Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/gDWc6H7uj9ibkrZP4t2rHY2dAjc.roa
File: gDWc6H7uj9ibkrZP4t2rHY2dAjc.roa (raw, json)
Hash identifier: kA5V7O8+i9I2snnuaBTFlKTpJopDxBn7UIT61zUY590=
Subject key identifier: 80:35:9C:E8:7E:EE:8F:D8:9B:92:B6:4F:E2:DD:AB:1D:8D:9D:02:37
Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial: 019427B5F3159D4BB4E015D5806E8C461172
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/gDWc6H7uj9ibkrZP4t2rHY2dAjc.roa
Signing time: Thu 02 Jan 2025 15:50:23 +0000
ROA not before: Thu 02 Jan 2025 15:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 176.116.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f3:15:9d:4b:b4:e0:15:d5:80:6e:8c:46:11:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
Validity
Not Before: Jan 2 15:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80359ce87eee8fd89b92b64fe2ddab1d8d9d0237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:1b:1a:28:84:75:a3:ee:cd:8f:54:19:d0:
8e:ab:e8:33:ca:97:e0:05:b5:f6:e8:1c:e1:25:17:
5d:1a:65:99:af:1f:45:d4:23:42:71:23:e0:ad:ca:
d7:50:d7:a6:c4:51:1d:4b:0d:93:d2:80:d6:ae:9d:
2b:54:71:22:34:a4:cf:41:c4:e8:78:ae:d9:50:90:
ab:01:6e:3b:2c:56:66:a1:d2:9e:5b:66:81:77:80:
e1:96:5c:8d:ad:28:d8:98:30:71:41:16:f6:e5:a8:
55:72:e6:ab:d4:31:59:a5:ad:e5:fd:fd:6e:e0:95:
bf:1b:f2:43:d6:5e:9a:77:73:47:68:9d:00:8f:a0:
e5:7f:0f:1a:5f:12:aa:29:42:ea:69:de:e0:3c:ae:
aa:4c:67:46:55:82:d8:36:17:08:34:67:49:03:53:
11:2f:32:df:f1:96:01:15:36:ba:45:da:c1:6c:9b:
6e:f7:c7:b8:06:4d:75:5a:fd:67:76:0c:df:3c:b8:
85:c6:e6:54:41:2b:7c:18:f2:db:3c:9a:82:5d:d3:
79:90:b7:4f:37:48:dc:f9:3c:53:82:b4:8c:b8:d4:
3e:e3:13:e0:4a:a0:be:80:97:c7:fa:df:d4:13:81:
00:5e:94:00:07:c6:6f:5a:02:50:47:9e:2c:48:65:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:35:9C:E8:7E:EE:8F:D8:9B:92:B6:4F:E2:DD:AB:1D:8D:9D:02:37
X509v3 Authority Key Identifier:
keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/gDWc6H7uj9ibkrZP4t2rHY2dAjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:bd:03:3b:84:aa:30:7d:e3:0e:73:fb:d5:00:a8:58:a2:3b:
37:31:53:0c:75:2d:0c:53:f4:29:a3:ca:c9:a4:30:66:0d:12:
2b:d7:b6:55:f2:81:bd:e6:68:3b:e5:01:ca:a7:3a:4c:4e:d7:
15:84:f1:1d:71:7b:95:e9:98:2a:bb:77:ea:9d:6b:2d:7c:8f:
f1:cd:d8:18:8a:4f:7f:25:f1:38:75:7f:bb:cb:8d:34:5c:96:
a9:5e:48:3c:90:04:ae:b4:e2:9c:a3:9e:a4:9d:83:12:d5:40:
45:74:fb:65:2c:0f:b0:fa:ef:94:7d:17:77:68:5d:8c:a8:aa:
61:f8:ec:c8:b3:48:44:5b:1c:74:9c:b2:2c:d3:4a:fc:87:fc:
90:ab:a4:fe:57:62:cc:34:76:48:05:34:17:5d:b6:b3:17:00:
30:16:09:60:38:bc:04:62:e7:e8:26:5d:fd:22:b9:72:50:32:
7f:7b:57:93:6d:2a:2a:34:a0:20:92:1d:f5:8c:8c:f3:b5:19:
61:cc:5d:16:32:08:cb:70:74:ce:29:83:05:71:8a:28:69:04:
7b:38:6b:cc:87:68:b5:f1:41:6f:5c:78:73:f1:b1:f4:63:1c:
af:9c:c7:75:96:83:ff:90:30:0e:4d:e9:b5:2c:d9:6a:9f:45:
0d:94:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:52 2025 by rpki-client