Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/X0-3PAazjse0hHhiAz0y98y6xD0.roa
File: X0-3PAazjse0hHhiAz0y98y6xD0.roa (raw, json)
Hash identifier: AtkwB+eyCo+X4Q8oeouklk8Nhb4ehYTOanEpZg+NyIY=
Subject key identifier: 5F:4F:B7:3C:06:B3:8E:C7:B4:84:78:62:03:3D:32:F7:CC:BA:C4:3D
Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial: 019426D9E06A2F7284F2503D7229FBCE2631
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/X0-3PAazjse0hHhiAz0y98y6xD0.roa
Signing time: Thu 02 Jan 2025 11:50:00 +0000
ROA not before: Thu 02 Jan 2025 11:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 176.116.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e0:6a:2f:72:84:f2:50:3d:72:29:fb:ce:26:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
Validity
Not Before: Jan 2 11:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f4fb73c06b38ec7b4847862033d32f7ccbac43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bb:fb:df:fe:1d:22:1a:61:a5:29:51:5f:b2:
df:d6:ef:3f:6f:f5:cd:13:6a:c7:f0:d9:57:86:35:
75:58:fa:0e:0a:b6:52:5b:97:71:f7:a0:4a:4e:b7:
92:54:88:67:82:f7:a5:5c:82:7f:35:b5:82:6a:d6:
77:53:d6:68:5a:ae:af:2a:f3:85:66:7b:c0:a0:49:
64:bd:e6:cf:97:46:2b:03:59:ab:f8:00:82:1f:15:
0d:16:c7:6a:9d:c5:d9:a0:b2:16:6a:02:fd:26:9a:
06:96:6e:bd:80:5c:54:b2:81:67:10:85:ef:ff:ca:
eb:cc:34:9a:06:d0:06:ea:a5:f4:c8:76:da:94:ac:
99:57:e9:fa:e7:1a:ea:27:6f:e6:67:28:60:d8:fb:
fa:e4:c4:2f:9a:be:52:f4:f6:7d:07:c4:4b:af:c8:
c5:88:5a:23:49:9f:b8:09:f0:72:62:dd:1e:d1:bc:
f2:d5:1c:c5:e2:a5:25:1c:77:f1:5f:29:af:59:ae:
69:3b:76:9c:de:0b:5f:81:1e:8e:f6:6f:de:9e:8c:
f1:32:9b:2f:a5:b2:bb:40:ae:89:4f:3c:60:ea:99:
a0:16:5c:d7:be:d3:3c:0a:f6:e9:f3:db:1f:0d:58:
ee:70:2b:6a:6d:17:a9:e5:51:08:9b:da:66:d4:a4:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4F:B7:3C:06:B3:8E:C7:B4:84:78:62:03:3D:32:F7:CC:BA:C4:3D
X509v3 Authority Key Identifier:
keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/X0-3PAazjse0hHhiAz0y98y6xD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.123.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ad:cd:91:a6:ab:f3:ff:60:4f:c2:38:9b:bf:45:dd:f5:30:
12:52:61:fd:65:aa:82:ca:80:b6:90:1f:76:96:55:61:4c:f0:
87:df:e3:4f:78:b8:ff:57:4c:5d:d7:9c:8e:bd:5c:af:b8:5a:
7b:7e:3b:d2:1b:12:2c:da:db:ac:8d:b5:5c:e0:3d:f6:9c:6a:
38:0f:37:22:2c:97:c0:5e:5c:5c:3b:eb:5a:fc:cd:24:f4:bd:
e8:c4:e3:69:6c:a1:89:23:52:98:4c:02:c7:a0:7d:03:a6:b5:
df:60:e4:4a:74:04:15:61:9d:67:14:74:0d:4c:3d:52:92:15:
aa:b5:8d:29:ca:71:4c:c9:46:76:22:41:56:88:91:51:92:f6:
12:4e:27:3b:7f:42:fb:58:21:97:6c:17:d8:b9:02:8f:5d:83:
3f:27:06:36:49:83:ed:71:26:b6:85:4f:be:11:7e:2e:ad:f0:
3d:13:4b:ad:74:02:a8:27:1b:81:ea:54:cb:a5:15:1c:6c:9e:
23:cb:71:19:03:4e:59:09:fa:9b:3e:af:17:27:98:13:2e:bf:
f1:4b:17:84:80:41:da:7d:0a:98:d4:32:13:e7:c8:a5:8b:25:
d7:40:8d:ca:9c:48:fd:37:2a:e4:85:af:52:a0:c9:e7:44:f7:
e6:72:6c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:56 2025 by rpki-client