Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/8s5E0LTGAakegsHNQVDocoTJ8fA.roa
File: 8s5E0LTGAakegsHNQVDocoTJ8fA.roa (raw, json)
Hash identifier: omI1Fk5X5yJP68spzFlm/Rn1QyB2zms4fcZRrukCfZA=
Subject key identifier: F2:CE:44:D0:B4:C6:01:A9:1E:82:C1:CD:41:50:E8:72:84:C9:F1:F0
Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial: 018627711D78BA14BA41E463375CFC076712
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/8s5E0LTGAakegsHNQVDocoTJ8fA.roa
Signing time: Mon 06 Feb 2023 15:56:09 +0000
ROA not before: Mon 06 Feb 2023 15:56:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213162
IP address blocks: 176.116.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:71:1d:78:ba:14:ba:41:e4:63:37:5c:fc:07:67:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
Validity
Not Before: Feb 6 15:56:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2ce44d0b4c601a91e82c1cd4150e87284c9f1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:1f:06:7f:27:73:62:c8:ba:33:2d:9d:25:
6a:71:07:d0:ed:a7:b6:c8:a5:66:49:dc:eb:d8:16:
3e:c2:eb:89:ce:fe:16:34:9d:18:a1:b7:ab:d3:8c:
e4:eb:97:e7:58:19:8a:04:f5:b4:75:1b:cc:df:37:
30:cd:99:70:12:16:5f:b9:2b:ef:cc:f5:b1:4f:02:
16:25:ec:88:8d:c6:d6:49:df:71:3f:72:91:49:7c:
4e:17:e9:bb:99:ef:6f:f8:88:29:b1:3b:4c:b2:fa:
5e:ef:18:01:1c:4b:41:69:6a:18:3b:82:73:10:7e:
90:c6:a5:a8:20:08:e1:33:13:c8:1f:4c:93:9b:9b:
b1:4a:49:67:a2:fe:e4:4d:20:22:bd:8f:db:0d:47:
73:67:15:10:a1:20:28:b1:df:db:84:b8:33:d6:02:
b4:20:8a:38:79:ee:ce:a8:81:ee:f1:22:45:ff:a4:
6f:10:b7:84:33:6e:78:5a:64:b2:8e:54:5b:d5:e4:
d7:59:56:f5:fe:8f:88:6e:eb:b8:cb:47:c0:31:57:
e7:5a:26:b9:45:76:94:56:b2:d0:20:bc:6c:93:d2:
02:ef:4f:52:94:e3:e6:b8:9c:f0:91:a3:fc:69:ac:
47:27:b8:8e:d5:9b:70:e6:01:b6:c6:bc:0d:b6:d4:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CE:44:D0:B4:C6:01:A9:1E:82:C1:CD:41:50:E8:72:84:C9:F1:F0
X509v3 Authority Key Identifier:
keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/8s5E0LTGAakegsHNQVDocoTJ8fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.120.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:7a:5b:07:28:36:ea:a3:d6:60:04:a5:72:42:60:b2:d1:d1:
ff:3d:24:14:26:83:29:b6:23:e9:79:e8:e2:06:b1:95:20:22:
cf:e7:af:aa:15:b9:53:7e:dc:72:a6:9d:58:a0:c0:9d:5b:05:
24:75:f1:64:37:82:55:3e:f3:60:4d:d8:9e:54:46:0e:e6:02:
76:00:88:7e:f8:f3:f5:23:4d:11:c6:d7:d3:b6:aa:87:57:74:
0f:13:48:d9:6d:2c:ea:17:b3:a7:87:2c:10:b6:be:86:c3:db:
15:e3:93:45:cc:c1:92:bb:4d:56:98:d5:2e:6c:f3:51:d8:2c:
f3:ed:39:e7:75:f7:bc:bc:f1:7c:6e:d3:fe:04:f8:20:17:7f:
fa:7e:13:3d:43:16:19:37:bf:e4:9b:64:26:2b:32:ff:ec:35:
72:b6:12:2a:85:89:e1:ed:6a:fc:ac:e8:d1:ef:34:0e:27:c7:
ca:2f:6d:1c:af:2d:3f:2b:14:e5:07:c1:c4:33:c8:aa:e9:26:
7c:96:12:d7:a1:d6:25:29:0b:23:22:e2:73:14:4f:90:7e:2e:
55:9e:ac:a4:75:ef:69:c1:4c:9a:35:7c:04:c2:3c:66:a3:6d:
1d:e3:56:6e:b4:c5:53:22:2d:dc:04:cb:fe:f0:38:d9:48:f9:
ec:74:88:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYncR14uhS6QeRjN1z8B2cSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzZmYjVhNDY3OTc0Yzk3N2E5OTdjNmRkYTE0NjQ4MDVl
ZDM3OWYwHhcNMjMwMjA2MTU1NjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmNlNDRkMGI0YzYwMWE5MWU4MmMxY2Q0MTUwZTg3Mjg0YzlmMWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVYfBn8nc2LIujMtnSVqcQfQ7ae2
yKVmSdzr2BY+wuuJzv4WNJ0Yober04zk65fnWBmKBPW0dRvM3zcwzZlwEhZfuSvv
zPWxTwIWJeyIjcbWSd9xP3KRSXxOF+m7me9v+IgpsTtMsvpe7xgBHEtBaWoYO4Jz
EH6QxqWoIAjhMxPIH0yTm5uxSklnov7kTSAivY/bDUdzZxUQoSAosd/bhLgz1gK0
IIo4ee7OqIHu8SJF/6RvELeEM254WmSyjlRb1eTXWVb1/o+Ibuu4y0fAMVfnWia5
RXaUVrLQILxsk9IC709SlOPmuJzwkaP8aaxHJ7iO1Ztw5gG2xrwNttSPbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPLORNC0xgGpHoLBzUFQ6HKEyfHwMB8GA1UdIwQY
MBaAFP7G+1pGeXTJd6mXxt2hRkgF7TefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUt
MTI2NDFmOWU2ZmMwLzEvOHM1RTBMVEdBYWtlZ3NITlFWRG9jb1RKOGZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUtMTI2NDFmOWU2ZmMw
LzEvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsHR4MA0G
CSqGSIb3DQEBCwUAA4IBAQAdelsHKDbqo9ZgBKVyQmCy0dH/PSQUJoMptiPpeeji
BrGVICLP56+qFblTftxypp1YoMCdWwUkdfFkN4JVPvNgTdieVEYO5gJ2AIh++PP1
I00RxtfTtqqHV3QPE0jZbSzqF7OnhywQtr6Gw9sV45NFzMGSu01WmNUubPNR2Czz
7Tnndfe8vPF8btP+BPggF3/6fhM9QxYZN7/km2QmKzL/7DVythIqhYnh7Wr8rOjR
7zQOJ8fKL20cry0/KxTlB8HEM8iq6SZ8lhLXodYlKQsjIuJzFE+Qfi5Vnqykde9p
wUyaNXwEwjxmo20d41ZutMVTIi3cBMv+8DjZSPnsdIje
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:23 2025 by rpki-client