Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/1-_PY-FxmScnLUEveE-aHYFEuFk0.roa
File: 1-_PY-FxmScnLUEveE-aHYFEuFk0.roa (raw, json)
Hash identifier: Py40Qkp7+oZdR+5SnPGkIDmvcMgl62Xe5r9p5XSxq5o=
Subject key identifier: FB:F3:D8:F8:5C:66:49:C9:CB:50:4B:DE:13:E6:87:60:51:2E:16:4D
Certificate issuer: /CN=f26ce0f46fbbbe2dd381b3532899c31dc40c1a42
Certificate serial: 018CC3B66E40DD494FECF9BF29302B9858E9
Authority key identifier: F2:6C:E0:F4:6F:BB:BE:2D:D3:81:B3:53:28:99:C3:1D:C4:0C:1A:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mzg9G-7vi3TgbNTKJnDHcQMGkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/1-_PY-FxmScnLUEveE-aHYFEuFk0.roa
Signing time: Mon 01 Jan 2024 06:29:21 +0000
ROA not before: Mon 01 Jan 2024 06:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56851
IP address blocks: 176.105.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:6e:40:dd:49:4f:ec:f9:bf:29:30:2b:98:58:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26ce0f46fbbbe2dd381b3532899c31dc40c1a42
Validity
Not Before: Jan 1 06:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbf3d8f85c6649c9cb504bde13e68760512e164d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:f9:67:64:e4:75:7c:ed:8e:2b:3e:ad:6a:
00:a8:8e:2a:69:88:0e:6e:38:69:ba:cd:f7:3b:39:
8e:a3:fb:45:c9:44:bc:54:a2:f3:a0:68:d8:84:d3:
28:fc:d0:67:a7:4a:ac:7e:00:bb:c0:b9:8b:d7:91:
34:45:d5:16:7a:43:09:e1:b2:6c:31:63:53:16:e5:
6f:ea:0b:ea:2e:41:2f:a2:38:7d:8c:7c:4e:c6:01:
99:55:96:82:ba:b6:fd:0b:54:3b:fc:24:15:71:44:
c9:aa:bc:b8:4d:1d:63:40:cb:a4:b9:99:06:e5:7a:
92:e6:45:4f:35:7f:5d:bc:14:89:34:a9:37:c3:c5:
2d:73:c6:c4:92:6f:5b:d3:cb:6d:db:70:0e:09:e2:
a4:31:5b:36:a6:8d:5d:1c:fc:4b:9c:be:6c:9c:b8:
35:b9:37:fb:e6:a7:78:fd:c5:5a:85:d4:3c:aa:91:
3c:51:35:bd:79:4a:5f:b5:5e:2f:87:c9:73:ed:9a:
4b:90:b4:54:32:4e:e5:d3:46:84:4e:35:4b:6e:db:
73:a9:46:e5:1f:20:d1:55:c4:c9:ce:d2:06:15:a7:
f3:68:55:50:68:5d:ad:3f:7f:aa:b1:f4:01:d4:c0:
01:73:0f:2f:3f:56:e9:c4:57:1e:84:35:70:4b:03:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F3:D8:F8:5C:66:49:C9:CB:50:4B:DE:13:E6:87:60:51:2E:16:4D
X509v3 Authority Key Identifier:
keyid:F2:6C:E0:F4:6F:BB:BE:2D:D3:81:B3:53:28:99:C3:1D:C4:0C:1A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mzg9G-7vi3TgbNTKJnDHcQMGkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/1-_PY-FxmScnLUEveE-aHYFEuFk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/8mzg9G-7vi3TgbNTKJnDHcQMGkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.233.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ce:b0:3e:e0:45:23:41:b0:b5:28:07:19:66:a7:a5:e9:5d:
dc:5b:94:4f:eb:d6:3c:f8:e9:c1:c7:c8:5d:7b:d2:7b:1a:78:
51:2a:55:15:6a:e7:66:da:96:d0:07:bc:0d:68:a2:1e:01:4e:
1e:2f:93:aa:78:d9:af:3b:e4:88:fb:72:27:6b:76:a4:b1:7c:
2c:49:b5:91:d4:19:86:e2:0e:d7:4c:32:17:83:8f:27:74:0e:
03:b0:68:60:5e:4f:7c:4c:4d:b8:4d:39:7a:be:71:65:c3:72:
c8:36:29:c9:1f:be:60:84:1e:19:f1:05:07:7f:94:4f:73:d9:
6a:2f:55:b1:62:67:87:b1:55:eb:ad:ba:cf:a4:bf:1e:03:4d:
ad:38:74:1f:ab:f9:a4:99:09:4a:e2:a2:c5:a0:ba:bc:bb:33:
1b:ae:ad:c3:a7:9a:e8:5b:4c:03:63:ab:9a:6b:7e:2c:d5:df:
6d:cb:89:57:3a:ad:ae:eb:bd:e7:32:90:3b:ad:61:d9:17:a6:
e2:24:54:a1:d9:8f:92:bd:c3:63:6d:54:d2:5a:de:41:01:c4:
3c:65:4d:08:14:39:46:93:0d:ae:a9:f4:53:2e:93:18:e8:94:
db:2a:dd:9b:0c:05:26:75:51:09:bf:83:20:c5:0b:5f:8b:dc:
1e:60:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:20:28 2025 by rpki-client