Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/Pp2sXfXdh7090xM2gsv5xfIILuo.roa
File: Pp2sXfXdh7090xM2gsv5xfIILuo.roa (raw, json)
Hash identifier: PO9+4s1QAjRLPZCvvZsG2untZt+V9lttJs5Fmctz5iY=
Subject key identifier: 3E:9D:AC:5D:F5:DD:87:BD:3D:D3:13:36:82:CB:F9:C5:F2:08:2E:EA
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 055ABC16
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/Pp2sXfXdh7090xM2gsv5xfIILuo.roa
Signing time: Sat 01 Jan 2022 03:02:22 +0000
ROA not before: Sat 01 Jan 2022 03:02:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17941
IP address blocks: 176.121.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89832470 (0x55abc16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 1 03:02:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e9dac5df5dd87bd3dd3133682cbf9c5f2082eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:48:1a:9f:08:16:06:7c:f0:41:91:22:47:
f7:6a:a4:f1:89:97:22:dd:18:12:aa:61:df:5e:36:
fb:24:d7:eb:c5:01:c7:7c:2a:d3:a0:e9:c9:b5:7e:
b6:d2:90:b1:d4:66:f6:eb:a9:2b:66:e0:b7:6f:b5:
25:4f:f8:f0:c5:3d:d7:e8:42:0a:32:71:77:dd:55:
65:56:3c:5c:07:c5:8a:1b:48:bd:8f:18:86:61:fc:
a2:c4:44:57:f5:e2:d2:63:df:7b:b3:78:44:bf:82:
2d:d8:79:08:fb:72:a6:b6:5f:80:28:2f:ba:b2:31:
40:c2:60:69:aa:62:f6:79:88:53:ac:b0:c1:af:c8:
17:bb:9c:f4:b9:bb:ef:86:33:98:ca:5e:78:2f:3c:
c0:30:57:54:6d:5e:cb:82:91:4d:cf:8c:62:d9:f9:
70:79:5f:4a:00:e1:9d:2d:3f:7f:9f:08:74:e0:93:
d7:45:43:59:fc:83:dd:5a:4a:8b:0a:9e:9e:42:73:
05:4c:65:4c:43:95:6e:ee:d3:ee:7d:90:99:d9:d0:
fc:f9:3d:f6:e0:0a:77:f4:09:c1:9f:3c:2a:76:95:
f6:32:b2:8b:b8:95:23:bb:94:c9:6c:e6:09:dd:45:
65:1f:ee:71:72:9a:cd:32:ad:72:64:20:5f:57:79:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9D:AC:5D:F5:DD:87:BD:3D:D3:13:36:82:CB:F9:C5:F2:08:2E:EA
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/Pp2sXfXdh7090xM2gsv5xfIILuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.93.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ed:8f:a3:cf:c3:6a:92:21:d0:95:a8:b3:33:b5:0a:bd:ac:
e2:b2:e1:5a:c6:b6:92:1a:f4:5f:23:39:30:7c:3d:94:c4:87:
d1:72:b9:33:74:e0:1b:31:58:c9:1a:f8:c7:f9:83:f5:b7:e7:
1f:56:f5:68:6e:72:80:6b:40:72:9e:f2:31:87:59:ea:3d:4d:
50:f0:ab:f5:11:cc:22:11:04:09:59:a3:9d:50:72:3a:a7:d3:
e9:a5:4b:8f:f7:26:06:a8:52:e8:b8:58:fd:11:07:f1:1f:d7:
72:4a:7c:72:d3:e6:7d:be:43:26:3a:50:15:aa:27:ba:73:54:
5b:3f:88:67:a6:a4:fd:7c:bb:99:79:56:6f:66:06:b1:e3:a2:
4d:1e:75:7c:0d:04:5c:66:5b:aa:d4:5c:69:53:ca:7d:0f:e1:
c9:7b:ce:3c:f1:d4:e3:28:47:1f:86:5b:c7:4f:42:7b:b3:02:
9b:8b:45:e3:f9:43:1b:57:42:37:00:18:77:fb:35:a1:99:c8:
e5:ff:e1:4c:50:2f:bf:11:80:b8:22:a2:e2:6e:7f:4f:3c:a9:
7d:09:6c:8f:53:10:37:9b:1f:29:53:60:9c:ff:e4:45:6e:59:
0a:0d:ca:6a:1d:18:24:7a:e7:2c:99:a1:ee:d4:15:78:f9:d8:
44:09:1e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:14 2025 by rpki-client