Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/2NHla_mmXsWr27pqyFCpXsNWOQE.roa
File: 2NHla_mmXsWr27pqyFCpXsNWOQE.roa (raw, json)
Hash identifier: OMolCk+D/0fjSOTLzhPU+5W70PAZbOYmVK4MGFtMBgg=
Subject key identifier: D8:D1:E5:6B:F9:A6:5E:C5:AB:DB:BA:6A:C8:50:A9:5E:C3:56:39:01
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 5E76C2
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/2NHla_mmXsWr27pqyFCpXsNWOQE.roa
Signing time: Sat 01 Jan 2022 01:57:48 +0000
ROA not before: Sat 01 Jan 2022 01:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210479
IP address blocks: 176.116.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6190786 (0x5e76c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Jan 1 01:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8d1e56bf9a65ec5abdbba6ac850a95ec3563901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:da:df:ae:8d:e2:df:57:33:73:c6:03:ab:
de:6c:0f:2f:53:dc:28:d7:9c:8c:78:eb:20:57:d9:
87:9d:3e:89:c3:e3:d8:d6:17:58:5e:51:3a:7a:ab:
74:dc:fb:90:5e:5f:6c:c7:0c:ab:f9:51:2d:32:94:
f2:48:52:ae:25:46:10:0d:33:3f:9e:8f:c7:2a:34:
e0:29:0a:21:6a:5e:58:54:ba:b3:d7:59:cf:67:9f:
e9:c9:fa:9c:b8:5c:01:97:62:37:18:a3:d3:98:26:
d7:c2:8c:08:1f:8a:70:d4:0f:ce:43:a4:5e:59:9a:
76:df:23:52:b6:83:d7:89:8c:4f:ca:14:fa:1f:f0:
86:b1:72:ac:67:7a:43:a5:85:f2:8e:0d:96:28:28:
85:1e:3b:54:18:1c:9e:94:96:3a:e1:3e:6b:4b:fe:
74:ab:35:31:bd:90:87:30:2b:40:aa:ea:3d:8a:40:
9c:c5:31:56:dd:7d:54:f1:88:b0:d4:3f:e3:74:73:
41:c2:f1:a8:9d:68:5a:ee:e1:38:a9:27:05:01:4e:
08:e7:e2:64:47:a7:ce:22:62:54:9b:55:04:e3:4c:
4f:72:57:83:6f:e9:c9:b8:45:f0:0a:59:9c:df:f4:
34:aa:59:96:d0:14:f1:0c:f8:e0:ad:2a:34:ff:e7:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D1:E5:6B:F9:A6:5E:C5:AB:DB:BA:6A:C8:50:A9:5E:C3:56:39:01
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/2NHla_mmXsWr27pqyFCpXsNWOQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.16.0/24
Signature Algorithm: sha256WithRSAEncryption
13:29:61:48:09:3d:df:32:5c:f7:ef:83:40:1f:43:d8:a5:ce:
39:50:b0:b8:1e:d0:23:72:02:29:50:33:0e:53:20:54:b4:06:
10:cd:c0:bb:4a:cd:32:93:32:10:bc:84:91:c3:ee:3d:b1:28:
bf:4b:f7:a0:22:a8:71:4f:fb:59:15:17:d7:a8:d3:48:ab:69:
d5:40:c8:ba:ba:47:f2:17:c0:f8:39:65:88:27:10:98:6b:62:
a0:bd:b5:0a:bb:0c:c4:4d:c5:31:02:a0:19:eb:03:8e:47:d8:
99:a8:5d:0f:f7:8d:d6:d9:ca:d5:8e:25:cb:58:70:f4:7c:52:
62:b0:94:b1:a4:e2:d4:ed:6b:f2:b4:f0:e4:ba:95:4c:fd:5f:
3d:fa:27:4d:1d:44:79:fc:03:8a:82:a9:a0:6f:35:5a:19:48:
19:52:79:6c:2f:da:56:6b:af:be:21:5a:f9:d8:7a:b9:a1:a7:
83:97:3a:a1:33:59:d2:80:41:af:de:43:f2:c1:01:93:d5:0d:
14:cc:27:05:b6:77:58:45:73:97:80:d4:c4:01:f6:6c:18:d6:
f5:79:dc:f6:32:11:48:b3:49:ec:53:98:43:7e:73:dc:b4:fd:
10:5b:3e:f8:7e:2b:1e:1b:60:e2:14:b3:a7:42:e1:bf:9c:24:
ef:72:50:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:06:44 2025 by rpki-client