Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/gXKAmV_Cm93EQ03TWF25G0QCK6Y.roa
File: gXKAmV_Cm93EQ03TWF25G0QCK6Y.roa (raw, json)
Hash identifier: fQ2SrwapEKlQ7rgN9V0I2bJGTFweLcR8p5tMKIoqhrE=
Subject key identifier: 81:72:80:99:5F:C2:9B:DD:C4:43:4D:D3:58:5D:B9:1B:44:02:2B:A6
Certificate issuer: /CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Certificate serial: 01942444CEF25F41AF7C1FA00824A19F9E89
Authority key identifier: 6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/gXKAmV_Cm93EQ03TWF25G0QCK6Y.roa
Signing time: Wed 01 Jan 2025 23:47:56 +0000
ROA not before: Wed 01 Jan 2025 23:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198580
IP address blocks: 176.53.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ce:f2:5f:41:af:7c:1f:a0:08:24:a1:9f:9e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Validity
Not Before: Jan 1 23:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=817280995fc29bddc4434dd3585db91b44022ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:f7:8a:96:53:c8:23:42:63:c7:ea:c4:64:
33:c4:05:1c:bc:e5:f6:4c:dd:63:07:39:ea:88:78:
4e:52:8d:bc:2a:09:bd:cc:59:c7:5f:9f:6c:60:8b:
8d:ad:56:72:86:49:6a:de:5b:84:c0:58:fb:5b:13:
27:2d:db:a0:6d:e4:5c:36:9d:cf:e9:0e:e4:5b:24:
f8:f0:46:bc:16:15:f5:71:43:e4:64:38:0c:3f:77:
e0:06:59:8a:d7:bb:8e:51:7e:06:1e:74:c1:ca:27:
83:35:46:1a:21:e9:05:0c:eb:d4:b1:fe:d7:a4:e6:
e7:da:c5:d1:c8:ba:e4:7f:78:b7:4d:67:bf:6a:d8:
9c:cd:b0:eb:29:5c:0d:a8:a6:47:0d:60:78:11:a1:
3b:f8:2a:2c:19:ea:a7:41:43:94:ff:28:31:5c:7d:
05:0f:de:8c:e2:95:73:35:77:27:f9:bf:1c:23:d6:
65:d1:31:55:0a:26:94:f2:c7:16:36:08:fc:4c:58:
28:32:c4:cc:37:e9:99:0b:cf:f6:49:62:ba:9b:4b:
59:cd:a8:8c:e9:e4:68:8d:8d:b7:01:e0:e9:1a:6e:
68:4f:b1:07:c3:8c:06:da:60:dc:22:7e:c4:36:bd:
1d:4e:1f:9c:6b:7f:45:b0:c5:8f:08:0a:56:91:34:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:72:80:99:5F:C2:9B:DD:C4:43:4D:D3:58:5D:B9:1B:44:02:2B:A6
X509v3 Authority Key Identifier:
keyid:6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/gXKAmV_Cm93EQ03TWF25G0QCK6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.193.0/24
Signature Algorithm: sha256WithRSAEncryption
04:73:33:ab:54:b7:0d:10:09:40:e5:f5:3a:da:4f:a4:46:75:
9e:16:02:16:5c:70:34:bc:10:64:59:82:ff:55:1e:e4:4f:a9:
6f:a1:c6:8d:7f:b1:70:ad:49:a5:2b:3c:94:91:34:54:eb:7e:
e3:3f:b9:d0:66:ea:b1:f7:be:00:e9:b4:92:a8:f8:9d:6d:01:
11:41:2b:9f:14:9a:48:ac:06:a6:8c:e4:d8:0b:d3:18:dc:a6:
e9:09:c8:02:c8:cf:4a:a7:12:25:1c:e2:8a:5d:f0:a1:2b:2e:
96:f0:75:39:b8:e9:96:21:d3:c6:be:f2:21:0e:67:5d:9d:b6:
a3:e9:0f:08:3a:cf:85:a0:15:66:cd:d8:7e:64:db:40:fe:c1:
f8:78:37:7a:75:46:7f:ba:32:05:dc:15:15:d1:f7:2d:02:4e:
9b:78:38:8e:12:e4:ca:d0:e1:be:df:25:33:3e:9d:9e:4d:86:
2b:b8:f7:49:2f:6d:f8:45:34:9c:30:9c:82:0c:20:42:42:7a:
0d:d3:c6:d6:e7:0d:e6:05:98:cf:7c:52:81:be:bb:b1:25:a1:
ea:f1:0e:01:07:ce:04:27:f0:1d:4d:d4:1e:9e:88:94:03:19:
1c:b2:53:aa:fb:f8:2d:a9:c9:78:1f:e0:fc:46:74:53:87:81:
46:0c:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:43 2025 by rpki-client