Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/6567XmcrBmkbhUW1fmU3o0xdoe4.roa
File: 6567XmcrBmkbhUW1fmU3o0xdoe4.roa (raw, json)
Hash identifier: /Szz7HzVP7QhQFHqh759uE8NTLJGxvblqW2SMeJKJEM=
Subject key identifier: EB:9E:BB:5E:67:2B:06:69:1B:85:45:B5:7E:65:37:A3:4C:5D:A1:EE
Certificate issuer: /CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
Certificate serial: 0148ABBF
Authority key identifier: 80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/6567XmcrBmkbhUW1fmU3o0xdoe4.roa
Signing time: Mon 04 Apr 2022 07:41:23 +0000
ROA not before: Mon 04 Apr 2022 07:41:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 176.126.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21539775 (0x148abbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
Validity
Not Before: Apr 4 07:41:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb9ebb5e672b06691b8545b57e6537a34c5da1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:3e:2b:2c:cb:e8:00:0b:8c:d5:6f:5c:b2:
ef:59:f9:8d:81:fa:53:9e:ab:37:e5:2b:63:57:74:
03:61:ee:bb:be:f7:32:37:44:65:01:ce:ba:2c:ca:
03:ad:2c:17:ab:b2:0f:42:b5:00:7f:00:2c:53:02:
e8:28:93:6c:44:f0:7d:49:75:fe:c7:77:2e:81:db:
a6:2a:3a:77:7a:13:33:62:5a:32:28:d1:03:ca:de:
5e:6c:69:3b:e1:00:b1:6f:c6:42:6b:46:67:e6:f3:
3f:e8:15:e4:f3:ab:a3:62:3b:2a:9d:92:50:ef:f8:
34:99:b8:3d:8f:29:31:ed:22:2c:7f:75:7c:de:b2:
4a:f4:1c:20:d5:35:af:31:bf:ba:6e:9a:7d:1f:aa:
1c:8f:65:d3:2f:3f:b4:1a:b3:b7:b5:2d:44:df:6c:
d1:e2:d6:18:2e:bb:4e:43:b3:e9:d3:42:73:05:5a:
c1:4b:27:a7:9e:a0:ee:18:51:0d:79:50:8a:0d:72:
19:5d:3f:a2:41:76:ad:86:4d:1e:d6:09:52:29:b5:
1c:a9:60:f9:01:80:d4:ee:ce:18:3f:af:68:4d:e8:
88:21:d5:3d:24:cb:2e:9d:3e:f5:7d:d0:7f:43:ec:
6b:60:40:ed:bf:9f:16:50:b8:2e:fb:3e:ab:06:7c:
c2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9E:BB:5E:67:2B:06:69:1B:85:45:B5:7E:65:37:A3:4C:5D:A1:EE
X509v3 Authority Key Identifier:
keyid:80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/6567XmcrBmkbhUW1fmU3o0xdoe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gNBh_jYoEdznZOaaepm49r5fKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:90:4b:ed:c2:61:6b:37:e3:2c:06:b2:61:bc:94:54:1a:c1:
8a:a9:59:a4:af:35:58:16:4b:77:33:aa:d5:8b:47:e0:c7:82:
2d:f1:eb:56:f7:7d:32:2a:8e:2f:69:5d:ae:9d:59:83:28:28:
bc:cc:29:fe:6b:d1:9e:62:a4:3c:25:8c:3c:90:ad:eb:ce:7f:
cc:76:01:40:5f:6e:44:b0:99:cd:d6:f2:47:5f:fd:d0:8c:1c:
9b:a2:cb:c5:c8:a6:ba:47:04:81:44:bd:ce:2d:c1:76:2a:6f:
05:3f:59:48:02:c2:5f:34:53:f5:e2:f2:fa:1f:15:10:a4:93:
08:f2:3f:e8:c2:00:f8:b9:86:33:48:2f:71:61:43:b3:d8:11:
38:40:4e:8a:a1:da:99:92:86:85:54:96:d3:93:e8:fb:68:88:
b7:c1:41:ce:7a:47:ae:39:01:ca:e2:7a:dd:2e:2b:12:c7:42:
30:a1:7c:6e:be:eb:ef:58:7a:58:51:5f:6d:10:a1:67:d3:cc:
7a:76:85:d3:d2:50:ee:a2:50:bd:71:b1:77:ac:e8:2c:57:2d:
d5:d3:97:d6:8c:0d:44:db:c5:00:9e:b0:ea:37:1e:84:b8:b1:
b9:21:f9:69:77:e2:8f:c0:1c:6a:12:1d:cc:0f:68:3f:12:54:
a5:17:8c:b7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAUirvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MGQwNjFmZTM2MjgxMWRjZTc2NGU2OWE3YTk5YjhmNmJlNWYyYTAzMB4XDTIyMDQw
NDA3NDEyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWI5ZWJiNWU2NzJi
MDY2OTFiODU0NWI1N2U2NTM3YTM0YzVkYTFlZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALiGPissy+gAC4zVb1yy71n5jYH6U56rN+UrY1d0A2Huu773
MjdEZQHOuizKA60sF6uyD0K1AH8ALFMC6CiTbETwfUl1/sd3LoHbpio6d3oTM2Ja
MijRA8reXmxpO+EAsW/GQmtGZ+bzP+gV5POro2I7Kp2SUO/4NJm4PY8pMe0iLH91
fN6ySvQcINU1rzG/um6afR+qHI9l0y8/tBqzt7UtRN9s0eLWGC67TkOz6dNCcwVa
wUsnp56g7hhRDXlQig1yGV0/okF2rYZNHtYJUim1HKlg+QGA1O7OGD+vaE3oiCHV
PSTLLp0+9X3Qf0Psa2BA7b+fFlC4Lvs+qwZ8wm0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTrnrteZysGaRuFRbV+ZTejTF2h7jAfBgNVHSMEGDAWgBSA0GH+NigR3Odk
5pp6mbj2vl8qAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dOQmhfallvRWR6blpPYWFlcG00OXI1ZktnTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzkvMzFmYTYyLWNkNDAtNDA0NS04NjkyLWZmZWE1YmNjOGQ3Mi8x
LzY1NjdYbWNyQm1rYmhVVzFmbVUzbzB4ZG9lNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkv
MzFmYTYyLWNkNDAtNDA0NS04NjkyLWZmZWE1YmNjOGQ3Mi8xL2dOQmhfallvRWR6
blpPYWFlcG00OXI1ZktnTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALB+ajANBgkqhkiG9w0BAQsFAAOC
AQEAb5BL7cJhazfjLAayYbyUVBrBiqlZpK81WBZLdzOq1YtH4MeCLfHrVvd9MiqO
L2ldrp1ZgygovMwp/mvRnmKkPCWMPJCt685/zHYBQF9uRLCZzdbyR1/90Iwcm6LL
xcimukcEgUS9zi3BdipvBT9ZSALCXzRT9eLy+h8VEKSTCPI/6MIA+LmGM0gvcWFD
s9gROEBOiqHamZKGhVSW05Po+2iIt8FBznpHrjkByuJ63S4rEsdCMKF8br7r71h6
WFFfbRChZ9PMenaF09JQ7qJQvXGxd6zoLFct1dOX1owNRNvFAJ6w6jcehLixuSH5
aXfij8AcahIdzA9oPxJUpReMtw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:19 2025 by rpki-client