83:af:ca:0d:fb:23:
6d:59:c4:d8:39:bd:ec:24:1a:ee:c1:b0:c5:59:ef:2a:e1:68:
db:7c:84:f7:03:a6:55:48:83:bf:94:22:88:76:a9:bb:92:81:
7a:09:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:08 2025 by rpki-client