Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/hepgGFLjqxps7pCxAqr2EvCmYMI.roa
File: hepgGFLjqxps7pCxAqr2EvCmYMI.roa (raw, json)
Hash identifier: YR6mx7Zb2fLx2HUgleMcoJVPYQDB7QBLZpWnCUsY6pg=
Subject key identifier: 85:EA:60:18:52:E3:AB:1A:6C:EE:90:B1:02:AA:F6:12:F0:A6:60:C2
Certificate issuer: /CN=4101e106a9ca7b14a67ab40277836a18c2f710be
Certificate serial: 018CF5D4EC66B7D29AF0262230EAC097B12E
Authority key identifier: 41:01:E1:06:A9:CA:7B:14:A6:7A:B4:02:77:83:6A:18:C2:F7:10:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQHhBqnKexSmerQCd4NqGML3EL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/hepgGFLjqxps7pCxAqr2EvCmYMI.roa
Signing time: Thu 11 Jan 2024 00:03:41 +0000
ROA not before: Thu 11 Jan 2024 00:03:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 176.118.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f5:d4:ec:66:b7:d2:9a:f0:26:22:30:ea:c0:97:b1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4101e106a9ca7b14a67ab40277836a18c2f710be
Validity
Not Before: Jan 11 00:03:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85ea601852e3ab1a6cee90b102aaf612f0a660c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:db:fa:cf:de:af:3b:52:01:f1:23:8f:c0:
8b:8b:98:b5:ce:00:4d:c6:a8:d0:bf:4b:e8:88:4e:
5d:b0:12:34:70:cd:a4:1c:e2:57:97:c1:62:7b:ff:
55:95:5a:f5:61:ba:f0:99:3a:87:ed:20:34:1f:c8:
d2:1f:97:93:0d:09:76:27:4d:82:2d:f8:80:11:12:
2d:93:33:52:81:b8:7f:93:e1:f3:d8:b5:80:70:70:
74:9c:bd:89:d8:a3:a4:a6:c2:cb:fa:e3:44:96:cf:
ca:87:31:9f:15:68:e0:64:9c:f8:e2:96:77:80:bd:
cc:84:92:d7:0e:cd:41:90:c7:c8:89:b0:f1:a4:1f:
bc:88:c1:f6:dd:e3:69:4f:14:9f:12:1d:4f:87:67:
4a:b9:df:8c:0f:28:96:3c:5c:23:ca:d4:13:a9:2b:
e4:6a:81:10:ef:e7:ee:52:e1:85:c5:3f:ea:22:f0:
b5:e4:6d:82:a9:27:58:7f:ff:8e:2e:cb:ea:10:eb:
c0:f5:1a:73:da:2f:9e:45:0f:da:90:b9:46:e9:0b:
fd:04:46:ed:ef:e6:22:3e:c0:f4:7e:08:08:95:33:
ee:9a:26:fb:0c:95:94:33:19:93:bd:2f:16:a4:50:
98:b6:67:d1:32:de:e0:b5:1c:0c:cb:99:82:59:8d:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EA:60:18:52:E3:AB:1A:6C:EE:90:B1:02:AA:F6:12:F0:A6:60:C2
X509v3 Authority Key Identifier:
keyid:41:01:E1:06:A9:CA:7B:14:A6:7A:B4:02:77:83:6A:18:C2:F7:10:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQHhBqnKexSmerQCd4NqGML3EL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/hepgGFLjqxps7pCxAqr2EvCmYMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/QQHhBqnKexSmerQCd4NqGML3EL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.160.0/24
Signature Algorithm: sha256WithRSAEncryption
67:81:b2:8c:09:d4:13:bf:3f:64:47:98:b0:04:7e:11:e0:09:
61:62:2d:f4:ae:84:50:30:79:f4:78:72:ad:46:03:c2:ee:e6:
8e:f8:90:31:fc:61:71:3c:38:ee:02:4a:66:80:25:04:e6:a2:
76:ed:5e:86:9b:a4:d5:49:a0:43:fe:86:b1:99:01:34:f8:a2:
01:49:55:a6:86:74:5a:bf:25:6f:e1:4e:4b:fd:d7:3f:c1:06:
9e:6e:39:c4:62:00:07:87:ae:05:7d:c6:87:a2:83:a9:47:92:
1b:8a:10:62:a8:f6:96:16:02:54:f8:fa:88:0d:6a:67:ff:e0:
44:8f:ed:7c:ec:42:d5:c1:c8:d1:4e:71:dd:92:99:97:47:c0:
b6:21:69:be:73:2d:6c:e6:60:de:30:86:a1:f9:1f:aa:8a:2f:
d1:56:5f:31:9c:c9:21:5c:57:9c:05:88:3d:3a:3f:14:29:bd:
1d:55:d6:25:33:cb:1f:45:09:16:f5:63:d7:58:35:a7:8a:fb:
18:f8:da:fb:23:31:2c:49:ec:f6:72:e6:23:1b:88:03:58:5f:
4d:ae:c7:54:3a:7b:ee:1f:6f:c3:60:d9:7e:20:b7:b9:d6:63:
e3:60:53:db:8e:f4:2c:1b:f1:b0:23:54:e9:cb:5b:7f:77:d0:
6d:95:72:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:17 2025 by rpki-client