Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/D-j3QGVRBB2cTZ1_OyrBAgorPp4.roa
File: D-j3QGVRBB2cTZ1_OyrBAgorPp4.roa (raw, json)
Hash identifier: duEQwjBxfiynr9CuoebPo+HdFRqyU417+tCA4jxCgFY=
Subject key identifier: 0F:E8:F7:40:65:51:04:1D:9C:4D:9D:7F:3B:2A:C1:02:0A:2B:3E:9E
Certificate issuer: /CN=d44bcfaab4f56461337b22b038e75ff649ef3959
Certificate serial: 01856E8B17DCB35480E2B279186BF844512C
Authority key identifier: D4:4B:CF:AA:B4:F5:64:61:33:7B:22:B0:38:E7:5F:F6:49:EF:39:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvPqrT1ZGEzeyKwOOdf9knvOVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/D-j3QGVRBB2cTZ1_OyrBAgorPp4.roa
Signing time: Sun 01 Jan 2023 18:14:47 +0000
ROA not before: Sun 01 Jan 2023 18:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 176.97.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:17:dc:b3:54:80:e2:b2:79:18:6b:f8:44:51:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bcfaab4f56461337b22b038e75ff649ef3959
Validity
Not Before: Jan 1 18:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fe8f7406551041d9c4d9d7f3b2ac1020a2b3e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:74:7d:a0:eb:5f:b0:84:d8:77:24:ca:90:
55:db:bc:ef:d3:be:fe:f7:44:b3:8b:89:a7:68:1c:
04:c0:85:c3:0b:48:b7:3f:79:fc:96:d2:57:02:bc:
f7:5a:b4:33:25:f9:b9:43:74:8b:43:4c:e2:4a:31:
43:cd:f1:b3:cf:0a:53:5f:5b:1b:5c:ba:a6:c6:57:
30:1f:98:c5:a0:29:6e:00:90:ac:ee:74:8d:45:51:
4d:8c:f3:fd:22:2b:bd:78:82:01:40:b0:00:09:6e:
0b:40:56:1f:2f:67:dc:00:11:2b:f7:ae:f2:e2:3e:
82:14:8c:68:11:21:66:fa:95:d5:1d:ae:59:b0:cf:
bc:ba:b0:65:aa:59:1d:38:8e:1c:71:88:02:ee:1d:
20:23:4b:1d:06:e1:8a:01:ed:ec:cc:f6:d2:bd:8d:
4d:2c:ff:e4:94:ce:b2:2d:04:d7:43:87:87:e8:48:
43:37:b4:fe:5b:c6:57:01:8f:d7:eb:0e:fa:a7:ad:
44:c8:23:f3:e3:2e:d6:e6:d2:59:57:5f:93:cb:d8:
f0:b4:06:82:ec:d5:f4:a6:16:05:8d:30:b8:2d:2a:
29:30:21:29:46:19:33:a6:a9:cd:39:20:83:d8:4e:
fe:4f:39:db:36:8d:8b:88:a0:bd:cf:53:3b:c0:4c:
e5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E8:F7:40:65:51:04:1D:9C:4D:9D:7F:3B:2A:C1:02:0A:2B:3E:9E
X509v3 Authority Key Identifier:
keyid:D4:4B:CF:AA:B4:F5:64:61:33:7B:22:B0:38:E7:5F:F6:49:EF:39:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvPqrT1ZGEzeyKwOOdf9knvOVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/D-j3QGVRBB2cTZ1_OyrBAgorPp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/1EvPqrT1ZGEzeyKwOOdf9knvOVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.216.0/24
Signature Algorithm: sha256WithRSAEncryption
10:76:23:d1:27:e1:10:fd:15:24:90:47:fd:d2:2d:fe:94:d6:
05:0a:7a:69:a1:66:e4:9b:05:25:98:a8:4e:09:1f:86:d0:f6:
fc:12:49:6b:15:04:c6:aa:2b:b7:77:04:62:40:da:54:2e:72:
17:e8:39:fc:d0:10:5d:ca:d2:4d:68:22:e1:5d:d1:4b:fc:69:
a6:9d:5a:53:68:16:1b:00:0b:f7:51:14:55:67:08:23:69:f4:
78:2d:cb:57:63:3e:a8:9c:1b:38:e3:4f:8a:a0:b2:d5:32:da:
8e:8f:44:81:d5:85:21:b9:88:10:1f:e1:ab:10:f1:bc:0b:3f:
50:90:3e:7c:a8:a1:8d:84:60:4d:69:2f:61:f6:5f:9e:69:73:
e9:1f:18:24:53:dd:b2:d9:1b:af:b7:63:7f:5e:f0:08:70:bd:
b9:55:3e:47:5e:fc:dd:c5:42:78:9f:f1:de:38:27:60:7b:23:
43:0d:aa:92:19:79:e3:cb:e1:ae:2a:dd:4c:d1:d6:31:d0:8e:
3a:b6:c8:c4:fe:72:f6:79:5b:d3:98:8e:01:08:bf:bd:c1:c2:
1c:ba:34:e7:d0:a6:29:01:07:6f:39:aa:0a:2b:5c:79:f2:44:
fe:f0:4c:83:a8:05:3f:ca:7c:34:49:2e:6a:9a:32:5e:23:5f:
45:20:50:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:07:40 2025 by rpki-client