Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/96889f-ed6d-467c-80e1-ae36f9e381a1/1/m27zndtptIpnpZjMYCEy69UHC_E.roa
File: m27zndtptIpnpZjMYCEy69UHC_E.roa (raw, json)
Hash identifier: 98grwgI9FCOR/UZyZn2sFXWifqmP3ksZxcye0dMc7uI=
Subject key identifier: 9B:6E:F3:9D:DB:69:B4:8A:67:A5:98:CC:60:21:32:EB:D5:07:0B:F1
Certificate issuer: /CN=4825bd9ecd7c164d7bdc2f770dfc257c9d10fc6b
Certificate serial: 01856F5DB6B031C4EAE2B350C830A420432A
Authority key identifier: 48:25:BD:9E:CD:7C:16:4D:7B:DC:2F:77:0D:FC:25:7C:9D:10:FC:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SCW9ns18Fk173C93DfwlfJ0Q_Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/96889f-ed6d-467c-80e1-ae36f9e381a1/1/m27zndtptIpnpZjMYCEy69UHC_E.roa
Signing time: Sun 01 Jan 2023 22:04:50 +0000
ROA not before: Sun 01 Jan 2023 22:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41155
IP address blocks: 188.244.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b6:b0:31:c4:ea:e2:b3:50:c8:30:a4:20:43:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4825bd9ecd7c164d7bdc2f770dfc257c9d10fc6b
Validity
Not Before: Jan 1 22:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b6ef39ddb69b48a67a598cc602132ebd5070bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:32:3c:37:75:74:1e:bb:cb:c3:6e:9d:db:
cb:fc:d4:17:8a:25:29:2b:a5:7c:32:c0:52:41:69:
eb:7b:f6:2a:3e:81:43:f2:5f:bf:3a:45:89:3a:d3:
a4:dd:d7:11:9d:b8:07:7f:d9:ad:ed:e4:a2:b6:74:
c5:02:02:34:43:3e:6f:fb:a9:aa:53:7e:23:06:af:
39:9f:63:c9:6b:36:1c:6c:d2:99:8c:83:44:84:b0:
af:be:4f:da:3f:17:72:dc:b6:34:37:2e:36:e5:23:
2a:04:1d:f7:eb:04:16:df:2c:44:1a:c9:f0:01:61:
a2:a0:e4:c9:98:8d:ec:4b:ae:d4:95:47:81:31:40:
ea:82:bd:52:90:a8:1d:33:3f:cb:f9:f6:ce:63:c8:
a0:ce:50:cf:58:03:1e:61:ab:41:6f:3b:50:3c:4e:
d1:aa:2c:21:1e:88:ea:24:51:f4:1e:5d:4c:df:83:
73:18:73:86:b6:a5:16:b1:ee:d1:e3:e4:70:62:d5:
54:f3:00:11:36:2c:2a:fb:b6:02:73:c8:76:fd:29:
a2:34:77:b8:73:81:47:26:7e:21:02:75:68:a1:77:
59:9c:7b:88:16:74:87:90:43:69:da:e7:ae:2a:03:
84:41:58:cf:25:ec:74:10:24:ab:ce:e3:1f:a2:4b:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6E:F3:9D:DB:69:B4:8A:67:A5:98:CC:60:21:32:EB:D5:07:0B:F1
X509v3 Authority Key Identifier:
keyid:48:25:BD:9E:CD:7C:16:4D:7B:DC:2F:77:0D:FC:25:7C:9D:10:FC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCW9ns18Fk173C93DfwlfJ0Q_Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/96889f-ed6d-467c-80e1-ae36f9e381a1/1/m27zndtptIpnpZjMYCEy69UHC_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/96889f-ed6d-467c-80e1-ae36f9e381a1/1/SCW9ns18Fk173C93DfwlfJ0Q_Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.116.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:d4:07:ad:9c:4b:e4:3c:e6:70:cc:87:22:11:46:b0:b2:8d:
4f:07:f2:6d:1d:e6:c7:ea:4b:43:73:21:13:e4:7d:a3:ec:36:
11:65:b1:8b:04:74:b0:ae:5f:aa:6d:94:25:5b:12:d5:e1:fc:
c2:24:3a:57:4c:c6:4f:6c:00:fd:e5:16:61:9f:26:ea:a5:8f:
72:f2:65:ea:30:92:bc:fd:19:47:04:1e:36:c1:2f:cc:07:5b:
6f:7f:cb:4b:90:b9:d8:1c:05:c6:26:a7:a9:34:da:97:90:fa:
65:d2:21:bc:a3:e5:ff:48:23:99:e5:41:bf:17:4e:56:da:0e:
fc:1a:f7:0a:6e:fb:7e:7f:31:68:93:8d:ff:6f:51:1d:1c:54:
41:52:1f:07:3d:d0:91:e7:77:ee:ee:f9:27:18:a9:39:fd:cc:
04:9b:b2:74:bd:e9:47:fd:87:7a:aa:39:47:6b:35:91:fc:6e:
6a:52:74:1a:98:a0:e0:49:ea:d2:4e:2f:10:1b:dd:8f:4d:8d:
e2:36:09:9f:56:68:9c:1b:ec:b8:a9:e6:76:e1:a3:2b:3d:7c:
09:10:02:e4:0e:ec:54:71:e3:cb:c2:4d:14:56:35:2d:9b:5c:
41:42:b5:f5:6a:82:60:ea:02:c0:3c:b0:48:4b:d6:d6:55:48:
06:c1:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:12:56 2025 by rpki-client