Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/X4gQrfDRh4wm9-K9fTE5zy-r0kw.roa
File: X4gQrfDRh4wm9-K9fTE5zy-r0kw.roa (raw, json)
Hash identifier: FoTgzCAOS/+2SXIoXNo9B3/Bml45fp0ic4yWFiZQ3JU=
Subject key identifier: 5F:88:10:AD:F0:D1:87:8C:26:F7:E2:BD:7D:31:39:CF:2F:AB:D2:4C
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 0191794220C15CC5B7F273DE90F4977248B1
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/X4gQrfDRh4wm9-K9fTE5zy-r0kw.roa
Signing time: Thu 22 Aug 2024 08:44:22 +0000
ROA not before: Thu 22 Aug 2024 08:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15169
IP address blocks: 176.116.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:42:20:c1:5c:c5:b7:f2:73:de:90:f4:97:72:48:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Aug 22 08:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f8810adf0d1878c26f7e2bd7d3139cf2fabd24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:e1:67:d1:9e:c3:84:92:9b:2b:7a:c0:d5:
f3:fe:87:0a:5e:7e:61:16:05:0d:5d:f3:e9:df:45:
ab:31:5f:6b:01:b2:1d:4a:5a:6f:6b:1a:8d:97:1a:
b3:91:b8:14:83:10:a6:c4:4a:90:ff:6e:71:3f:34:
dc:64:2e:84:ad:4b:a1:3f:7c:cc:04:71:ea:34:e8:
d6:88:4b:db:43:92:9e:5d:06:f9:89:92:90:67:a0:
7c:74:b1:c1:22:15:b8:14:9f:3f:0d:c8:c5:f6:d2:
d9:75:24:38:9a:f8:d1:b5:e3:89:35:60:ef:89:c1:
75:63:78:4b:27:ce:7d:b4:c9:21:67:7b:4f:bd:58:
16:27:d3:8d:62:9d:ed:f1:b0:41:e7:50:f3:96:63:
4f:ab:a0:0d:44:b7:b3:31:22:ed:42:fc:18:dc:22:
38:e5:68:19:27:25:f3:31:66:6a:c3:cc:ec:dd:58:
45:14:4a:1d:2c:da:09:c6:28:c0:c3:03:bd:2d:ae:
60:e2:e5:6a:39:f8:81:f5:3d:0a:e2:e3:c7:2a:0e:
9b:2b:87:40:02:4d:55:e0:5e:81:1f:1d:18:94:5c:
0b:2e:bd:73:d3:3f:d2:72:ca:e5:77:c8:bd:46:7c:
84:51:43:bd:fd:b4:23:13:d4:58:4c:98:a1:77:41:
f0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:88:10:AD:F0:D1:87:8C:26:F7:E2:BD:7D:31:39:CF:2F:AB:D2:4C
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/X4gQrfDRh4wm9-K9fTE5zy-r0kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.16.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:68:23:98:b2:89:f1:47:03:bc:97:f1:e6:2a:53:02:62:35:
4e:2f:5f:3a:24:da:33:84:00:e1:c3:e8:e8:ce:70:0a:7a:46:
aa:3c:8c:c4:7d:3c:4a:0c:7b:a6:ba:18:d1:06:12:71:54:5e:
da:49:27:24:77:ac:4b:67:80:f6:45:96:f6:48:12:56:d5:d8:
93:b3:2b:b1:7d:e1:92:57:d7:d9:6f:3e:19:ff:3e:bc:9d:1f:
e4:86:bd:d6:5f:9a:71:63:4f:6d:1d:9a:64:d0:7e:3d:87:6a:
25:55:8f:01:86:bc:c7:0c:88:79:e9:8c:ec:bd:ea:e4:d2:32:
ce:b7:c3:fa:35:95:82:9a:0e:25:f2:f3:df:40:46:0b:2d:0a:
71:b2:e0:eb:e6:98:9e:c0:e8:6c:80:5f:06:8b:81:51:5f:03:
8a:d7:e4:4b:1a:10:81:ba:a1:45:e8:44:38:35:fd:b5:c7:0d:
7c:b9:fa:0c:04:00:9a:98:21:06:82:1f:f2:b1:ba:aa:dd:a8:
a2:f2:49:2d:e1:2d:93:ad:62:60:ed:e2:bb:af:db:d2:b1:92:
01:e8:d2:96:4d:45:fb:3d:f4:88:28:5a:fb:0c:48:8d:b2:52:
53:fa:d1:fa:ec:9c:a1:8b:1c:06:c4:5d:f8:be:0b:08:fa:6e:
3b:46:4d:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZF5QiDBXMW38nPekPSXckixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZDM3OTM1M2UzYzk0OGRmZDk4ZGEwYTU5ZTk3OTIzNTNh
NGQwZTMwHhcNMjQwODIyMDg0NDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Zjg4MTBhZGYwZDE4NzhjMjZmN2UyYmQ3ZDMxMzljZjJmYWJkMjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvDhZ9Gew4SSmyt6wNXz/ocKXn5h
FgUNXfPp30WrMV9rAbIdSlpvaxqNlxqzkbgUgxCmxEqQ/25xPzTcZC6ErUuhP3zM
BHHqNOjWiEvbQ5KeXQb5iZKQZ6B8dLHBIhW4FJ8/DcjF9tLZdSQ4mvjRteOJNWDv
icF1Y3hLJ859tMkhZ3tPvVgWJ9ONYp3t8bBB51DzlmNPq6ANRLezMSLtQvwY3CI4
5WgZJyXzMWZqw8zs3VhFFEodLNoJxijAwwO9La5g4uVqOfiB9T0K4uPHKg6bK4dA
Ak1V4F6BHx0YlFwLLr1z0z/Scsrld8i9RnyEUUO9/bQjE9RYTJihd0HwRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF+IEK3w0YeMJvfivX0xOc8vq9JMMB8GA1UdIwQY
MBaAFC/TeTU+PJSN/ZjaClnpeSNTpNDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDlONU5UNDhsSTM5bU5vS1dlbDVJMU9rME9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8xMzI4OGEtZDkyOC00NjJiLTk0YmEt
OWUyMjU2MWJjYTg4LzEvWDRnUXJmRFJoNHdtOS1LOWZURTV6eS1yMGt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8xMzI4OGEtZDkyOC00NjJiLTk0YmEtOWUyMjU2MWJjYTg4
LzEvTDlONU5UNDhsSTM5bU5vS1dlbDVJMU9rME9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHQQMA0G
CSqGSIb3DQEBCwUAA4IBAQBeaCOYsonxRwO8l/HmKlMCYjVOL186JNozhADhw+jo
znAKekaqPIzEfTxKDHumuhjRBhJxVF7aSSckd6xLZ4D2RZb2SBJW1diTsyuxfeGS
V9fZbz4Z/z68nR/khr3WX5pxY09tHZpk0H49h2olVY8BhrzHDIh56Yzsverk0jLO
t8P6NZWCmg4l8vPfQEYLLQpxsuDr5piewOhsgF8Gi4FRXwOK1+RLGhCBuqFF6EQ4
Nf21xw18ufoMBACamCEGgh/ysbqq3aii8kkt4S2TrWJg7eK7r9vSsZIB6NKWTUX7
PfSIKFr7DEiNslJT+tH67JyhixwGxF34vgsI+m47Rk2I
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:28:54 2025 by rpki-client