Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/977fa3-3f65-4f40-9105-8603cdecf9a2/1/8DCE98rpTx5cLiqXh-wfR_ldzMk.roa
File: 8DCE98rpTx5cLiqXh-wfR_ldzMk.roa (raw, json)
Hash identifier: /St8puDi6e8DRFhAn7iEOnXtXmz+3c0Pqotif62MIQM=
Subject key identifier: F0:30:84:F7:CA:E9:4F:1E:5C:2E:2A:97:87:EC:1F:47:F9:5D:CC:C9
Certificate issuer: /CN=8fb1a18133bf384e7099e5985c40fe281e2da755
Certificate serial: 018B011DFB387165A67F4F5276F50BA56DEA
Authority key identifier: 8F:B1:A1:81:33:BF:38:4E:70:99:E5:98:5C:40:FE:28:1E:2D:A7:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7GhgTO_OE5wmeWYXED-KB4tp1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/977fa3-3f65-4f40-9105-8603cdecf9a2/1/8DCE98rpTx5cLiqXh-wfR_ldzMk.roa
Signing time: Thu 05 Oct 2023 18:33:43 +0000
ROA not before: Thu 05 Oct 2023 18:33:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49223
IP address blocks: 176.126.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:1d:fb:38:71:65:a6:7f:4f:52:76:f5:0b:a5:6d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb1a18133bf384e7099e5985c40fe281e2da755
Validity
Not Before: Oct 5 18:33:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f03084f7cae94f1e5c2e2a9787ec1f47f95dccc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:40:07:1b:6d:b4:93:1b:54:cc:90:f3:6e:5a:
ef:73:a7:b5:0c:2d:9b:fe:b9:df:d8:13:de:5c:75:
1e:0a:e2:92:0f:ad:29:bc:92:b1:8d:a8:dd:58:6d:
52:11:f4:aa:39:4d:91:e1:4e:02:10:64:96:64:fb:
8e:31:8f:a4:ba:73:4b:21:b1:42:e1:e8:ec:41:cd:
15:75:ca:b4:10:2c:54:cd:61:ed:7c:df:c8:a8:82:
18:1b:da:39:6e:dc:49:00:bd:df:16:ea:ea:ee:70:
04:b3:06:85:00:44:80:8a:e1:a3:06:5c:d8:f0:75:
34:89:96:39:62:21:ae:3b:04:dc:33:84:29:06:22:
af:49:0d:e6:23:b2:b6:c6:b4:05:52:cd:2d:62:63:
3f:de:7f:de:53:5c:3d:27:49:d4:64:44:07:d6:90:
af:cc:9b:c6:c2:2f:ea:3b:f5:99:04:21:7d:00:e4:
04:0c:4b:7b:94:29:11:ee:ee:6b:f8:06:6d:43:48:
34:41:89:52:ea:87:49:30:e8:31:37:36:1c:69:3d:
be:f2:84:ca:7d:08:f3:83:92:75:38:0c:b4:a0:cd:
49:1c:ff:b4:20:a3:7c:8d:30:50:97:d6:98:47:ed:
e8:d0:e2:0c:47:70:86:dd:ca:ca:e3:00:4b:67:8a:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:30:84:F7:CA:E9:4F:1E:5C:2E:2A:97:87:EC:1F:47:F9:5D:CC:C9
X509v3 Authority Key Identifier:
keyid:8F:B1:A1:81:33:BF:38:4E:70:99:E5:98:5C:40:FE:28:1E:2D:A7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7GhgTO_OE5wmeWYXED-KB4tp1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/977fa3-3f65-4f40-9105-8603cdecf9a2/1/8DCE98rpTx5cLiqXh-wfR_ldzMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/977fa3-3f65-4f40-9105-8603cdecf9a2/1/j7GhgTO_OE5wmeWYXED-KB4tp1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.126.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f0:00:0a:1d:ea:d5:26:81:49:39:e1:bb:2e:87:10:44:79:
59:f5:a4:b2:fd:f9:09:0f:4b:b9:6e:05:61:9a:3b:93:3b:bf:
a4:1c:b5:4e:7d:a4:83:eb:ca:f0:97:c5:78:7c:59:ba:39:0b:
4f:81:fd:4c:79:1d:0f:f7:a1:40:e2:de:52:f8:18:b0:01:f3:
ab:01:52:d3:86:eb:66:a9:3d:07:97:9a:64:4b:8d:c8:93:c2:
13:b1:0b:e6:0a:d5:36:82:e7:0e:ec:60:80:1e:59:6c:20:45:
a2:88:38:34:99:47:7c:63:5b:c8:a3:87:cf:df:d1:3b:c7:69:
db:84:03:41:37:7d:4b:16:93:f1:c7:b3:92:74:41:5d:5a:bf:
a4:ab:90:7b:a1:34:bb:12:6a:15:ba:b2:82:f6:c7:c2:cf:ca:
6c:54:f9:04:e1:ef:70:bd:a2:3b:dd:ba:e1:7b:cf:8f:88:40:
04:11:f8:1c:e9:08:43:ab:ed:14:46:b8:3d:5a:27:81:d6:3e:
ee:db:ac:4f:28:22:a8:35:8c:b6:8e:7c:4f:4d:33:b9:25:9f:
30:c2:5e:66:5d:a2:7e:94:66:61:e7:c2:3c:0e:ec:81:cf:eb:
d4:db:e8:57:6b:4d:06:f4:52:50:9c:53:99:2e:2e:96:e9:d6:
f2:71:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:35:43 2025 by rpki-client