Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/1-Ui9QmehgUoBceDGt37YZk1vihI.roa
File: 1-Ui9QmehgUoBceDGt37YZk1vihI.roa (raw, json)
Hash identifier: RHibXzvKwqZ5MVlWm767I0T4hNOJYf0Ft6YjA0otZcc=
Subject key identifier: F9:48:BD:42:67:A1:81:4A:01:71:E0:C6:B7:7E:D8:66:4D:6F:8A:12
Certificate issuer: /CN=d44bcfaab4f56461337b22b038e75ff649ef3959
Certificate serial: 0C9614
Authority key identifier: D4:4B:CF:AA:B4:F5:64:61:33:7B:22:B0:38:E7:5F:F6:49:EF:39:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvPqrT1ZGEzeyKwOOdf9knvOVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/1-Ui9QmehgUoBceDGt37YZk1vihI.roa
Signing time: Tue 17 May 2022 06:35:30 +0000
ROA not before: Tue 17 May 2022 06:35:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29684
IP address blocks: 176.97.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 824852 (0xc9614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bcfaab4f56461337b22b038e75ff649ef3959
Validity
Not Before: May 17 06:35:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f948bd4267a1814a0171e0c6b77ed8664d6f8a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:98:f0:c5:e2:58:d3:0f:d0:91:ae:b1:ef:
9b:86:ef:b3:a6:65:b4:26:78:a9:04:97:17:a8:e3:
61:c8:95:ea:d4:75:c5:4c:e9:1e:98:55:5f:b7:19:
82:9c:3d:b4:d4:b0:af:00:47:d0:f9:62:57:76:47:
54:4a:8d:0a:fe:da:75:b0:62:32:f2:54:52:4b:9b:
2d:43:29:75:2a:6f:df:e4:cb:70:d4:99:5a:68:75:
3d:12:c2:68:db:38:18:26:58:d6:06:1d:00:54:05:
5e:29:c8:6e:bc:9b:75:2f:6c:b9:2b:34:7b:df:10:
b6:d4:5c:3d:7b:4d:a1:de:da:80:dc:29:18:73:f9:
ac:92:5c:fd:f2:6c:99:b1:35:bf:59:16:2a:80:f0:
a0:0a:75:b8:fd:14:4e:ca:7d:bf:2c:d0:25:27:a0:
e7:82:eb:66:95:e2:d1:c4:0a:07:4e:79:df:9a:eb:
29:75:a0:fc:e9:69:fe:9b:71:ee:de:ed:10:e8:cb:
01:d3:17:d4:6e:49:fb:5c:52:c6:ae:e1:cb:88:2e:
41:68:dd:f0:e3:42:bb:97:0b:42:fa:38:1b:fb:4f:
a1:35:c3:e5:34:e2:61:9f:53:6d:24:97:c2:68:a6:
d1:2e:bd:0b:a5:bb:a7:80:92:e2:61:f3:31:55:35:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:48:BD:42:67:A1:81:4A:01:71:E0:C6:B7:7E:D8:66:4D:6F:8A:12
X509v3 Authority Key Identifier:
keyid:D4:4B:CF:AA:B4:F5:64:61:33:7B:22:B0:38:E7:5F:F6:49:EF:39:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvPqrT1ZGEzeyKwOOdf9knvOVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/1-Ui9QmehgUoBceDGt37YZk1vihI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/1EvPqrT1ZGEzeyKwOOdf9knvOVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.216.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:bf:42:a2:e0:9b:3c:24:b0:ac:10:24:96:c5:50:a2:d0:05:
d4:89:6f:3f:7c:9f:28:f2:8d:fb:27:ad:d6:1e:ed:ed:17:f6:
e9:e3:21:0b:8e:4b:72:14:75:97:07:02:24:60:38:37:09:3d:
60:57:c0:a2:b5:b2:9f:0f:a6:14:b8:2a:78:a3:dc:35:5b:85:
48:b6:97:4e:6b:86:03:a8:06:90:ca:bf:5d:00:7f:c4:c4:73:
ab:48:46:23:e3:68:2d:84:1a:a6:3e:25:73:c3:63:8f:c4:2c:
f6:11:27:0a:11:ec:51:51:a4:04:84:21:c6:83:72:93:5a:f3:
c5:d6:46:00:3c:41:18:3b:d1:f4:d6:36:78:5c:01:af:37:80:
4d:a9:42:14:87:1b:96:b9:cf:7c:0b:8e:f7:86:20:c4:44:69:
37:9e:5b:18:06:0d:fa:98:7a:05:91:ad:49:de:1e:6f:13:0c:
52:4c:34:81:53:06:d6:c3:7f:31:c3:88:b4:48:d3:ca:89:24:
7f:c6:42:b5:f5:2e:c0:aa:9b:a0:df:0f:ad:07:e4:62:e4:15:
a7:fb:60:1f:06:87:23:b7:0e:3b:95:a3:c7:48:2f:07:d5:02:
8c:a3:97:30:b0:c3:97:80:62:0d:99:74:6a:93:8f:27:48:08:
27:8d:6e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:59:19 2025 by rpki-client