Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0f809b-1c8c-47cb-82fd-4d4f81b56b38/1/t7CU51b2RmE2uqYyQns1yzrcL6I.roa
File: t7CU51b2RmE2uqYyQns1yzrcL6I.roa (raw, json)
Hash identifier: dk8tIs9M8Yy4rSwaYFsMZr1ri0BIxuGoat3qPZwOfCw=
Subject key identifier: B7:B0:94:E7:56:F6:46:61:36:BA:A6:32:42:7B:35:CB:3A:DC:2F:A2
Certificate issuer: /CN=30febc8c06aeed36017bbdd705bdf5adb2e730ad
Certificate serial: 0187614B5E981FE68BEFC185B2FB18DAAFF5
Authority key identifier: 30:FE:BC:8C:06:AE:ED:36:01:7B:BD:D7:05:BD:F5:AD:B2:E7:30:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MP68jAau7TYBe73XBb31rbLnMK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0f809b-1c8c-47cb-82fd-4d4f81b56b38/1/t7CU51b2RmE2uqYyQns1yzrcL6I.roa
Signing time: Sat 08 Apr 2023 14:35:42 +0000
ROA not before: Sat 08 Apr 2023 14:35:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48108
IP address blocks: 176.116.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:61:4b:5e:98:1f:e6:8b:ef:c1:85:b2:fb:18:da:af:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30febc8c06aeed36017bbdd705bdf5adb2e730ad
Validity
Not Before: Apr 8 14:35:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7b094e756f6466136baa632427b35cb3adc2fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fb:23:a6:d0:78:4f:e5:8f:31:25:8f:98:61:
1d:0d:91:ef:1c:d7:3f:33:96:87:94:6f:0c:bc:a5:
aa:91:57:d4:05:bb:b8:b4:0f:69:af:09:d3:27:f9:
c6:3f:aa:9c:93:5f:cc:a1:20:d5:7d:01:a1:15:0e:
c2:56:91:dd:88:bb:a7:5e:71:31:98:25:79:85:1d:
b4:a3:eb:67:08:0c:7c:6d:cb:1b:55:d3:da:0d:54:
56:57:f2:0d:2e:5f:e3:de:49:0c:4e:76:7b:69:f7:
47:55:1e:ef:44:f5:17:7e:92:8a:52:5b:cd:6f:0e:
f9:a5:1e:f1:aa:1e:77:1a:13:b2:fd:83:b8:60:17:
e3:e6:4d:dc:ac:33:46:d1:7e:86:ce:d3:fc:26:65:
7a:56:e4:55:e6:05:64:cb:04:3e:d3:77:48:8b:22:
d7:72:f7:f6:ad:51:c1:20:39:f4:d0:ec:83:3a:ca:
87:e9:7b:6b:12:21:73:a9:06:d9:07:c0:17:bc:eb:
e7:e3:f5:51:0a:e6:55:fc:75:d7:79:48:ce:ba:33:
e9:5b:04:d5:ef:5c:f3:5d:8b:64:a8:06:7e:31:6c:
30:70:bf:18:14:c8:93:52:fa:e0:05:b5:95:70:56:
e7:90:b2:09:8e:d9:2e:d9:10:bf:09:8e:01:fd:8a:
85:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:94:E7:56:F6:46:61:36:BA:A6:32:42:7B:35:CB:3A:DC:2F:A2
X509v3 Authority Key Identifier:
keyid:30:FE:BC:8C:06:AE:ED:36:01:7B:BD:D7:05:BD:F5:AD:B2:E7:30:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MP68jAau7TYBe73XBb31rbLnMK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0f809b-1c8c-47cb-82fd-4d4f81b56b38/1/t7CU51b2RmE2uqYyQns1yzrcL6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0f809b-1c8c-47cb-82fd-4d4f81b56b38/1/MP68jAau7TYBe73XBb31rbLnMK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.0.0/24
Signature Algorithm: sha256WithRSAEncryption
29:41:4a:dc:a2:6e:aa:99:09:54:ba:e6:b6:20:96:58:2e:5a:
bc:05:b8:7b:10:d5:76:e6:99:76:de:16:d0:99:b0:77:05:ee:
c1:9f:4c:88:f7:0b:90:c9:61:0d:7c:55:60:fc:bb:2e:d2:56:
32:2f:34:50:ee:15:9c:01:bd:75:e6:71:81:94:52:ad:d3:7e:
62:f6:d1:a3:b2:a4:64:b7:f0:b5:c8:e8:fa:61:24:c7:72:43:
27:fc:ea:0f:8d:5f:a9:e3:6a:65:16:18:15:3a:86:5f:13:26:
aa:7c:81:a0:84:ad:29:26:41:7f:69:f6:48:44:e9:3b:c6:ef:
91:4c:19:bd:bb:2f:62:3f:8a:da:0c:26:af:5d:83:70:aa:c8:
7b:11:b2:26:4f:f4:d0:d2:35:8f:1a:69:a8:8c:0d:51:74:ed:
c5:8f:3d:1d:2f:ba:a3:0d:48:1a:47:51:6b:c6:dd:5b:24:88:
1b:a6:bc:20:4e:ad:7b:c1:c4:3c:2c:bd:77:d6:61:fd:c2:5d:
7a:27:d4:33:9c:a7:70:dc:b6:6a:b1:da:ec:d5:9d:42:e6:a2:
3d:a8:96:57:f9:3f:91:eb:bb:c0:4a:80:44:c5:7f:95:57:d0:
f5:1a:58:eb:4a:a3:ef:8f:ed:7f:4f:02:06:da:23:b0:a2:1b:
0f:59:2e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:57:04 2025 by rpki-client