Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/shsl2Tc0v9u4EoVmzq7OXqGE4pM.roa
File: shsl2Tc0v9u4EoVmzq7OXqGE4pM.roa (raw, json)
Hash identifier: h4eY7FONqd9soCFG6lRtk2Mc4kyhWP8mDcvLE0l0T8E=
Subject key identifier: B2:1B:25:D9:37:34:BF:DB:B8:12:85:66:CE:AE:CE:5E:A1:84:E2:93
Certificate issuer: /CN=55372b942c5207680054cfb11ad911a868f0619c
Certificate serial: 018570DE61EFC6F5C4277BF4FA2047F9EC61
Authority key identifier: 55:37:2B:94:2C:52:07:68:00:54:CF:B1:1A:D9:11:A8:68:F0:61:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTcrlCxSB2gAVM-xGtkRqGjwYZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/shsl2Tc0v9u4EoVmzq7OXqGE4pM.roa
Signing time: Mon 02 Jan 2023 05:05:00 +0000
ROA not before: Mon 02 Jan 2023 05:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 176.126.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:61:ef:c6:f5:c4:27:7b:f4:fa:20:47:f9:ec:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55372b942c5207680054cfb11ad911a868f0619c
Validity
Not Before: Jan 2 05:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b21b25d93734bfdbb8128566ceaece5ea184e293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:b2:fb:f9:9a:bd:00:bc:4b:68:3a:01:f5:
c8:bd:82:f8:25:51:17:be:99:ed:80:02:3e:98:74:
0b:b8:7a:3d:ab:76:9e:5a:c8:1a:09:bf:e3:31:bf:
fb:b2:ad:7d:a7:20:22:d6:8c:77:09:1b:86:cd:71:
2b:0f:82:0e:95:4b:7a:b5:c0:4e:72:f2:88:67:30:
f5:21:3c:96:7f:a2:6b:c1:f7:62:38:9e:ea:39:eb:
43:db:d2:36:92:cb:00:b6:97:ac:2f:f3:97:81:32:
2a:4c:05:9a:4a:6d:46:ff:63:f0:f5:58:05:1c:90:
fc:c9:85:84:2c:a4:c5:f5:6d:46:b7:73:06:1b:42:
85:40:e0:eb:e8:78:31:7c:d8:2d:28:0b:47:8c:7a:
96:0e:69:c1:84:bb:93:98:ae:aa:bd:90:2e:d9:00:
2a:89:24:94:6b:6e:bc:72:65:67:9e:eb:af:9d:14:
c5:32:2a:74:dd:47:f9:a1:b8:86:50:8c:3c:91:f9:
3f:a0:fa:27:53:2c:30:56:8a:9b:34:99:bc:6a:3a:
d6:16:e8:f5:94:d6:9a:74:ef:66:25:5f:1a:10:30:
a9:6a:ee:39:ac:19:f8:5f:ef:9c:91:4a:64:63:85:
5e:bd:61:26:2d:bf:01:c4:73:d2:04:63:17:9e:df:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1B:25:D9:37:34:BF:DB:B8:12:85:66:CE:AE:CE:5E:A1:84:E2:93
X509v3 Authority Key Identifier:
keyid:55:37:2B:94:2C:52:07:68:00:54:CF:B1:1A:D9:11:A8:68:F0:61:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTcrlCxSB2gAVM-xGtkRqGjwYZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/shsl2Tc0v9u4EoVmzq7OXqGE4pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/26a3c0-92ff-46b2-9045-c2d72582a644/1/VTcrlCxSB2gAVM-xGtkRqGjwYZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.104.0/24
Signature Algorithm: sha256WithRSAEncryption
21:22:ba:c9:d5:55:f6:a8:69:9b:06:24:6a:47:1a:62:4d:22:
82:f4:90:cd:8a:aa:85:ae:d8:4b:a4:6a:8b:da:ad:f2:36:c6:
39:36:f8:2a:8d:b7:e3:66:e3:ed:34:e5:e1:26:68:10:84:b0:
d5:23:0f:34:31:50:6b:12:13:7e:9c:b0:03:73:7b:24:ae:ca:
5b:3d:b4:ae:9c:ef:3d:28:d3:e6:6e:9f:60:fc:5b:34:ae:fd:
65:b3:fd:d3:c7:ab:85:0a:be:5a:47:ae:7a:3b:f1:09:a5:f6:
bf:8f:54:13:35:80:e9:34:dd:a7:c7:c3:9f:fd:46:6b:c2:eb:
4c:55:39:df:8e:dc:c7:5c:bf:83:8e:7d:1c:1a:9c:4c:ed:e7:
7c:23:a9:5e:1c:f7:8b:e9:b9:fa:a4:1d:1e:68:5a:e1:2e:e4:
cd:b0:ca:b5:c6:0c:f2:22:7c:16:0b:47:cc:37:e3:b7:4a:c1:
bd:ef:d2:f9:df:47:f6:4e:a4:e2:4a:4a:30:37:b3:0f:74:4b:
62:7e:b3:76:6c:46:10:6b:3a:03:ac:ea:56:d6:f5:e2:22:d9:
57:30:4c:e2:74:a1:a2:41:68:4b:c8:6c:76:22:5b:70:b5:5b:
8d:5c:dd:03:1d:5c:fe:fc:ab:1d:76:be:52:b0:d3:6c:d1:33:
4c:97:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:25 2025 by rpki-client