Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/cEN4mxWryDbGJ80W93ozb_bo0II.roa
File: cEN4mxWryDbGJ80W93ozb_bo0II.roa (raw, json)
Hash identifier: zM8g3xpc1rdVVfusiOXiywQNpDTJai20rAwO/byivJE=
Subject key identifier: 70:43:78:9B:15:AB:C8:36:C6:27:CD:16:F7:7A:33:6F:F6:E8:D0:82
Certificate issuer: /CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
Certificate serial: 04FF54
Authority key identifier: 4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/cEN4mxWryDbGJ80W93ozb_bo0II.roa
Signing time: Thu 07 Apr 2022 16:54:27 +0000
ROA not before: Thu 07 Apr 2022 16:54:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 176.116.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327508 (0x4ff54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
Validity
Not Before: Apr 7 16:54:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7043789b15abc836c627cd16f77a336ff6e8d082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:cb:fd:1a:ae:09:08:87:da:62:dc:25:b5:
b0:47:40:db:f2:ae:4a:0e:20:8f:8e:97:ec:26:73:
38:7a:49:b8:28:c8:d3:c2:8a:aa:2f:16:92:64:70:
6b:de:94:e5:ae:48:8b:57:3c:33:21:42:73:bc:b6:
ef:72:25:38:1b:1e:00:f1:06:0b:68:34:0c:37:af:
5f:16:67:3c:f8:6f:ad:b1:37:d4:94:8e:04:7c:a4:
ce:13:a2:b6:39:ba:cb:be:08:d6:19:f6:cd:70:6a:
05:1d:18:88:cf:17:be:6a:68:7f:de:55:b1:85:e3:
2e:b2:da:c1:85:28:2e:7f:62:1c:49:c0:48:30:e2:
98:d3:22:e9:b0:05:19:7e:2c:7f:c1:0b:75:05:37:
ed:74:9e:17:9b:f8:f0:90:bf:6b:1f:8e:d4:d7:26:
e5:70:f0:dc:71:c3:24:89:98:0b:10:31:73:82:d2:
64:80:61:34:4e:ef:7c:81:03:ed:a1:93:23:06:2d:
c0:75:ad:24:20:a5:3a:4c:d8:14:0b:73:fb:88:6e:
3b:89:e4:16:91:7f:f0:d5:f4:eb:b8:c0:c6:e9:be:
65:1d:bd:54:0b:ac:a8:f1:6c:ef:1c:80:6e:a9:08:
ad:fa:7b:7a:21:29:fe:49:e2:9a:d8:c1:32:91:33:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:43:78:9B:15:AB:C8:36:C6:27:CD:16:F7:7A:33:6F:F6:E8:D0:82
X509v3 Authority Key Identifier:
keyid:4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/cEN4mxWryDbGJ80W93ozb_bo0II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.6.0/24
Signature Algorithm: sha256WithRSAEncryption
66:21:4e:cb:8c:d2:a4:5f:07:6b:b4:81:a0:25:c4:e1:f3:38:
e6:2e:2c:c3:b9:ef:0d:c2:7e:38:89:5b:97:2a:7b:cf:29:50:
5a:66:02:2f:06:0a:70:a4:2f:95:fa:2d:52:be:d7:37:64:39:
b2:b7:75:06:2e:f7:c2:5f:f3:74:05:a8:cd:5d:bf:38:71:1a:
6f:ac:87:10:d7:92:62:6f:26:9b:44:3e:9b:02:8b:f5:17:4a:
5c:39:e0:fb:4e:5e:5a:18:8b:c7:ba:ec:3c:5e:e7:fe:aa:50:
ce:37:1f:39:d3:16:87:e8:35:96:b5:f1:22:2c:69:c8:8d:5e:
f3:01:4c:b9:a8:fe:cb:9b:d5:75:89:3e:72:00:64:ea:a4:39:
16:ae:d7:1a:03:c4:3d:e4:f7:d3:a8:35:26:04:83:2d:d0:b9:
e5:c6:f6:ed:9d:79:96:2f:0c:ad:41:1c:f5:ca:c2:2e:73:ca:
fe:ff:e0:4a:24:62:0a:22:e7:55:8d:a3:60:96:8d:48:63:8f:
0a:c4:cb:47:e7:30:2e:8a:ca:f5:83:ec:b7:15:48:e5:be:49:
20:45:96:f4:db:a1:19:05:30:9c:26:41:41:3e:82:4e:e2:64:
1f:93:59:fa:9f:c5:a0:4d:b0:c3:f9:7a:9b:ed:fa:08:c0:47:
18:14:92:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:04 2025 by rpki-client