Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/oMxTQE9Pca7CL7KBzatwRWIwZW8.roa
File: oMxTQE9Pca7CL7KBzatwRWIwZW8.roa (raw, json)
Hash identifier: r/SNjIXoVS7lK7RieX5ArHOiNPY3YjqnOY0olFH7Ly0=
Subject key identifier: A0:CC:53:40:4F:4F:71:AE:C2:2F:B2:81:CD:AB:70:45:62:30:65:6F
Certificate issuer: /CN=f26ce0f46fbbbe2dd381b3532899c31dc40c1a42
Certificate serial: 02C73F94
Authority key identifier: F2:6C:E0:F4:6F:BB:BE:2D:D3:81:B3:53:28:99:C3:1D:C4:0C:1A:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mzg9G-7vi3TgbNTKJnDHcQMGkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/oMxTQE9Pca7CL7KBzatwRWIwZW8.roa
Signing time: Sat 01 Jan 2022 11:00:48 +0000
ROA not before: Sat 01 Jan 2022 11:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56851
IP address blocks: 176.105.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46612372 (0x2c73f94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26ce0f46fbbbe2dd381b3532899c31dc40c1a42
Validity
Not Before: Jan 1 11:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0cc53404f4f71aec22fb281cdab70456230656f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:88:74:db:91:8b:50:66:e0:3b:b6:d2:8d:
20:09:c8:41:a0:55:3a:5b:2a:d3:14:d7:5e:bb:fd:
42:b5:65:9d:da:8f:e3:93:18:fa:a3:46:b7:54:d6:
54:de:29:06:65:27:42:ea:87:32:81:aa:f8:83:60:
f2:ef:a5:72:17:3d:f2:5b:f4:b9:14:a1:33:a8:62:
60:a7:6e:77:27:c2:8f:01:63:7e:da:1a:af:38:88:
ec:45:31:af:10:47:72:ac:76:5e:06:db:8e:8d:76:
ac:9e:12:5a:0d:ec:14:17:3a:e0:c6:d0:a2:ab:3b:
82:23:f3:ed:b9:29:34:01:b1:17:06:e2:a5:19:3d:
0d:ee:fd:29:21:29:aa:ea:ef:3a:ed:20:89:d8:1f:
01:ea:58:c5:e8:0a:61:7a:8c:1f:c2:55:aa:7b:a7:
4d:c9:44:39:77:d8:8b:62:cb:58:58:87:b8:d0:66:
ec:61:4b:d8:95:1c:74:79:7c:66:b5:16:c4:16:67:
9c:a8:41:35:8b:bb:5b:da:ed:23:ed:9f:04:1d:79:
de:dc:ca:89:fb:fa:c5:b3:34:0f:90:34:0d:37:b4:
2a:1f:22:1d:aa:3b:5e:cb:b4:47:c0:48:58:3b:b5:
66:96:46:12:c0:8d:b0:9b:43:3c:c4:f1:6e:72:7c:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CC:53:40:4F:4F:71:AE:C2:2F:B2:81:CD:AB:70:45:62:30:65:6F
X509v3 Authority Key Identifier:
keyid:F2:6C:E0:F4:6F:BB:BE:2D:D3:81:B3:53:28:99:C3:1D:C4:0C:1A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mzg9G-7vi3TgbNTKJnDHcQMGkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/oMxTQE9Pca7CL7KBzatwRWIwZW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/8mzg9G-7vi3TgbNTKJnDHcQMGkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.233.0/24
Signature Algorithm: sha256WithRSAEncryption
14:30:19:d4:e0:50:31:76:44:af:d1:70:70:b0:e7:98:d4:1c:
ae:cd:de:4b:e5:08:85:27:3a:4a:3d:07:d5:34:a4:cc:09:f0:
1a:84:48:88:93:48:de:53:d0:76:9c:e2:64:c9:1b:06:2c:34:
c4:d6:df:9e:a7:0a:e5:08:9e:95:b9:12:1a:d6:ce:a7:6d:66:
93:22:3a:eb:0f:eb:e8:52:4b:fb:fc:06:b6:28:5f:e5:29:3a:
9e:8e:0a:a4:4a:ec:f3:9d:e1:1e:6f:71:e9:54:f3:91:1a:ff:
ec:92:95:c8:4e:d5:6f:b8:85:46:ec:29:ef:d0:39:68:d4:28:
28:2d:02:69:47:51:4d:5c:ff:4a:0a:65:0f:5c:ee:db:59:db:
27:e2:f8:bd:eb:13:02:c8:38:f3:ae:8d:2f:16:6f:e7:90:f8:
de:01:8f:3b:f1:0c:74:1c:50:d6:de:e0:cf:21:9c:48:80:ac:
c9:83:96:18:cd:dc:d2:ea:80:6c:91:fe:cd:5f:b5:19:f3:8f:
66:ff:4f:34:00:bf:c2:8f:9a:e1:d4:ac:0e:c4:ed:c1:18:15:
2d:12:f9:ca:fc:02:07:54:ee:ae:6b:68:f9:80:fe:a5:5f:d2:
28:fe:b2:80:f7:92:5a:e5:27:6b:8e:11:67:70:08:02:df:59:
f1:f6:98:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:23 2025 by rpki-client