Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/oSgxhuLB-6yTt68t3bqgEq0bOXA.roa
File: oSgxhuLB-6yTt68t3bqgEq0bOXA.roa (raw, json)
Hash identifier: 5ffjN9/9R7QzsdKtcuqDGpmdN8oRDJa2nx8IozE18cc=
Subject key identifier: A1:28:31:86:E2:C1:FB:AC:93:B7:AF:2D:DD:BA:A0:12:AD:1B:39:70
Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial: 01863B03C4CDA38B0C943BBFCD2E83EC8516
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/oSgxhuLB-6yTt68t3bqgEq0bOXA.roa
Signing time: Fri 10 Feb 2023 11:09:08 +0000
ROA not before: Fri 10 Feb 2023 11:09:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213162
IP address blocks: 176.116.120.0/22 maxlen: 22
83.138.57.0/24 maxlen: 24
2a0f:fa40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:03:c4:cd:a3:8b:0c:94:3b:bf:cd:2e:83:ec:85:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
Validity
Not Before: Feb 10 11:09:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1283186e2c1fbac93b7af2dddbaa012ad1b3970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:00:b2:43:3f:79:2f:d9:85:ea:10:08:00:
5e:a7:f0:3d:0a:cf:e9:54:c1:6e:8c:e1:7c:f3:3a:
6e:5d:b5:17:0b:1b:3d:91:a7:59:6e:5a:67:95:19:
c9:0d:f7:d9:8a:13:45:fd:f0:36:8c:d5:f4:2b:18:
ac:71:b3:83:83:29:41:2d:bc:b6:1d:8d:3c:f0:f5:
32:08:3e:95:27:b5:b6:10:79:10:e9:51:73:b5:da:
61:e0:fe:dc:4e:ba:56:f7:26:40:06:36:45:6b:e6:
de:c4:39:38:cf:95:72:ee:dc:61:9e:3a:40:90:62:
b2:b1:91:c7:a3:5b:be:01:15:86:50:69:cf:bd:ef:
39:ec:03:7d:ee:d7:0a:61:6b:d5:94:a0:27:cf:f8:
dd:b5:07:0a:f5:6f:4f:a2:e5:be:97:73:1c:00:fa:
4d:b0:60:c3:bc:77:f3:46:ea:e8:6f:e0:ca:44:53:
71:8c:9a:18:cf:0c:35:33:43:a1:33:52:24:f0:4b:
a8:cd:23:bd:8e:23:47:ff:5c:0d:99:a7:e3:fa:54:
94:7e:94:9d:05:79:25:e3:b8:b1:0a:ee:d2:ca:59:
e0:0e:5f:1b:bc:f8:02:b8:70:fd:42:44:96:29:c4:
52:79:38:0b:5e:f8:45:32:56:2c:fa:31:a7:4e:84:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:28:31:86:E2:C1:FB:AC:93:B7:AF:2D:DD:BA:A0:12:AD:1B:39:70
X509v3 Authority Key Identifier:
keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/oSgxhuLB-6yTt68t3bqgEq0bOXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.57.0/24
176.116.120.0/22
IPv6:
2a0f:fa40::/29
Signature Algorithm: sha256WithRSAEncryption
63:25:42:d5:b7:ee:d0:83:08:9d:fa:98:28:fd:4d:30:75:fe:
57:ee:ac:6b:eb:c2:ca:ab:42:a5:3b:a7:78:ff:14:c5:f1:1f:
04:60:55:81:18:21:60:5d:01:b6:d7:fe:ea:78:0b:54:e4:84:
26:1f:f1:ea:1b:dc:31:c5:30:52:4b:f5:8d:44:44:f4:0e:87:
34:1f:0b:89:a9:f9:29:75:ef:d2:d7:f3:99:06:94:fa:f3:a2:
f7:ae:43:34:8e:26:9f:3d:9c:f0:a8:c7:66:26:93:f8:1f:d0:
8a:9c:b9:07:b4:24:8a:39:66:4c:aa:82:7d:c1:1a:d8:35:f8:
49:3e:7d:63:83:2d:72:12:3e:13:5d:03:11:73:56:b7:34:87:
ed:52:d4:ac:d2:78:f7:2e:b2:cc:bc:56:b9:e1:2d:22:e0:a9:
00:e7:a6:fe:da:29:57:90:dc:eb:ca:53:09:4d:da:4a:b7:e0:
4d:ff:e0:eb:3d:0f:11:49:1e:ef:f8:86:86:7b:76:b4:b6:85:
30:6b:86:c2:70:b7:5b:34:47:46:81:c4:de:88:c5:a9:36:ee:
87:4c:bd:e3:25:c8:c9:a7:09:65:15:ee:1a:7e:65:2f:4e:48:
7a:1e:02:c6:b6:60:aa:94:b6:0a:74:41:27:0c:3b:7a:9e:3a:
56:33:86:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:44 2025 by rpki-client