Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/wr3ws3T6mARtJYcRuIWt63kUxSg.roa
File: wr3ws3T6mARtJYcRuIWt63kUxSg.roa (raw, json)
Hash identifier: uKt7JAB8oy5q2rF6lS9ii/Z+SdkyCoQLBMBf1+B38nI=
Subject key identifier: C2:BD:F0:B3:74:FA:98:04:6D:25:87:11:B8:85:AD:EB:79:14:C5:28
Certificate issuer: /CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
Certificate serial: 71DEF5
Authority key identifier: 80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/wr3ws3T6mARtJYcRuIWt63kUxSg.roa
Signing time: Sat 01 Jan 2022 04:51:32 +0000
ROA not before: Sat 01 Jan 2022 04:51:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 176.126.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7462645 (0x71def5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
Validity
Not Before: Jan 1 04:51:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2bdf0b374fa98046d258711b885adeb7914c528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:b3:f4:06:bb:b8:a2:aa:06:a5:25:14:2a:
e4:7e:00:f5:9d:81:98:0c:81:d9:80:4e:28:e8:aa:
16:52:58:30:f0:dd:cb:3b:3e:d1:e2:14:60:c9:ce:
bd:3b:ef:3e:99:d9:72:11:66:52:d7:1e:ed:c7:21:
49:ac:55:38:a5:c4:80:f7:d5:7d:c7:4b:dc:05:7d:
f1:d8:b6:8a:18:41:58:0a:7a:24:3d:a0:bf:61:7c:
ce:d6:58:ea:61:17:02:6c:d8:dc:58:fb:13:d2:e5:
fa:96:21:ea:66:df:ed:5b:2c:1b:3c:1c:24:a9:1a:
50:86:bf:a5:29:77:f9:34:82:83:d8:ca:f8:34:1f:
16:01:ff:e0:fd:c2:14:d0:7f:f2:06:78:ce:ae:e9:
8d:21:3d:25:3e:36:8c:cf:95:a5:59:c5:c4:c7:4e:
c6:2a:62:6f:57:d8:0c:65:34:6b:33:2e:e8:d4:a6:
f6:5e:2a:eb:95:c3:dc:5d:56:df:18:ee:b8:27:64:
2b:8b:dd:b7:3c:34:bf:84:59:11:b8:14:ad:ab:6e:
4b:ed:e3:ea:35:65:a9:f5:f9:6e:5e:ca:bc:1f:65:
df:35:8f:8f:01:a0:30:48:fa:29:b0:ea:a8:07:de:
e3:a1:ef:ea:d4:66:81:22:e9:c3:b6:75:4c:c5:d5:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BD:F0:B3:74:FA:98:04:6D:25:87:11:B8:85:AD:EB:79:14:C5:28
X509v3 Authority Key Identifier:
keyid:80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/wr3ws3T6mARtJYcRuIWt63kUxSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gNBh_jYoEdznZOaaepm49r5fKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.106.0/24
Signature Algorithm: sha256WithRSAEncryption
16:99:ae:88:78:9b:b6:f3:69:b4:d3:74:3e:0f:fe:c2:12:58:
28:b0:22:1b:73:cf:23:69:6a:1b:27:6f:f1:ae:66:b8:ba:e3:
c9:25:da:60:bb:94:3b:3b:02:7d:b6:13:59:64:f1:1b:cb:71:
34:37:94:9d:b9:c9:a0:16:df:de:65:a5:14:ee:25:0e:db:6e:
e0:60:41:b5:1f:73:26:d2:32:a5:e3:f3:13:48:58:5e:63:f4:
01:cf:0d:32:e4:07:d9:67:35:89:90:47:52:29:9d:ac:d1:9b:
18:20:0e:ff:aa:a7:86:e8:2b:1f:fe:30:1e:8d:31:ee:8f:c2:
c9:f8:d5:4e:28:a7:62:ed:47:7f:83:b9:82:e2:c5:ff:ea:a2:
4a:69:00:04:c6:c2:62:70:f9:72:28:26:98:1f:96:90:08:95:
66:dd:bb:46:ff:70:47:62:c7:da:b7:fe:06:af:d4:e1:1f:f1:
bd:5a:04:34:17:d0:2f:d6:23:7f:a1:43:c9:02:87:2d:9e:61:
ed:2c:e0:41:e2:32:3b:fe:43:e3:4f:26:eb:51:c5:77:63:82:
79:ee:f5:a8:dc:4a:01:9d:bf:58:e7:d6:1d:3a:69:1e:fc:fb:
14:40:bd:ba:11:8d:05:a1:23:09:fc:51:b2:0f:8f:47:43:36:
1c:ff:16:3b
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDcd71MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgw
ZDA2MWZlMzYyODExZGNlNzY0ZTY5YTdhOTliOGY2YmU1ZjJhMDMwHhcNMjIwMTAx
MDQ1MTMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjMmJkZjBiMzc0ZmE5
ODA0NmQyNTg3MTFiODg1YWRlYjc5MTRjNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvZWz9Aa7uKKqBqUlFCrkfgD1nYGYDIHZgE4o6KoWUlgw8N3L
Oz7R4hRgyc69O+8+mdlyEWZS1x7txyFJrFU4pcSA99V9x0vcBX3x2LaKGEFYCnok
PaC/YXzO1ljqYRcCbNjcWPsT0uX6liHqZt/tWywbPBwkqRpQhr+lKXf5NIKD2Mr4
NB8WAf/g/cIU0H/yBnjOrumNIT0lPjaMz5WlWcXEx07GKmJvV9gMZTRrMy7o1Kb2
XirrlcPcXVbfGO64J2Qri923PDS/hFkRuBStq25L7ePqNWWp9fluXsq8H2XfNY+P
AaAwSPopsOqoB97joe/q1GaBIunDtnVMxdVDHwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMK98LN0+pgEbSWHEbiFret5FMUoMB8GA1UdIwQYMBaAFIDQYf42KBHc52Tm
mnqZuPa+XyoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Z05CaF9qWW9FZHpuWk9hYWVwbTQ5cjVmS2dNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83OS8zMWZhNjItY2Q0MC00MDQ1LTg2OTItZmZlYTViY2M4ZDcyLzEv
d3Izd3MzVDZtQVJ0SlljUnVJV3Q2M2tVeFNnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8z
MWZhNjItY2Q0MC00MDQ1LTg2OTItZmZlYTViY2M4ZDcyLzEvZ05CaF9qWW9FZHpu
Wk9hYWVwbTQ5cjVmS2dNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsH5qMA0GCSqGSIb3DQEBCwUAA4IB
AQAWma6IeJu282m003Q+D/7CElgosCIbc88jaWobJ2/xrma4uuPJJdpgu5Q7OwJ9
thNZZPEby3E0N5SducmgFt/eZaUU7iUO227gYEG1H3Mm0jKl4/MTSFheY/QBzw0y
5AfZZzWJkEdSKZ2s0ZsYIA7/qqeG6Csf/jAejTHuj8LJ+NVOKKdi7Ud/g7mC4sX/
6qJKaQAExsJicPlyKCaYH5aQCJVm3btG/3BHYsfat/4Gr9ThH/G9WgQ0F9Av1iN/
oUPJAoctnmHtLOBB4jI7/kPjTybrUcV3Y4J57vWo3EoBnb9Y59YdOmke/PsUQL26
EY0FoSMJ/FGyD49HQzYc/xY7
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:18 2025 by rpki-client