Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/lxD6_dxSKDJMIzr0hh2eS5WtwG4.roa
File: lxD6_dxSKDJMIzr0hh2eS5WtwG4.roa (raw, json)
Hash identifier: xZB1Jd1FNAnDtSHHoJD267gIsHrwaXOvSh+8zvVbNnU=
Subject key identifier: 97:10:FA:FD:DC:52:28:32:4C:23:3A:F4:86:1D:9E:4B:95:AD:C0:6E
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 018CC349235762E8A606B0E5236560A3F950
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/lxD6_dxSKDJMIzr0hh2eS5WtwG4.roa
Signing time: Mon 01 Jan 2024 04:29:59 +0000
ROA not before: Mon 01 Jan 2024 04:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50392
IP address blocks: 176.120.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:23:57:62:e8:a6:06:b0:e5:23:65:60:a3:f9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jan 1 04:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9710fafddc5228324c233af4861d9e4b95adc06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:2a:6a:99:d0:03:14:82:0f:87:7a:2f:3d:
e4:2b:3c:53:b2:3e:c9:a5:82:1a:cf:1f:fd:73:66:
dd:a9:82:87:99:b1:cb:ed:3b:b2:5c:c7:e7:57:a8:
b6:fd:2b:0d:f0:88:22:94:25:d5:84:0e:87:57:2c:
56:b2:cf:ce:f5:c5:e6:3e:b4:e0:78:18:71:4d:cb:
8f:85:62:28:69:d7:cb:c5:3a:9d:af:5a:65:a2:e4:
a8:b0:1e:04:77:23:49:e1:d0:ba:4c:30:ab:86:b8:
40:d3:aa:ae:e5:45:b7:eb:6e:7c:5c:74:7e:95:13:
37:9a:0a:d3:d2:4f:62:bd:bb:f6:1d:7d:af:f9:b2:
9d:ef:84:5d:bf:ba:c8:47:39:d4:73:4b:ef:b2:d5:
8b:c0:3f:9b:2c:cd:bb:05:be:0e:1f:5d:65:f4:47:
1c:96:d0:99:85:76:74:d2:28:bd:1e:69:1a:6b:a3:
d1:1c:af:76:3c:3e:c0:e1:03:e4:2b:dd:cf:9d:d0:
c7:7a:c6:b2:26:10:a0:c7:ac:7e:7a:20:e3:47:d9:
95:7a:ed:1d:43:59:3b:20:32:00:a3:c3:5e:dc:81:
03:d7:b3:87:3e:18:42:8b:19:b1:1a:c5:1e:43:18:
f7:57:0f:97:d3:19:8d:0b:24:6b:0b:cc:34:46:a6:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:10:FA:FD:DC:52:28:32:4C:23:3A:F4:86:1D:9E:4B:95:AD:C0:6E
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/lxD6_dxSKDJMIzr0hh2eS5WtwG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.101.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3e:75:f1:39:f3:6e:32:8a:72:1d:12:99:28:ba:2b:48:6b:
72:a8:bb:b0:01:72:0d:e8:43:5b:4d:a4:d0:b8:d2:ee:24:1a:
e6:b8:7d:65:92:c3:03:8f:4a:14:3e:f1:37:3b:c5:02:6b:12:
3f:e7:00:d5:fc:00:44:e8:37:3f:9a:2b:55:f1:31:8f:27:07:
bc:8b:86:7d:e2:b4:fd:04:77:9c:e8:1a:9d:d0:be:86:e5:ae:
ba:d5:51:da:25:79:ea:fd:16:d8:20:8c:92:ec:08:93:a6:54:
9f:04:b8:a8:8f:96:55:c4:fa:d0:69:99:40:76:bf:6a:17:3a:
e3:60:ec:57:ec:fe:9d:ae:f5:f2:e9:73:04:02:c7:e3:96:f9:
17:cf:78:75:9d:4c:64:22:d9:bc:33:d5:89:92:3c:0f:1f:8d:
22:2c:ce:34:e4:b0:99:06:06:4a:9f:40:7d:f2:c6:65:56:92:
42:04:6d:43:0a:0f:43:99:60:86:9d:ab:9e:fd:90:4f:4c:dc:
fd:a1:58:00:48:d2:5e:b4:98:02:d4:4f:42:cd:fd:e4:6d:9b:
d0:6c:51:39:4a:82:8c:5a:8b:3f:10:6f:5c:6b:e5:f8:4d:95:
f2:c4:9c:b3:45:6c:51:0b:4c:33:35:05:8f:05:a6:ec:b4:e2:
46:db:88:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:57 2025 by rpki-client