Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/Byz6Wm7s02kt-qbcRg48lYFoaPs.roa
File: Byz6Wm7s02kt-qbcRg48lYFoaPs.roa (raw, json)
Hash identifier: qp6bZj4DT10+Vk4KOv88lsaekKFO88UDVrw+KBHz2l8=
Subject key identifier: 07:2C:FA:5A:6E:EC:D3:69:2D:FA:A6:DC:46:0E:3C:95:81:68:68:FB
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 019422FB50EFAA07CC1CF191E69FEA995D6D
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/Byz6Wm7s02kt-qbcRg48lYFoaPs.roa
Signing time: Wed 01 Jan 2025 17:48:03 +0000
ROA not before: Wed 01 Jan 2025 17:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 1.179.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:50:ef:aa:07:cc:1c:f1:91:e6:9f:ea:99:5d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Jan 1 17:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=072cfa5a6eecd3692dfaa6dc460e3c95816868fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:35:45:e3:69:26:92:6c:c9:4d:60:12:d8:
86:79:14:b8:fc:8b:b6:f1:64:2a:5a:91:70:e2:48:
3c:60:5c:f0:50:9d:10:56:c3:e7:31:0b:1f:e0:46:
31:3b:e5:67:de:cf:c6:fd:8c:af:12:4b:aa:12:04:
71:61:26:eb:b0:a6:0e:47:63:12:2c:06:08:05:92:
e2:10:1e:b0:72:1a:69:ed:9d:d7:c3:13:06:80:84:
6f:b0:5f:d1:50:a0:ef:1e:94:8d:23:cd:4f:7d:20:
ee:9e:c1:ad:0e:33:ef:ef:af:a2:58:59:78:9c:06:
04:8b:f9:40:aa:a8:21:a4:eb:29:b1:0f:97:9f:0a:
8d:6d:cb:05:c4:9b:ef:cb:3e:a1:7a:3c:a8:33:4f:
96:2c:d3:8c:d1:e7:4f:56:22:1f:15:41:db:51:68:
c0:52:52:2f:5b:62:4e:66:13:aa:c4:c7:37:c6:92:
92:7a:f0:2a:47:bb:cd:a9:e3:31:a0:47:56:79:e1:
fa:0f:cf:66:62:26:1f:d1:d3:1e:43:f9:f6:db:36:
23:9a:b7:b2:d4:74:c7:9e:58:86:59:aa:97:ec:e1:
71:0a:71:06:d7:51:32:6a:09:f7:26:4d:70:49:75:
b8:61:a7:15:50:72:12:5b:75:18:bd:29:4b:83:a3:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2C:FA:5A:6E:EC:D3:69:2D:FA:A6:DC:46:0E:3C:95:81:68:68:FB
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/Byz6Wm7s02kt-qbcRg48lYFoaPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.179.112.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:a4:0b:5c:0c:38:10:ad:eb:04:bc:82:37:23:f0:75:6f:cd:
d1:9f:9c:16:76:b1:8c:88:41:04:11:62:b3:96:14:a9:51:32:
a5:03:57:ab:1f:c2:c5:3f:59:c2:70:ae:4d:9c:74:8e:f2:a7:
05:2c:0d:b7:fc:5d:d2:4b:66:92:36:bd:ac:d3:9c:9d:8d:a4:
b3:ca:6d:d3:8a:86:f3:b0:57:94:25:d5:88:c1:7d:9a:f7:99:
88:81:3e:c6:96:5e:8e:c8:f7:f4:ef:dd:0f:71:69:94:a8:bd:
65:ea:1f:24:dd:4f:06:3c:68:73:05:ca:3b:52:be:fb:dd:96:
26:53:f6:3c:7b:94:dd:7d:dc:c7:86:89:b1:f7:cf:18:15:fd:
17:6f:91:b0:69:bc:10:5b:66:46:e7:b1:41:a7:82:c3:fd:93:
ac:96:57:8b:83:d5:c1:c4:a5:c3:e1:dc:2e:90:95:3f:da:83:
73:ec:59:cb:d7:9e:a5:f1:24:92:48:62:df:18:8c:fc:cc:27:
a7:52:a6:3f:1f:65:48:78:db:cc:0b:2d:0c:a2:95:a9:6a:22:
e2:73:07:fd:04:7c:79:67:cc:fb:eb:e7:f1:1e:0c:d3:35:54:
a2:c3:72:ba:16:1f:35:2e:58:65:e7:4c:7f:12:0c:2a:bb:ce:
6b:80:4c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:36 2025 by rpki-client