Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/ys9tkINh9OH6_Tn4SwpKbQKk59U.roa
File: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (raw, json)
Hash identifier: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=
Subject key identifier: CA:CF:6D:90:83:61:F4:E1:FA:FD:39:F8:4B:0A:4A:6D:02:A4:E7:D5
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 019425219080D43412F15D2E84D338572A70
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/ys9tkINh9OH6_Tn4SwpKbQKk59U.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20712
IP address blocks: 176.110.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:90:80:d4:34:12:f1:5d:2e:84:d3:38:57:2a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cacf6d908361f4e1fafd39f84b0a4a6d02a4e7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:0e:66:2d:1d:cb:1b:f3:8e:82:f6:0f:a6:
91:31:59:c8:48:4f:1d:7d:99:db:ba:80:6e:28:5c:
62:ed:18:49:84:77:f6:41:6a:83:05:4b:6b:29:f2:
9b:45:20:de:3a:85:82:79:70:9a:ad:13:c9:30:29:
0f:15:76:00:9a:d2:72:4e:49:c1:8e:ed:f6:f0:cb:
3a:56:c8:de:d6:1f:f4:cc:da:8a:58:d5:3d:88:a0:
1f:06:d0:f3:ea:84:50:7e:b1:03:64:e0:31:71:20:
27:4d:1f:1b:5c:8e:b2:7f:0b:d1:65:e3:4a:7b:f6:
d4:d9:0a:ad:ff:de:5d:d0:ae:3c:85:20:19:dd:26:
28:5f:00:d2:27:6d:9b:69:ec:cd:70:b9:a0:c0:9c:
82:23:8d:41:d3:9a:be:ed:b0:08:b3:86:56:45:a7:
58:57:b5:24:e6:95:94:25:a7:ec:dc:47:01:bb:48:
85:b5:ac:2b:81:06:81:9d:c9:65:e2:5e:ab:9e:fd:
1d:ea:83:21:0c:f5:d5:a6:c9:0b:e7:70:05:0e:df:
c1:89:b4:95:7e:b3:af:d2:ad:8c:5d:db:30:08:f2:
ef:72:59:3f:04:4d:3d:f1:53:89:1f:79:09:53:87:
c0:6c:be:7b:f6:1c:c9:3a:5b:9e:cd:ec:7c:2d:b9:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CF:6D:90:83:61:F4:E1:FA:FD:39:F8:4B:0A:4A:6D:02:A4:E7:D5
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/ys9tkINh9OH6_Tn4SwpKbQKk59U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.118.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a5:fe:49:c4:f0:29:61:23:53:59:51:29:65:18:d6:5e:c3:
b4:ab:77:41:12:17:cf:ef:cb:52:23:2d:0d:1e:37:80:0b:4f:
25:04:8c:b0:68:74:30:4f:39:1f:5a:f7:31:c5:6b:30:83:91:
e5:95:58:30:5b:83:e8:dd:8c:88:f3:7c:95:f3:73:b0:dc:8f:
ea:95:cb:c9:29:cb:25:2d:49:5b:c8:a6:80:a7:5b:6b:6f:c8:
fa:4e:33:c8:d3:1c:3a:ca:5e:52:f5:e9:52:bb:e5:26:37:0e:
90:da:c9:79:d4:6d:db:f1:76:20:72:db:d1:f5:9f:79:9a:86:
a6:3b:97:ed:23:f6:9f:0b:85:3a:88:2a:53:67:bf:5f:ac:18:
63:eb:2b:7c:6f:e3:bc:c0:9b:dc:01:b7:49:08:db:ee:60:7a:
a9:85:26:0c:45:cd:92:c3:05:21:03:6f:13:bb:8a:6f:47:4e:
d4:20:c9:4e:fe:39:a7:e1:ae:fe:a5:89:d3:65:3d:d4:8c:88:
c2:7d:84:a2:67:1b:e9:24:71:8e:ff:cb:80:f1:9b:52:61:2b:
11:33:bb:15:be:85:4f:d6:62:e2:18:60:54:ba:d4:00:e2:66:
e5:a6:5f:2c:a0:db:8b:2e:1d:1d:c7:e2:99:cf:d2:1c:e7:fa:
9d:61:e4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:14:40 2025 by rpki-client