Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ofz4NWSwPj_I2y8pJXAO7e2zEDg.roa
File: ofz4NWSwPj_I2y8pJXAO7e2zEDg.roa (raw, json)
Hash identifier: aBTVhrtw71Ljm7Ye84K6VYzzY6O2G8abDbAj4vuI+h0=
Subject key identifier: A1:FC:F8:35:64:B0:3E:3F:C8:DB:2F:29:25:70:0E:ED:ED:B3:10:38
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D7279B60BCBBB5C8B97DEF89897AAD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ofz4NWSwPj_I2y8pJXAO7e2zEDg.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209592
IP address blocks: 176.118.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:27:9b:60:bc:bb:b5:c8:b9:7d:ef:89:89:7a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1fcf83564b03e3fc8db2f2925700eededb31038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:00:92:7d:95:8c:3f:6a:1f:7e:69:7d:6b:
72:24:78:dd:8c:be:7e:f4:6b:00:5b:69:66:6f:fa:
a0:3e:28:5a:f8:c8:bb:1f:36:ee:75:07:0a:80:c9:
da:c6:2a:52:c1:ad:a3:5e:83:a9:00:ea:c0:6a:aa:
38:cb:13:92:29:dc:19:ba:bb:1c:7a:2d:58:30:89:
0b:9d:2a:60:45:33:4f:bb:ef:85:a6:ec:91:3a:4b:
3b:0d:68:5d:45:91:bd:ce:ad:21:49:35:59:48:8f:
f7:42:76:8c:9c:f9:af:f4:ef:17:ca:d1:5a:80:dd:
f9:c9:46:5a:0b:ea:82:ea:8c:5d:e5:53:ba:da:c8:
81:4d:0d:10:c9:8b:a9:c8:59:e9:23:4c:58:cc:d3:
1a:de:79:c8:76:8f:4d:eb:65:fb:3a:c4:89:33:84:
2d:95:29:0c:1c:e1:f5:07:b0:01:54:d1:b9:7c:1d:
81:52:8e:c8:22:2a:14:c4:b5:6d:2e:ee:06:21:2d:
a3:54:8d:95:d4:2d:6c:4d:89:41:d2:d6:d1:88:a2:
c0:bd:ce:d5:db:7a:e9:ad:2d:30:d8:d9:15:24:8b:
6e:7a:3a:3e:f6:75:88:e1:6f:5e:74:db:61:e2:ac:
a0:6e:82:5b:22:3b:16:f4:57:37:74:16:4d:94:0b:
b0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FC:F8:35:64:B0:3E:3F:C8:DB:2F:29:25:70:0E:ED:ED:B3:10:38
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ofz4NWSwPj_I2y8pJXAO7e2zEDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.197.0/24
Signature Algorithm: sha256WithRSAEncryption
20:74:e3:f1:9e:d0:00:dd:49:62:e0:19:80:39:77:55:d7:ec:
20:06:6d:60:e6:a6:39:40:d2:c4:7c:63:a5:47:97:3a:2a:2c:
6e:d7:81:80:65:fe:69:49:94:67:a8:f4:b2:24:05:ff:28:27:
8d:1f:c0:b2:55:e6:1b:55:57:5b:74:6f:d7:9e:3c:36:d1:36:
ef:b9:eb:ac:db:54:df:de:05:7d:d4:52:bf:7f:7f:ae:c8:e0:
29:d0:ea:87:66:61:43:3f:b9:7b:f7:27:2c:df:fa:25:a8:3a:
09:bd:8d:ca:6d:3e:f6:5a:2c:84:a5:57:97:bf:6b:4a:a6:ae:
4a:71:be:d9:95:80:af:6f:18:72:2e:c1:c8:bf:25:94:8e:ce:
0a:de:67:e2:a4:73:60:06:c2:2d:ca:44:3a:f6:bc:94:0b:6f:
44:c6:60:15:9e:9d:11:6c:c2:1d:d6:c1:82:e1:74:f1:2a:10:
6b:e7:37:ac:d9:c0:fc:ba:98:28:39:da:fc:44:c8:11:a8:cb:
c3:06:09:c2:05:80:30:4b:af:fb:6b:eb:c9:d3:5d:5f:64:ab:
a6:6c:8c:f4:dd:d6:98:47:2b:50:e0:94:75:5a:c2:52:db:70:
b5:92:d2:94:4b:2d:1a:76:d5:1f:65:8c:d3:48:51:64:90:52:
1d:8b:65:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:14 2025 by rpki-client