Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/94JmMUrS1djNjHGoikC_1fovmho.roa
File: 94JmMUrS1djNjHGoikC_1fovmho.roa (raw, json)
Hash identifier: OX7e1ATnH0xWowJ0bCcju9gK8Kqyqpr8u+DPQvT9FZw=
Subject key identifier: F7:82:66:31:4A:D2:D5:D8:CD:8C:71:A8:8A:40:BF:D5:FA:2F:9A:1A
Certificate issuer: /CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
Certificate serial: 0189B048C8A104687779B48C91D9130D36B8
Authority key identifier: 4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/94JmMUrS1djNjHGoikC_1fovmho.roa
Signing time: Tue 01 Aug 2023 08:48:27 +0000
ROA not before: Tue 01 Aug 2023 08:48:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.116.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:48:c8:a1:04:68:77:79:b4:8c:91:d9:13:0d:36:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
Validity
Not Before: Aug 1 08:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f78266314ad2d5d8cd8c71a88a40bfd5fa2f9a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:e6:94:66:2e:47:ee:4a:4d:2d:97:87:cd:
8e:1f:68:91:b8:5a:49:29:71:68:6d:3c:5d:af:ec:
de:bb:12:31:11:79:43:e7:9d:6b:0c:70:de:72:32:
f7:68:2e:14:a3:37:12:37:46:4e:02:9c:ca:88:94:
d4:a1:13:40:b3:6f:37:44:fc:bc:91:0e:0e:28:67:
74:33:b3:2d:54:07:f5:a0:35:2e:c6:d3:b3:c2:71:
7d:99:d2:04:ff:00:dc:49:4a:15:c7:ef:11:bd:36:
5f:9c:50:67:08:bc:69:e6:85:36:78:9f:e5:99:fe:
05:3c:43:7b:58:92:79:34:9e:e3:51:6d:6c:f5:2e:
54:f9:41:0f:5a:49:b0:d2:10:0b:44:ea:6c:b0:e8:
45:c0:d7:09:4f:c1:16:b9:67:b6:5e:ee:a6:13:c0:
a1:a1:1e:26:ca:fb:33:59:77:da:5d:a9:45:d4:3d:
72:fe:0e:15:c5:a9:34:5d:79:e0:16:7c:54:0e:24:
cf:e7:66:a7:00:0c:41:8e:d1:6a:42:c0:cf:05:0d:
f2:8e:22:6f:4e:7a:ab:5a:47:c6:0a:cf:c0:08:28:
05:db:c2:60:3f:80:dc:db:81:46:88:41:d1:65:56:
e9:2f:24:e8:10:83:ae:9b:b5:76:ff:b3:0f:c6:b7:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:82:66:31:4A:D2:D5:D8:CD:8C:71:A8:8A:40:BF:D5:FA:2F:9A:1A
X509v3 Authority Key Identifier:
keyid:4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/94JmMUrS1djNjHGoikC_1fovmho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.6.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:57:fe:9b:11:85:6a:72:18:53:a7:13:34:e4:12:01:c2:85:
3d:07:b3:ae:c3:15:ed:e1:04:79:04:78:e4:a4:85:d7:cc:f8:
11:ae:62:64:d5:ae:a6:a1:e4:d2:1b:3f:b8:41:61:0c:ff:ee:
22:3d:99:7a:3c:ac:e8:eb:c3:33:42:71:1f:03:b4:61:c0:de:
ea:5e:12:8e:f4:0d:77:7e:06:a9:76:82:1f:99:da:6c:14:30:
e9:bb:b9:dc:67:3f:9d:f2:95:6e:85:88:7b:b4:82:77:72:f7:
a0:ed:87:c4:ec:fb:e9:79:78:25:57:45:4f:0f:47:ed:4d:a4:
b8:27:94:78:a2:00:66:38:0d:5d:6b:e9:8d:ca:36:a4:46:c1:
fe:cb:7a:fe:cf:fd:29:77:dd:46:37:ba:1b:82:d1:d3:45:72:
c6:5a:0f:9f:15:e6:5c:e2:74:94:9b:39:50:de:16:f5:6d:18:
f1:48:64:da:de:c9:c0:1d:57:09:0f:24:d6:4d:7a:fc:53:d7:
f5:cb:f2:10:9c:05:7c:56:27:7b:ec:ab:48:25:e8:97:78:56:
75:42:f4:42:b8:e6:91:da:21:dc:5d:5d:20:cf:46:49:b0:e6:
3a:27:72:d0:78:a9:4a:7d:95:11:78:fb:7e:60:6d:af:de:44:
1a:18:8a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:10 2025 by rpki-client