Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/fOyWW2LVY3BZxEkRok68K3NHEdk.roa
File: fOyWW2LVY3BZxEkRok68K3NHEdk.roa (raw, json)
Hash identifier: sVrSwPg6JhyuPUQ/jtWYlc+eBH24UM5tRrDar9jDBhI=
Subject key identifier: 7C:EC:96:5B:62:D5:63:70:59:C4:49:11:A2:4E:BC:2B:73:47:11:D9
Certificate issuer: /CN=fb11bd5c444c239c198776f360e0f100c9b5d802
Certificate serial: 01856C41591C8ECDDF518FD3DFD2E2EA256B
Authority key identifier: FB:11:BD:5C:44:4C:23:9C:19:87:76:F3:60:E0:F1:00:C9:B5:D8:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xG9XERMI5wZh3bzYODxAMm12AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/fOyWW2LVY3BZxEkRok68K3NHEdk.roa
Signing time: Sun 01 Jan 2023 07:34:59 +0000
ROA not before: Sun 01 Jan 2023 07:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 176.97.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:59:1c:8e:cd:df:51:8f:d3:df:d2:e2:ea:25:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb11bd5c444c239c198776f360e0f100c9b5d802
Validity
Not Before: Jan 1 07:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cec965b62d5637059c44911a24ebc2b734711d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:4b:34:e3:cc:a7:26:e0:7a:d2:02:87:c6:
8c:40:32:11:5a:1c:a6:75:46:fd:a5:79:b1:ea:21:
4e:95:05:e5:a9:2a:c9:4e:16:80:31:33:7c:04:55:
53:83:3e:8f:cf:f3:85:c4:db:39:9f:e1:37:ae:f6:
c5:5d:58:ba:d0:ca:0f:eb:12:b7:25:fb:d4:7c:fd:
df:cb:a9:d7:7c:ca:4d:18:26:e7:b6:1e:3b:54:f6:
ea:e0:98:9e:86:17:18:1a:da:62:80:96:10:10:ae:
94:14:34:54:35:d5:f3:3f:12:f2:a4:44:63:27:0e:
e6:e1:7a:db:08:fb:63:4b:29:79:0d:26:04:f9:27:
1c:b1:44:3c:3d:41:a5:c6:ad:4c:de:b3:1f:60:1d:
89:28:3b:4e:a9:9c:01:30:49:d1:ab:6c:8e:99:ad:
43:73:77:4f:54:6f:eb:c7:ac:b9:fa:77:91:68:40:
a4:ac:a7:cb:ed:41:e7:be:d0:8c:45:f1:2f:00:30:
c9:70:74:50:af:92:f4:24:93:72:c7:0f:c0:32:90:
7b:9b:4c:8e:9d:c6:50:4c:13:61:10:70:7e:8f:b3:
6e:d2:c8:a0:c5:0e:f2:17:a6:d9:99:3c:fe:a8:8d:
95:7e:db:ed:28:1e:64:19:1f:68:48:09:cd:2f:26:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EC:96:5B:62:D5:63:70:59:C4:49:11:A2:4E:BC:2B:73:47:11:D9
X509v3 Authority Key Identifier:
keyid:FB:11:BD:5C:44:4C:23:9C:19:87:76:F3:60:E0:F1:00:C9:B5:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xG9XERMI5wZh3bzYODxAMm12AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/fOyWW2LVY3BZxEkRok68K3NHEdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/1-xG9XERMI5wZh3bzYODxAMm12AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.211.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e4:98:94:9b:24:21:95:7c:9c:6c:9d:f9:3b:f5:42:2c:e6:
42:cb:b2:80:0a:90:78:de:b6:db:82:40:e9:db:1d:e5:a9:39:
24:c8:6b:14:2b:12:1c:e1:dc:20:73:88:a1:ef:ce:2f:a9:32:
cd:82:5b:01:32:94:fa:57:07:9d:65:78:6e:99:10:8a:9b:26:
8c:dd:72:29:ec:c2:4c:52:f5:a8:8a:0a:b3:0e:1e:4b:de:e0:
c0:75:74:c1:6d:a3:e4:ab:69:5e:2c:a5:cd:4b:eb:eb:db:36:
c5:41:ea:fb:ae:3e:17:0c:c4:41:c1:11:50:4f:96:ea:52:ab:
ce:fc:51:b2:72:1e:b4:83:6f:19:64:bb:12:1e:05:0f:cf:e6:
8d:15:bf:69:15:37:5d:00:53:9a:6c:0b:e0:0d:57:46:54:98:
48:29:b4:73:86:c1:f3:32:42:e7:6e:d6:76:a8:74:7b:f3:11:
0c:7e:2d:f5:1d:64:e1:17:12:b2:d5:cb:55:75:ea:e3:fe:70:
67:0d:4f:54:35:ff:b5:66:ba:21:6f:49:5e:67:13:2f:e4:55:
bf:4a:6d:6e:24:c5:ea:df:42:77:c2:49:b3:32:38:30:6f:74:
4e:41:53:da:78:0a:a7:77:25:08:4a:64:b1:5f:60:d0:21:13:
c2:0a:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:05 2025 by rpki-client