Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/o8_Inr898J7xZ6r9OsuvNkMo6Y0.roa
File: o8_Inr898J7xZ6r9OsuvNkMo6Y0.roa (raw, json)
Hash identifier: 3zZh7M0TsY4raAs0fHncs5Fq8XN78zwSjkJ2KI9wVy4=
Subject key identifier: A3:CF:C8:9E:BF:3D:F0:9E:F1:67:AA:FD:3A:CB:AF:36:43:28:E9:8D
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01942444904D16A1993BA45301B7BF079C21
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/o8_Inr898J7xZ6r9OsuvNkMo6Y0.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47741
IP address blocks: 176.113.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:90:4d:16:a1:99:3b:a4:53:01:b7:bf:07:9c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3cfc89ebf3df09ef167aafd3acbaf364328e98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:e3:c6:b7:cf:e8:a7:3f:47:c9:d1:33:c2:
d9:f6:34:81:a0:25:0c:f3:13:ab:e7:4e:2e:93:fd:
bf:fd:c5:e1:50:1a:64:fc:48:b2:a1:1b:59:46:c3:
a9:af:82:4b:1e:6d:12:37:8c:8f:bb:2b:4d:cf:24:
73:c4:63:8c:37:f8:ed:d9:1f:12:d5:02:10:92:b4:
86:93:85:34:ad:ae:5e:af:10:34:51:af:30:a7:19:
61:26:ad:c9:8d:ce:25:70:07:cb:15:b9:80:a4:dc:
df:e7:09:7f:74:4c:88:c0:12:71:5e:20:51:7e:e9:
1f:66:cc:0c:5b:61:ae:71:04:0a:34:34:54:8c:71:
c5:1c:7a:4f:2d:e2:8d:d4:c2:47:67:96:ae:b6:46:
04:f9:ab:17:c8:53:f3:72:8a:c1:29:c3:95:78:b8:
e1:65:47:c2:65:2f:4d:90:59:c1:05:10:cb:2f:ac:
59:c0:1d:4d:6a:53:1f:84:39:3d:3d:bc:24:05:49:
1c:ec:a7:2d:c9:39:51:d7:8a:b6:84:3b:d4:d4:e5:
df:90:66:ef:f6:01:96:49:99:44:d2:2b:dd:17:27:
ef:3a:f7:ad:4a:76:79:13:8d:29:ed:0a:06:15:85:
aa:52:ca:73:2f:0d:f5:64:75:2e:f2:74:bf:70:37:
92:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CF:C8:9E:BF:3D:F0:9E:F1:67:AA:FD:3A:CB:AF:36:43:28:E9:8D
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/o8_Inr898J7xZ6r9OsuvNkMo6Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.71.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:21:a7:26:83:6a:a8:4b:21:e4:f8:31:a2:54:3e:24:bd:14:
5d:84:41:10:b3:ca:a9:c7:86:84:d4:73:d2:45:45:18:36:c8:
d2:8d:05:e8:bb:9d:40:a3:c9:14:fd:ad:d8:52:8e:1c:3a:c8:
d7:cd:27:99:3f:42:51:34:b1:79:50:f7:f7:f1:25:70:a3:69:
96:fd:12:b1:7b:54:d9:64:44:8d:5a:1c:8c:dd:99:b6:0c:8d:
07:01:b4:f6:6c:43:46:41:06:d8:87:78:1f:cb:66:23:77:e2:
65:ba:ee:5c:eb:de:7f:46:86:f2:cd:4e:22:7d:44:9f:d6:a8:
87:27:83:84:2f:9b:9f:c6:64:96:30:95:65:34:40:5f:c7:dc:
e4:24:8c:c2:7c:94:0b:62:7a:6c:0f:0b:7c:88:97:57:53:37:
0b:69:3e:dd:44:20:fb:67:af:23:b4:bc:bf:e3:41:8d:1d:b3:
2e:11:8f:41:d5:13:6e:91:0f:62:44:95:94:c9:f3:cf:66:e8:
34:b2:e0:9c:01:76:a0:88:ef:24:54:11:a8:bb:07:94:a2:4b:
a7:10:0e:63:59:71:bf:d6:9b:28:e5:17:3e:40:8f:d9:3d:3f:
88:09:fb:8a:58:47:71:81:ed:10:28:77:13:2e:fa:02:a2:24:
61:63:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:40:05 2025 by rpki-client