Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/Q0d9fodh4uT-iOcs6shkchdgjJ0.roa
File: Q0d9fodh4uT-iOcs6shkchdgjJ0.roa (raw, json)
Hash identifier: ybmVNw9LN8nflGZOwIXU+c+DQbwwIYlVV7UEm4P1STo=
Subject key identifier: 43:47:7D:7E:87:61:E2:E4:FE:88:E7:2C:EA:C8:64:72:17:60:8C:9D
Certificate issuer: /CN=d44bcfaab4f56461337b22b038e75ff649ef3959
Certificate serial: 0B8699
Authority key identifier: D4:4B:CF:AA:B4:F5:64:61:33:7B:22:B0:38:E7:5F:F6:49:EF:39:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvPqrT1ZGEzeyKwOOdf9knvOVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/Q0d9fodh4uT-iOcs6shkchdgjJ0.roa
Signing time: Tue 17 May 2022 06:35:30 +0000
ROA not before: Tue 17 May 2022 06:35:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 176.97.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755353 (0xb8699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44bcfaab4f56461337b22b038e75ff649ef3959
Validity
Not Before: May 17 06:35:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43477d7e8761e2e4fe88e72ceac8647217608c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:9e:26:27:13:63:91:47:cd:c1:8e:d0:8e:
71:8c:c9:00:a6:46:26:68:46:6d:22:b8:32:14:5f:
0d:5d:3a:c9:ed:4a:b4:02:05:1d:ef:56:f7:a7:c5:
88:a6:1f:ec:f3:4e:49:16:e5:80:56:f4:fc:36:40:
b5:d9:0d:05:44:8f:e0:62:c6:83:a5:20:ca:e2:69:
ad:2a:ef:3c:21:dd:bd:bc:1e:81:06:09:e5:c3:ec:
70:55:57:84:76:61:03:73:ef:8e:e7:06:02:8c:4d:
2b:8f:36:fb:09:72:e4:12:1c:70:01:e6:9e:99:ad:
7d:ba:78:fd:6f:25:35:ec:ef:1a:47:fd:1d:b7:58:
f0:02:9a:82:d6:13:88:73:d9:9f:94:d2:20:eb:8b:
2e:08:f0:a7:08:7a:0e:5a:37:02:c7:2f:c8:d8:d0:
ff:98:32:e1:f1:f7:dd:98:dd:4c:a6:e7:bd:12:85:
31:95:85:3b:e6:f3:f2:63:a9:2d:8f:94:87:69:a9:
a6:ba:7b:12:6d:5a:d7:ab:d5:d5:fe:c5:4e:bc:a7:
9d:b6:06:4b:e6:7a:0d:97:aa:0f:69:ac:11:cb:40:
cb:dc:f4:fe:45:1e:d6:ca:d4:df:47:b0:f4:d7:d9:
69:69:4f:6a:63:e2:82:d7:d3:89:c5:f8:09:95:d7:
8a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:47:7D:7E:87:61:E2:E4:FE:88:E7:2C:EA:C8:64:72:17:60:8C:9D
X509v3 Authority Key Identifier:
keyid:D4:4B:CF:AA:B4:F5:64:61:33:7B:22:B0:38:E7:5F:F6:49:EF:39:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvPqrT1ZGEzeyKwOOdf9knvOVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/Q0d9fodh4uT-iOcs6shkchdgjJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/1EvPqrT1ZGEzeyKwOOdf9knvOVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.216.0/24
Signature Algorithm: sha256WithRSAEncryption
12:44:92:0a:d6:b6:ae:29:24:7a:6d:5a:be:b3:4c:2a:2d:99:
cd:b9:c9:d5:ce:53:a1:86:ef:81:97:c4:75:5f:09:c9:8d:23:
5f:83:aa:18:52:58:3a:df:9e:71:5e:39:d2:b4:ce:47:51:a9:
a9:3b:4f:85:8a:2a:58:f4:72:38:9d:bb:45:9e:0b:c3:4b:50:
d4:35:bc:a4:d1:38:69:d7:47:4c:fd:ef:f4:63:70:f0:60:4c:
96:cc:de:89:7c:5a:fb:7c:9a:3a:88:35:3b:46:6a:40:ec:40:
1a:e5:8d:d0:13:c1:c3:e0:88:0b:dd:23:28:de:32:73:a1:9a:
62:61:e4:cb:d8:08:e9:e5:a3:94:cc:c2:ce:6b:bd:6e:85:21:
db:a0:b7:bd:ab:92:0c:7e:99:22:68:79:93:13:8a:91:a0:45:
03:ca:35:01:ad:70:8c:4f:b2:63:70:bc:bd:80:58:7f:84:ab:
9c:b4:92:17:77:16:f6:ce:4e:39:b7:55:a1:71:e5:9e:99:21:
d3:16:64:83:a6:d3:0e:1c:d3:38:d4:6b:ac:20:1c:36:1e:df:
7e:ac:31:56:b8:56:e2:a8:64:f6:e4:e3:af:12:35:d9:30:0a:
22:58:c2:0a:7e:a6:58:ea:56:ce:11:ab:18:ff:ee:85:ac:3a:
5b:fa:70:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:53:31 2025 by rpki-client