Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/uEKvaIXE6AGu8XIqzOLVucgod9E.roa
File: uEKvaIXE6AGu8XIqzOLVucgod9E.roa (raw, json)
Hash identifier: eGHnMW43+FqQfygdSig1xl4fc2l9XUhNJwcWoNmALVg=
Subject key identifier: B8:42:AF:68:85:C4:E8:01:AE:F1:72:2A:CC:E2:D5:B9:C8:28:77:D1
Certificate issuer: /CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
Certificate serial: 018B4CB9A1AAC81E188EC925FCE8A042B8E3
Authority key identifier: 4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/uEKvaIXE6AGu8XIqzOLVucgod9E.roa
Signing time: Fri 20 Oct 2023 10:55:15 +0000
ROA not before: Fri 20 Oct 2023 10:55:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57428
IP address blocks: 176.116.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:b9:a1:aa:c8:1e:18:8e:c9:25:fc:e8:a0:42:b8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
Validity
Not Before: Oct 20 10:55:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b842af6885c4e801aef1722acce2d5b9c82877d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:b0:aa:79:d1:4a:e2:dd:c1:4f:90:10:7c:
e5:25:75:72:78:ee:59:38:ff:e7:1a:27:eb:e5:f9:
66:16:18:c7:b2:10:26:86:b9:e7:46:6e:91:c0:14:
29:ea:fa:fe:a6:aa:00:56:79:f3:57:4c:1d:a7:6f:
8b:92:78:72:b3:30:38:bf:db:a2:56:c3:74:b2:5f:
56:7d:98:fc:4d:99:0e:72:20:e5:28:02:b8:42:01:
e6:b2:c6:2d:a3:71:d1:09:f3:6d:2d:eb:4c:66:78:
af:73:b0:cd:9f:6b:9a:5a:91:66:71:9f:05:05:18:
8b:5c:f7:ea:26:3a:6c:6d:fb:55:f6:8e:5a:3f:84:
0a:73:f2:02:d0:89:cf:dd:92:e9:0c:29:10:59:ed:
3d:68:b0:ab:d9:78:2e:44:2a:67:86:3a:d3:6e:4c:
f0:d8:bb:65:82:ad:d6:bf:95:8e:58:04:10:e2:1a:
f9:0b:bd:58:9c:d9:ca:2b:ce:d2:18:c5:93:3d:cf:
61:f9:3b:1a:71:ac:b3:92:a8:db:26:d5:0d:7b:91:
98:c2:12:40:4e:e0:2a:b8:ea:3a:d8:e1:86:11:49:
f1:ef:18:80:83:5c:e4:4c:7c:eb:e1:b5:84:5b:46:
ea:ba:9b:8c:b4:ca:03:7f:40:7e:cf:e9:a9:7c:81:
d3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:42:AF:68:85:C4:E8:01:AE:F1:72:2A:CC:E2:D5:B9:C8:28:77:D1
X509v3 Authority Key Identifier:
keyid:4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/uEKvaIXE6AGu8XIqzOLVucgod9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.6.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:81:3c:6d:06:3f:b3:ca:5b:89:86:e8:8d:46:04:13:16:b0:
9b:47:ec:61:27:4f:f0:e7:1f:7e:13:73:43:74:08:56:23:22:
c4:e3:0c:2f:f5:ce:18:e7:5f:ed:52:16:e2:66:ec:6a:39:c0:
b1:86:93:ae:40:25:1e:b7:14:22:c2:1b:ec:ed:f6:89:5d:bf:
65:d0:63:c6:75:7f:61:b1:4d:ea:41:00:17:65:87:5e:b8:11:
2a:94:2e:b3:be:89:ae:c0:80:60:06:39:12:08:d4:95:0a:ce:
54:11:fe:32:3e:48:20:14:ed:ec:e0:8a:8f:f4:cf:de:3b:71:
2a:2d:09:52:84:0d:99:ff:a8:1c:6e:7c:b7:7f:d5:8e:67:ef:
45:2b:d6:ba:04:a9:6e:32:4e:f8:b3:a4:2a:ae:45:ef:06:9d:
70:1e:2b:81:12:75:7c:5e:3e:48:9f:d1:b6:a9:38:44:1d:b6:
12:b8:70:cb:9c:2e:83:0d:e0:21:dd:82:81:87:77:77:33:6e:
32:bb:fc:4d:4a:b3:31:eb:73:be:67:e4:d8:7b:d4:5d:9c:0f:
1f:b9:25:b3:d7:70:e8:6f:52:b5:1d:50:61:08:11:79:f6:24:
3e:fc:51:e7:18:88:6e:08:82:a9:16:f0:0b:b9:c2:90:35:b7:
2e:ac:c8:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtMuaGqyB4Yjskl/OigQrjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNGQ4MWQyMTVlZDUxZGZjYzNjM2JjMGU3ZTdiZjE1NDM3
M2FkMDUwHhcNMjMxMDIwMTA1NTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODQyYWY2ODg1YzRlODAxYWVmMTcyMmFjY2UyZDViOWM4Mjg3N2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkqwqnnRSuLdwU+QEHzlJXVyeO5Z
OP/nGifr5flmFhjHshAmhrnnRm6RwBQp6vr+pqoAVnnzV0wdp2+LknhyszA4v9ui
VsN0sl9WfZj8TZkOciDlKAK4QgHmssYto3HRCfNtLetMZnivc7DNn2uaWpFmcZ8F
BRiLXPfqJjpsbftV9o5aP4QKc/IC0InP3ZLpDCkQWe09aLCr2XguRCpnhjrTbkzw
2Ltlgq3Wv5WOWAQQ4hr5C71YnNnKK87SGMWTPc9h+TsacayzkqjbJtUNe5GYwhJA
TuAquOo62OGGEUnx7xiAg1zkTHzr4bWEW0bqupuMtMoDf0B+z+mpfIHTZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLhCr2iFxOgBrvFyKszi1bnIKHfRMB8GA1UdIwQY
MBaAFEpNgdIV7VHfzDw7wOfnvxVDc60FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2syQjBoWHRVZF9NUER2QTUtZV9GVU56clFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85NzU5ZTMtNzI2MC00ZTBlLTk4MjYt
NGE3MDhkMTI5NTJiLzEvdUVLdmFJWEU2QUd1OFhJcXpPTFZ1Y2dvZDlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85NzU5ZTMtNzI2MC00ZTBlLTk4MjYtNGE3MDhkMTI5NTJi
LzEvU2syQjBoWHRVZF9NUER2QTUtZV9GVU56clFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHQGMA0G
CSqGSIb3DQEBCwUAA4IBAQDAgTxtBj+zyluJhuiNRgQTFrCbR+xhJ0/w5x9+E3ND
dAhWIyLE4wwv9c4Y51/tUhbiZuxqOcCxhpOuQCUetxQiwhvs7faJXb9l0GPGdX9h
sU3qQQAXZYdeuBEqlC6zvomuwIBgBjkSCNSVCs5UEf4yPkggFO3s4IqP9M/eO3Eq
LQlShA2Z/6gcbny3f9WOZ+9FK9a6BKluMk74s6QqrkXvBp1wHiuBEnV8Xj5In9G2
qThEHbYSuHDLnC6DDeAh3YKBh3d3M24yu/xNSrMx63O+Z+TYe9RdnA8fuSWz13Do
b1K1HVBhCBF59iQ+/FHnGIhuCIKpFvALucKQNbcurMih
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:11 2025 by rpki-client