Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d5dc90-f0ef-4729-8456-aab422df21e2/1/9tD_1I2KVfY3tuNKMIhyoemmYos.roa
File: 9tD_1I2KVfY3tuNKMIhyoemmYos.roa (raw, json)
Hash identifier: CreXtKHiGB2ZppJXc2y8OzbU1wTSRpatoBXiaDKCi/Y=
Subject key identifier: F6:D0:FF:D4:8D:8A:55:F6:37:B6:E3:4A:30:88:72:A1:E9:A6:62:8B
Certificate issuer: /CN=c2ddf62aad77743167ee4f414969642c8b128c6d
Certificate serial: 1758
Authority key identifier: C2:DD:F6:2A:AD:77:74:31:67:EE:4F:41:49:69:64:2C:8B:12:8C:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt32Kq13dDFn7k9BSWlkLIsSjG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d5dc90-f0ef-4729-8456-aab422df21e2/1/9tD_1I2KVfY3tuNKMIhyoemmYos.roa
Signing time: Tue 15 Mar 2022 10:00:25 +0000
ROA not before: Tue 15 Mar 2022 10:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198401
IP address blocks: 176.126.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5976 (0x1758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ddf62aad77743167ee4f414969642c8b128c6d
Validity
Not Before: Mar 15 10:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6d0ffd48d8a55f637b6e34a308872a1e9a6628b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:23:a1:59:73:7c:14:3b:8a:9f:97:8a:4c:
7a:19:7c:c8:3a:b7:4d:a2:d4:b7:c7:61:e4:b1:22:
b6:5c:f0:f3:27:01:23:77:0e:01:ff:05:04:de:e6:
fe:cf:2a:a0:b5:43:1f:19:2f:cc:65:f8:a9:01:3a:
3b:05:9c:8a:cd:cd:7f:57:b7:19:34:a6:13:98:02:
63:f4:db:b7:e8:0e:36:c9:ab:a5:46:65:4f:34:c6:
24:9a:b8:ec:01:fe:a7:39:39:50:50:57:b5:4e:3d:
af:9b:96:cf:b5:bf:80:74:f6:0d:a1:9b:0d:39:ed:
99:96:c7:4c:dd:f1:ee:64:c8:18:04:b1:b4:52:00:
32:84:53:dc:54:db:74:66:b1:2d:1e:1a:2f:ca:19:
95:cf:fc:cf:6b:0e:9b:13:c1:a4:f3:8b:a8:f8:0c:
03:43:a7:cb:2e:57:34:9d:8d:6a:ad:ed:f7:9d:c1:
45:f6:36:db:ab:d8:be:2f:94:77:b5:4f:58:db:48:
3c:dd:01:c4:94:16:8f:89:1d:bb:22:28:81:f9:22:
da:2b:a4:11:ea:ea:1f:5e:80:14:a6:db:16:a8:cc:
e7:02:9b:d7:0e:ad:a4:44:ed:29:1a:c2:77:e8:e0:
d3:e4:ad:f9:c3:bd:03:43:bc:6a:5e:32:30:37:e8:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D0:FF:D4:8D:8A:55:F6:37:B6:E3:4A:30:88:72:A1:E9:A6:62:8B
X509v3 Authority Key Identifier:
keyid:C2:DD:F6:2A:AD:77:74:31:67:EE:4F:41:49:69:64:2C:8B:12:8C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt32Kq13dDFn7k9BSWlkLIsSjG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d5dc90-f0ef-4729-8456-aab422df21e2/1/9tD_1I2KVfY3tuNKMIhyoemmYos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d5dc90-f0ef-4729-8456-aab422df21e2/1/wt32Kq13dDFn7k9BSWlkLIsSjG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.118.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8f:cd:2c:79:54:ae:3a:25:f8:e1:bb:16:0c:a9:87:51:71:
d4:8a:11:d9:cf:f1:5e:b8:32:b2:8d:c9:d8:2e:af:0c:9f:97:
f2:2b:08:c4:60:60:ac:e5:62:e7:2b:b2:ed:62:23:14:8b:98:
9b:43:29:14:68:67:bb:62:03:3b:31:b4:99:38:e8:7e:27:ec:
db:01:fa:3f:e6:fb:30:f6:85:08:89:e3:81:6f:7f:07:63:61:
2e:77:f7:be:2c:e2:78:2e:5a:ac:5d:7d:52:50:5f:32:89:2d:
6a:70:64:99:ad:f9:dd:b4:b0:88:bc:58:d8:42:9c:b8:1d:ef:
20:b3:26:b0:d6:a4:c8:95:de:f9:fe:a1:21:d9:3e:f0:d2:7e:
30:e8:75:42:a7:5b:65:01:e9:97:42:5e:c0:a6:0f:0d:06:9d:
ab:8b:f2:ef:ec:3f:ee:3f:3c:4d:72:e9:bd:4d:9e:8b:76:bc:
a9:4f:fb:52:e7:53:41:88:1d:35:5f:20:fa:75:3e:b8:50:20:
49:3b:db:6b:52:a7:d7:3e:6e:a2:21:d2:a4:a1:4b:c4:69:8b:
15:94:7c:a5:f0:69:f5:85:e3:10:b6:a6:30:76:99:4d:d2:e7:
55:62:4a:5a:b5:f0:87:ed:de:4e:53:1f:58:f6:53:18:b4:a5:
cf:9c:32:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:16:14 2025 by rpki-client