Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/8IrzZekkYTKoZhthQz-Ja8OIvRA.roa
File: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (raw, json)
Hash identifier: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=
Subject key identifier: F0:8A:F3:65:E9:24:61:32:A8:66:1B:61:43:3F:89:6B:C3:88:BD:10
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 01941F8C17AAA85B9EBB9169DFF2C4EFAA4D
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/8IrzZekkYTKoZhthQz-Ja8OIvRA.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12757
IP address blocks: 176.124.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:17:aa:a8:5b:9e:bb:91:69:df:f2:c4:ef:aa:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f08af365e9246132a8661b61433f896bc388bd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:bd:29:46:e3:1b:55:4a:c5:c5:eb:6e:fa:c7:
ad:e3:cf:00:b0:51:37:53:f4:02:34:8d:da:b6:15:
1f:e8:54:6e:ae:1c:9a:eb:37:27:b4:c2:e8:3b:63:
dd:74:ea:0d:d1:a9:ce:7f:eb:6b:21:16:19:79:74:
0e:0f:33:8e:f4:90:0f:15:a8:fe:b0:c8:9b:cc:0a:
ed:b7:43:f0:10:4c:a8:f0:52:f9:54:c2:9a:9c:9a:
1b:ac:a1:eb:d5:4d:9b:13:2a:11:b0:13:1f:27:dc:
c6:9a:7d:99:b5:65:24:45:b2:16:da:f7:2c:a4:63:
3b:99:7e:5b:91:0f:4f:20:0c:f8:68:03:1a:34:75:
20:04:3f:0d:78:18:24:1c:fd:ee:73:92:80:3c:0b:
30:ff:1d:ef:0f:fd:de:e1:65:a0:ac:45:e2:83:b7:
fe:dd:5a:93:67:9a:45:52:22:99:4c:b4:17:b4:de:
d5:8a:e1:14:ff:65:c7:5e:e0:a1:4f:5a:d5:a9:47:
d6:f5:66:20:e2:df:ae:31:90:5c:47:53:e1:13:bc:
22:89:44:f3:65:5e:e5:5d:4f:74:71:67:b3:21:a5:
0c:b3:94:1a:ea:d0:25:26:ec:cc:f3:03:aa:d3:5b:
13:64:4f:a0:1d:b4:90:2d:f8:fa:fe:be:cb:b2:b0:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8A:F3:65:E9:24:61:32:A8:66:1B:61:43:3F:89:6B:C3:88:BD:10
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/8IrzZekkYTKoZhthQz-Ja8OIvRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.247.0/24
Signature Algorithm: sha256WithRSAEncryption
56:52:cd:cb:12:30:35:18:b6:7c:3b:70:cf:95:96:65:36:f4:
3a:75:bb:e8:cc:dd:8a:2d:d3:48:8c:7b:a5:c5:94:98:70:2d:
e0:0e:6a:b0:c3:23:52:38:0f:44:b2:1b:49:91:72:7a:40:0e:
dd:59:41:83:11:46:e6:e9:ea:e4:f5:ad:8f:f1:29:e0:2d:05:
e5:0c:60:0e:4c:fd:14:b1:ff:c8:d4:c9:96:ca:55:b6:90:72:
2f:4d:ac:4d:b4:36:56:1f:47:36:69:88:a0:35:86:0e:75:0e:
dc:64:c4:c7:7e:a8:ef:c3:68:58:a5:ee:d0:19:74:29:22:8c:
ae:4b:26:90:f4:f7:36:df:66:c7:9c:ba:ec:2c:eb:3e:db:d3:
56:3a:f2:84:4f:57:ae:70:71:97:e5:ca:61:51:4e:14:90:ce:
a6:2f:cb:a7:a8:7e:df:f5:a5:9a:4a:df:fc:0c:0d:50:ba:0f:
3d:44:4d:8a:fa:f0:c0:78:0c:fc:a3:b5:5a:eb:cd:46:20:88:
66:b6:5d:0c:3d:cd:53:11:96:0c:eb:3a:6c:35:a8:c5:f9:b2:
7d:d7:eb:b3:42:a9:48:ba:26:32:e7:26:92:0a:31:be:cd:46:
cf:01:d9:0a:ec:17:ec:5d:bd:28:24:44:fa:1c:c9:b8:c6:6d:
51:36:60:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:42 2025 by rpki-client