Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/86AmA28Xo8pQmoXbM_XCX69Erak.roa
File: 86AmA28Xo8pQmoXbM_XCX69Erak.roa (raw, json)
Hash identifier: GOseNPDQQ3n9oIdYyQEG0pEylQK7NxzzQ/UqTgXzpS4=
Subject key identifier: F3:A0:26:03:6F:17:A3:CA:50:9A:85:DB:33:F5:C2:5F:AF:44:AD:A9
Certificate issuer: /CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
Certificate serial: 73000D
Authority key identifier: 80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/86AmA28Xo8pQmoXbM_XCX69Erak.roa
Signing time: Sat 01 Jan 2022 04:51:33 +0000
ROA not before: Sat 01 Jan 2022 04:51:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 176.126.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7536653 (0x73000d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
Validity
Not Before: Jan 1 04:51:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3a026036f17a3ca509a85db33f5c25faf44ada9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:83:a8:7e:7f:8d:9d:bb:5c:0b:ba:d8:98:
52:7e:c7:21:18:38:1a:87:23:53:28:ec:96:0e:2d:
fa:11:85:cb:47:4e:44:23:ee:07:9e:00:5f:b4:cf:
04:ca:f7:59:5b:ec:53:12:82:43:cf:05:03:ee:37:
06:d5:77:e1:24:d8:31:6b:0a:53:62:ac:38:ba:9e:
e7:d1:e5:3a:ad:b9:94:9d:8d:0a:8a:a0:31:c4:cf:
c6:56:16:1d:02:05:79:df:df:08:3c:db:b7:44:e5:
65:2e:db:81:4f:50:35:e8:6a:6b:31:ab:9a:1e:71:
b2:f5:55:44:02:aa:c4:f7:98:7b:cb:fd:4d:64:1f:
8a:25:24:5f:3d:3b:40:bf:5e:47:a9:89:bd:0b:c7:
92:9d:34:23:a4:f3:2a:0e:73:a3:75:85:8f:b6:66:
1f:99:ed:c3:b3:7d:b2:a2:fe:54:30:ac:70:66:31:
90:ea:ba:f2:b1:52:d3:33:40:eb:49:12:b7:35:88:
c1:a9:3b:bf:2c:82:0d:18:73:d4:95:76:a9:7c:7d:
91:d7:91:84:2d:ff:50:11:40:cd:08:48:42:bc:98:
cb:af:32:58:c3:dc:3e:73:dd:10:7a:3c:91:88:88:
40:d5:a8:26:c9:70:19:82:b9:ce:4f:73:a1:83:7a:
22:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A0:26:03:6F:17:A3:CA:50:9A:85:DB:33:F5:C2:5F:AF:44:AD:A9
X509v3 Authority Key Identifier:
keyid:80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/86AmA28Xo8pQmoXbM_XCX69Erak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gNBh_jYoEdznZOaaepm49r5fKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.106.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:2f:83:55:ad:35:e8:2b:aa:c7:3c:67:91:3a:e4:af:98:ce:
53:e3:81:19:f0:0e:f7:1a:de:31:d8:aa:ad:7c:d0:5c:23:f4:
74:14:ed:4e:65:40:c4:94:01:fb:a3:2f:63:ca:fb:f4:37:cf:
bd:a2:0a:a8:f6:18:fe:85:f7:61:f0:ff:fc:22:3f:21:4c:de:
8d:73:34:43:f6:85:53:86:b9:3d:af:e8:c4:d7:24:41:94:23:
6a:de:4f:d4:50:28:a4:df:c0:13:3d:be:ee:8e:9e:6e:f1:f9:
c3:f2:0a:75:4f:a6:cb:5c:88:d3:48:79:fc:1c:27:0a:20:79:
6e:89:33:8a:6f:85:c2:bb:79:66:2a:97:6c:3d:70:9b:e0:a2:
1a:66:97:bc:1e:c3:44:8d:1d:c2:be:7d:c3:93:67:14:89:9c:
aa:ff:e1:2a:46:c8:fb:06:1f:29:d7:33:8a:5d:3e:41:24:66:
62:39:fe:ea:b5:d9:11:a0:59:a5:ba:ad:44:3b:31:85:5f:da:
e3:33:d0:fa:03:11:10:4a:84:38:ac:c3:3f:99:87:d1:78:69:
80:92:52:9b:9a:37:af:56:38:bd:fa:ad:ae:65:80:46:af:6b:
d1:56:35:a4:ee:f2:f2:b4:ee:6c:96:ea:09:98:48:fe:ed:fc:
07:cb:2c:7d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDcwANMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgw
ZDA2MWZlMzYyODExZGNlNzY0ZTY5YTdhOTliOGY2YmU1ZjJhMDMwHhcNMjIwMTAx
MDQ1MTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmM2EwMjYwMzZmMTdh
M2NhNTA5YTg1ZGIzM2Y1YzI1ZmFmNDRhZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo1uDqH5/jZ27XAu62JhSfschGDgahyNTKOyWDi36EYXLR05E
I+4HngBftM8EyvdZW+xTEoJDzwUD7jcG1XfhJNgxawpTYqw4up7n0eU6rbmUnY0K
iqAxxM/GVhYdAgV5398IPNu3ROVlLtuBT1A16GprMauaHnGy9VVEAqrE95h7y/1N
ZB+KJSRfPTtAv15HqYm9C8eSnTQjpPMqDnOjdYWPtmYfme3Ds32yov5UMKxwZjGQ
6rrysVLTM0DrSRK3NYjBqTu/LIINGHPUlXapfH2R15GELf9QEUDNCEhCvJjLrzJY
w9w+c90QejyRiIhA1agmyXAZgrnOT3Ohg3oihwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFPOgJgNvF6PKUJqF2zP1wl+vRK2pMB8GA1UdIwQYMBaAFIDQYf42KBHc52Tm
mnqZuPa+XyoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Z05CaF9qWW9FZHpuWk9hYWVwbTQ5cjVmS2dNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83OS8zMWZhNjItY2Q0MC00MDQ1LTg2OTItZmZlYTViY2M4ZDcyLzEv
ODZBbUEyOFhvOHBRbW9YYk1fWENYNjlFcmFrLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8z
MWZhNjItY2Q0MC00MDQ1LTg2OTItZmZlYTViY2M4ZDcyLzEvZ05CaF9qWW9FZHpu
Wk9hYWVwbTQ5cjVmS2dNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsH5qMA0GCSqGSIb3DQEBCwUAA4IB
AQDQL4NVrTXoK6rHPGeROuSvmM5T44EZ8A73Gt4x2KqtfNBcI/R0FO1OZUDElAH7
oy9jyvv0N8+9ogqo9hj+hfdh8P/8Ij8hTN6NczRD9oVThrk9r+jE1yRBlCNq3k/U
UCik38ATPb7ujp5u8fnD8gp1T6bLXIjTSHn8HCcKIHluiTOKb4XCu3lmKpdsPXCb
4KIaZpe8HsNEjR3Cvn3Dk2cUiZyq/+EqRsj7Bh8p1zOKXT5BJGZiOf7qtdkRoFml
uq1EOzGFX9rjM9D6AxEQSoQ4rMM/mYfReGmAklKbmjevVji9+q2uZYBGr2vRVjWk
7vLytO5sluoJmEj+7fwHyyx9
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:14:04 2025 by rpki-client