Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/VxvgNY90zJVt7nqK-XrCeaCSWNM.roa
File: VxvgNY90zJVt7nqK-XrCeaCSWNM.roa (raw, json)
Hash identifier: cXg/0IGk9HupiyL2ERhDazX50QSQ9/3nhQ4FjIZhLCE=
Subject key identifier: 57:1B:E0:35:8F:74:CC:95:6D:EE:7A:8A:F9:7A:C2:79:A0:92:58:D3
Certificate issuer: /CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
Certificate serial: 0186145AF0F6F16863E0C54DE672EE1FD27E
Authority key identifier: 4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/VxvgNY90zJVt7nqK-XrCeaCSWNM.roa
Signing time: Thu 02 Feb 2023 22:59:09 +0000
ROA not before: Thu 02 Feb 2023 22:59:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 176.116.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:14:5a:f0:f6:f1:68:63:e0:c5:4d:e6:72:ee:1f:d2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
Validity
Not Before: Feb 2 22:59:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=571be0358f74cc956dee7a8af97ac279a09258d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:40:97:8b:3d:4b:9c:f4:9e:c0:8b:8f:4f:4e:
73:ad:32:c8:7f:70:13:e6:86:55:03:59:c9:74:29:
09:bd:6c:95:33:58:e8:63:0e:82:8d:d3:fe:77:c0:
d4:59:76:18:cd:da:5f:f6:58:86:4a:42:d8:40:76:
4c:ef:df:b0:49:d0:03:d0:6c:c5:ad:29:f6:15:d7:
3a:3e:e0:e2:25:0c:a2:3d:53:4d:ac:72:cd:00:f6:
36:ec:e4:35:6e:52:cb:76:5f:3a:5a:f9:24:4e:93:
60:18:d2:cc:16:4f:cf:ad:fa:bf:13:12:f8:d2:49:
31:8e:fc:e7:62:be:27:e1:e6:87:59:b8:0e:11:d0:
a0:bc:65:01:c1:be:12:58:f7:75:2b:7a:80:25:1b:
e2:cd:46:f2:a7:10:37:cf:f3:77:89:0e:d7:37:ee:
d4:a4:f4:a8:a5:bd:4f:e5:4e:fb:ed:7b:3f:bd:af:
6e:02:58:9e:5a:dc:0c:89:ac:4c:b6:66:71:08:36:
2f:2d:13:3e:6a:f0:fb:c0:6b:18:9e:a2:88:66:84:
8f:d3:f5:2a:b3:1e:3b:72:7c:2f:07:a4:1e:07:75:
48:fc:fd:7c:3f:17:f6:b2:8a:be:21:cc:24:47:3c:
ab:cd:f3:0d:a4:0f:03:f4:26:de:44:18:62:79:98:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1B:E0:35:8F:74:CC:95:6D:EE:7A:8A:F9:7A:C2:79:A0:92:58:D3
X509v3 Authority Key Identifier:
keyid:4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/VxvgNY90zJVt7nqK-XrCeaCSWNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.6.0/24
Signature Algorithm: sha256WithRSAEncryption
47:99:90:1f:8a:cf:c2:36:6a:a3:1e:c6:b8:39:42:ac:45:e3:
48:d0:13:47:5e:89:07:c9:3b:28:9f:26:c2:d3:f2:50:b3:33:
4e:84:4d:25:fd:18:46:53:05:42:85:3f:33:f8:67:32:19:26:
3b:01:dd:9d:7b:a5:7f:55:c3:81:47:dc:3a:87:0c:e3:ff:9e:
b0:93:9d:e6:c2:80:dd:49:2e:04:4d:a7:a5:b0:8c:c5:84:90:
ac:fd:d6:1c:fa:01:f5:df:3b:ca:62:d1:db:96:cc:0d:2e:b8:
19:6b:8e:d8:bc:15:7d:2c:7e:c3:59:52:e4:78:46:39:d1:7a:
37:ab:7d:77:5e:01:76:85:76:2a:cb:54:4e:6c:9c:92:68:9c:
f9:3f:ab:c0:d1:5d:5c:e2:bd:69:85:5a:2e:18:b9:72:7b:e4:
78:2a:db:0a:1e:34:b2:ab:d2:31:29:fb:ad:4e:c7:4b:ea:fd:
d1:6f:bf:67:14:16:ae:ef:39:2f:93:6b:f0:02:89:48:da:67:
5a:00:b9:c3:24:50:6a:c5:75:d6:e1:be:07:c5:31:7f:05:0e:
16:13:7f:53:3a:59:8a:d6:42:55:90:fc:94:82:ff:a7:94:3e:
65:64:8c:57:43:19:c2:00:5b:ad:09:64:c9:18:43:6e:02:1f:
6f:e2:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:35 2025 by rpki-client