Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/W2LTcQYrxV-y9L8Mq3wrXeTUzao.roa
File: W2LTcQYrxV-y9L8Mq3wrXeTUzao.roa (raw, json)
Hash identifier: DW3HKHByAu57M+HTyGMNjta7y1eEQhogvHMMiAcufxU=
Subject key identifier: 5B:62:D3:71:06:2B:C5:5F:B2:F4:BF:0C:AB:7C:2B:5D:E4:D4:CD:AA
Certificate issuer: /CN=d173b28579634dd908c4ef216e05ceb6bdf99f77
Certificate serial: A2C8ED
Authority key identifier: D1:73:B2:85:79:63:4D:D9:08:C4:EF:21:6E:05:CE:B6:BD:F9:9F:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XOyhXljTdkIxO8hbgXOtr35n3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/W2LTcQYrxV-y9L8Mq3wrXeTUzao.roa
Signing time: Sat 01 Jan 2022 03:59:23 +0000
ROA not before: Sat 01 Jan 2022 03:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 176.97.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10668269 (0xa2c8ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d173b28579634dd908c4ef216e05ceb6bdf99f77
Validity
Not Before: Jan 1 03:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b62d371062bc55fb2f4bf0cab7c2b5de4d4cdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:a6:e2:2a:3b:15:0e:d7:cf:84:c2:37:4c:
aa:ab:39:0c:ae:33:47:e5:6b:6d:4e:a6:ca:a1:15:
97:d0:51:a3:b9:e3:54:90:93:96:97:b5:98:c0:34:
90:34:cb:31:6d:28:90:64:e6:e1:8d:0e:a1:9c:a5:
f5:c2:37:77:11:8b:e0:ed:ce:f1:3f:ae:b9:a7:16:
59:d7:49:b8:6a:e8:18:68:88:fc:59:cb:9d:29:00:
ba:56:05:4a:2d:aa:6e:ba:50:e8:33:38:70:b6:e5:
87:7c:99:87:dd:ca:dc:d0:88:6b:1f:e4:7e:d1:00:
1d:5b:e5:75:df:06:14:d5:d8:92:29:39:5c:21:5a:
91:c9:d6:03:10:cb:aa:e0:2c:54:51:70:48:a9:c0:
72:a9:d7:77:23:c7:59:12:7a:80:e1:43:15:02:46:
2f:09:39:e5:54:5d:5d:a6:b5:a4:52:ae:41:29:ac:
cc:c5:59:c6:6c:1e:6b:51:f6:b0:e1:b8:05:2b:c3:
8e:81:4e:de:48:77:3c:06:ad:fb:3f:aa:a6:9d:d4:
d5:70:77:b0:30:67:b3:b5:a9:2a:9d:a3:fe:19:5c:
a1:7f:a9:fb:92:0f:16:1d:60:78:17:3f:74:18:ce:
b6:f2:f4:95:91:79:96:95:43:8b:83:0b:55:2c:bb:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:62:D3:71:06:2B:C5:5F:B2:F4:BF:0C:AB:7C:2B:5D:E4:D4:CD:AA
X509v3 Authority Key Identifier:
keyid:D1:73:B2:85:79:63:4D:D9:08:C4:EF:21:6E:05:CE:B6:BD:F9:9F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XOyhXljTdkIxO8hbgXOtr35n3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/W2LTcQYrxV-y9L8Mq3wrXeTUzao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcb2cd-403b-4671-a965-7c9227adc126/1/0XOyhXljTdkIxO8hbgXOtr35n3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.219.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3d:7f:80:f0:93:b4:2e:61:2d:0a:0e:4d:5f:a8:5e:8b:83:
a8:c2:12:cd:8b:12:69:fa:89:a6:75:d1:9f:53:a0:ea:ca:cb:
90:fa:3d:38:5f:fa:46:31:7e:ff:00:79:a6:3b:40:9b:de:e4:
06:43:d6:47:1e:f6:5d:a7:de:af:0b:e9:c8:5a:75:1f:4f:8f:
3c:3d:b1:30:c5:b7:3b:c7:f3:81:d1:ee:a8:eb:a7:7c:f6:9f:
80:19:7e:8c:6c:4e:4d:9b:3c:13:fd:88:d2:f0:66:49:9e:33:
a5:40:7e:0b:f1:1a:5d:af:98:1d:fb:91:a0:09:c6:f1:93:b7:
66:98:97:b4:9b:8d:8f:b1:a5:9a:30:4b:6c:93:54:a6:7a:d2:
55:84:63:34:2d:71:67:c1:1d:b8:15:b0:db:6d:1e:fc:bb:29:
d2:75:2d:23:50:6b:e4:a0:d1:0b:eb:37:e7:b1:0a:69:dc:09:
7f:3f:a1:14:a1:5a:bf:4f:6f:e0:1c:20:50:a5:95:e8:b6:85:
a9:38:10:5c:a2:95:e5:22:99:e6:be:66:05:06:14:45:88:74:
6a:56:ed:a2:ce:62:43:df:e2:d5:8e:f8:b5:be:45:aa:05:25:
87:b4:7c:70:c5:cc:c6:cf:08:58:c5:aa:f0:b2:60:94:95:b2:
73:a0:82:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:43:58 2025 by rpki-client