Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/tBU0LNyN-tEGDeV8w5hocDZmHqw.roa
File: tBU0LNyN-tEGDeV8w5hocDZmHqw.roa (raw, json)
Hash identifier: FD8Udi1hFNIRtb52cVf6ECbcTa9uR5NoXf2Z7el1yeQ=
Subject key identifier: B4:15:34:2C:DC:8D:FA:D1:06:0D:E5:7C:C3:98:68:70:36:66:1E:AC
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 01856CC16A139B2BA5C3DE5059953E327990
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/tBU0LNyN-tEGDeV8w5hocDZmHqw.roa
Signing time: Sun 01 Jan 2023 09:54:53 +0000
ROA not before: Sun 01 Jan 2023 09:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49883
IP address blocks: 176.120.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:6a:13:9b:2b:a5:c3:de:50:59:95:3e:32:79:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jan 1 09:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b415342cdc8dfad1060de57cc398687036661eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:65:2d:b4:68:0e:96:b7:93:b2:e8:7c:6e:
5f:14:d6:24:f9:a3:de:ec:b2:89:3b:74:b5:57:d4:
70:36:5f:90:b6:90:35:a6:6a:51:85:e2:cd:80:25:
ea:43:eb:41:bc:05:9d:62:e6:88:33:fe:a5:08:1c:
7a:28:31:0b:98:64:4a:ab:de:4f:dd:13:3c:df:f7:
80:cf:b4:e3:db:d7:42:d0:5d:4b:ba:c7:a9:7c:8c:
3e:09:e5:9c:25:7a:70:e9:52:e2:a6:e7:89:5b:33:
f5:52:dd:32:7e:3f:94:f9:79:26:e1:35:fb:80:52:
59:be:a8:55:6f:36:ab:4e:60:c4:7d:cb:06:65:37:
93:4f:23:79:60:bc:17:15:c8:35:43:8a:60:ae:92:
ef:5f:d5:12:0b:e3:29:e4:17:51:6b:e3:48:f8:b9:
82:dc:fa:22:87:98:01:2e:c7:4e:74:35:9d:60:66:
c1:9d:f9:ca:90:94:87:27:c1:65:08:1f:0b:49:1e:
5e:35:6a:6d:f6:97:6d:29:a8:87:1b:7d:8f:82:85:
e5:35:b0:55:25:0e:10:95:44:b9:cf:af:bc:2a:7f:
7b:99:c9:c0:b4:a8:7d:63:2d:ae:24:59:4d:48:d1:
d1:cb:ed:34:66:d7:02:26:3f:47:33:3f:4f:38:60:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:15:34:2C:DC:8D:FA:D1:06:0D:E5:7C:C3:98:68:70:36:66:1E:AC
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/tBU0LNyN-tEGDeV8w5hocDZmHqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.96.0/24
Signature Algorithm: sha256WithRSAEncryption
18:57:7f:81:01:f5:f2:79:66:84:67:04:5b:61:6d:6d:fb:d9:
b0:e3:0c:44:e0:a1:66:92:09:32:6c:12:22:f8:72:d6:6a:04:
d1:18:e5:f4:76:75:2e:38:93:06:2a:e2:ac:52:27:b3:9c:95:
58:16:73:96:88:ac:6c:c5:89:51:a4:eb:00:71:2f:a7:26:46:
7a:39:98:cd:cf:25:65:33:a2:46:a7:88:2a:2d:26:b2:8b:3f:
6f:f7:82:d9:0a:25:20:62:b4:c7:2c:e9:b9:7d:19:ea:4c:1c:
b7:5a:93:95:cc:4b:59:d1:b6:7d:43:36:f6:66:49:6f:92:c6:
04:31:9b:5e:f1:f7:7c:10:eb:72:54:4e:77:39:90:db:c2:8a:
41:56:f5:0a:05:de:fe:25:7b:99:f8:3f:2b:90:e3:37:d5:3a:
58:19:09:11:38:ee:73:3e:13:94:22:08:f7:04:cf:73:8b:d5:
11:f5:1a:f5:37:4f:0b:95:82:f5:a2:d1:9a:d8:ca:18:71:13:
31:6d:9b:fc:b7:a7:79:47:50:45:ff:cb:70:1b:b5:f5:b9:0f:
e7:ba:89:17:59:ee:86:61:83:3d:6a:2a:b1:21:14:36:5f:1f:
b9:53:1b:62:d7:31:f9:1c:6c:da:41:cb:87:14:0b:f6:d1:b4:
44:a3:43:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:25 2025 by rpki-client