Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/ecbbea-9bc4-4bcd-9522-1008204ba6fd/1/rnQR9Q7thigqyeTCc74H_a_5l08.roa
File: rnQR9Q7thigqyeTCc74H_a_5l08.roa (raw, json)
Hash identifier: RTur6LW+ovphxozv8/lP2i2U1Vg+FzpFhSMa0SpieBA=
Subject key identifier: AE:74:11:F5:0E:ED:86:28:2A:C9:E4:C2:73:BE:07:FD:AF:F9:97:4F
Certificate issuer: /CN=7545b74cb0f5e0ae08071d34483e16a07e8b0f5d
Certificate serial: C47138
Authority key identifier: 75:45:B7:4C:B0:F5:E0:AE:08:07:1D:34:48:3E:16:A0:7E:8B:0F:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUW3TLD14K4IBx00SD4WoH6LD10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/ecbbea-9bc4-4bcd-9522-1008204ba6fd/1/rnQR9Q7thigqyeTCc74H_a_5l08.roa
Signing time: Wed 19 Jan 2022 12:27:42 +0000
ROA not before: Wed 19 Jan 2022 12:27:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211190
IP address blocks: 176.97.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12874040 (0xc47138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7545b74cb0f5e0ae08071d34483e16a07e8b0f5d
Validity
Not Before: Jan 19 12:27:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae7411f50eed86282ac9e4c273be07fdaff9974f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:26:9a:48:c0:25:e7:f8:e1:d5:75:89:dd:
b1:1e:16:4a:19:a5:f7:3b:ff:13:89:c6:dd:5a:ee:
b5:6d:e1:f1:5c:20:a1:4c:ea:6c:b5:4b:6a:4c:bb:
60:23:41:92:4f:ac:62:ac:48:67:e9:0e:08:b8:d7:
77:95:bf:a9:ef:66:b1:4b:ea:75:e7:1d:1b:90:92:
7b:20:40:68:78:87:c9:57:de:2a:a2:67:0a:22:95:
ab:ae:13:8d:e4:63:0d:1f:e4:34:19:d0:4a:1f:4d:
a3:7d:19:7e:ac:03:c6:af:aa:6c:50:fd:27:13:f4:
03:1a:93:a8:e6:57:49:00:75:08:bb:b3:4d:84:bf:
0d:7b:fa:e6:81:b1:eb:31:5e:99:d6:87:d5:5a:20:
fa:05:33:cf:c9:60:56:8b:55:73:2d:8e:f6:59:43:
c1:de:5c:63:35:49:c8:f9:ff:f3:a9:3b:70:ba:d1:
69:b4:89:6a:c0:b5:13:ab:0e:e2:0e:27:29:18:66:
ff:22:eb:e5:81:77:0c:a2:89:f1:9e:1e:65:bf:2d:
b6:67:91:ca:98:60:02:c3:22:98:41:aa:2d:3e:d1:
57:27:d5:77:f1:ef:61:c6:72:3e:cc:a9:92:f2:84:
70:33:96:94:ab:37:16:fb:70:01:cd:3a:37:fe:ef:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:74:11:F5:0E:ED:86:28:2A:C9:E4:C2:73:BE:07:FD:AF:F9:97:4F
X509v3 Authority Key Identifier:
keyid:75:45:B7:4C:B0:F5:E0:AE:08:07:1D:34:48:3E:16:A0:7E:8B:0F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUW3TLD14K4IBx00SD4WoH6LD10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/ecbbea-9bc4-4bcd-9522-1008204ba6fd/1/rnQR9Q7thigqyeTCc74H_a_5l08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/ecbbea-9bc4-4bcd-9522-1008204ba6fd/1/dUW3TLD14K4IBx00SD4WoH6LD10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.221.0/24
Signature Algorithm: sha256WithRSAEncryption
64:2c:eb:37:ea:3d:33:0e:4a:73:58:55:59:f6:47:07:be:82:
85:96:d4:8c:63:51:5d:d3:47:9c:f0:4b:c2:aa:9e:6a:a8:bc:
80:3d:93:01:3c:95:a9:80:70:a0:f4:c6:e0:4c:26:2e:d2:e4:
76:41:a5:a8:d2:66:13:6a:44:67:08:15:7b:06:d4:4b:c9:f0:
51:5a:b1:5e:4d:0b:fc:29:5a:e0:35:68:b1:0e:8f:0e:f4:fc:
00:07:12:72:e3:bc:53:a4:2f:ac:c9:b7:5a:8c:27:79:e7:aa:
2a:b4:8c:8c:0e:b3:16:58:01:3c:45:3e:64:5f:ad:10:bb:62:
54:ab:08:1d:92:c7:cc:b7:e4:bb:e3:29:03:9e:9a:5e:b2:34:
4b:0c:f4:60:a1:59:fb:9a:79:24:e0:52:14:ac:d5:25:f4:7d:
2b:b9:3c:ec:73:7a:cc:51:f9:45:fb:e9:e5:65:79:81:27:34:
3f:8b:ce:aa:b7:fd:30:c1:f9:dd:3f:d6:65:ab:6e:65:fc:29:
17:35:ed:cc:16:57:58:19:92:83:dd:45:81:50:65:01:c8:27:
92:18:5f:1c:bc:12:ac:69:9e:fd:62:8c:20:d8:65:49:f8:f2:
ef:58:1a:b9:7f:13:14:7d:a5:b3:2f:33:11:4b:fc:18:b4:ce:
f0:59:0b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:33 2025 by rpki-client