Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/T9CXdTI7mEpW9KPaY91DBq8al6c.roa
File: T9CXdTI7mEpW9KPaY91DBq8al6c.roa (raw, json)
Hash identifier: hqtPAZi4X82K1wH+/I1BhwhMndFWy4JfPHc+WabHuEA=
Subject key identifier: 4F:D0:97:75:32:3B:98:4A:56:F4:A3:DA:63:DD:43:06:AF:1A:97:A7
Certificate issuer: /CN=96b897d64d9f3ddf6859bf623ac5161a5f19214c
Certificate serial: 0182208968B58AA74A7F1C54D912FAF7D0B5
Authority key identifier: 96:B8:97:D6:4D:9F:3D:DF:68:59:BF:62:3A:C5:16:1A:5F:19:21:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lriX1k2fPd9oWb9iOsUWGl8ZIUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/T9CXdTI7mEpW9KPaY91DBq8al6c.roa
Signing time: Thu 21 Jul 2022 11:34:12 +0000
ROA not before: Thu 21 Jul 2022 11:34:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 176.97.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:89:68:b5:8a:a7:4a:7f:1c:54:d9:12:fa:f7:d0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b897d64d9f3ddf6859bf623ac5161a5f19214c
Validity
Not Before: Jul 21 11:34:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fd09775323b984a56f4a3da63dd4306af1a97a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:0a:29:23:74:c5:2b:92:de:f5:fc:1c:b7:
9b:ae:09:82:75:55:e1:4b:8c:62:7b:55:98:e1:ae:
01:1c:d8:16:39:b0:6d:49:b2:c8:f7:ce:43:76:48:
a1:8c:0a:49:f0:11:f2:79:85:0a:e6:44:6f:bd:93:
e4:e5:a3:59:77:40:e0:bb:24:58:40:a4:9f:be:9e:
b6:6b:4a:33:01:32:99:c5:c5:bb:cd:5a:97:f8:10:
eb:87:ae:45:e2:81:f2:bb:7d:e6:06:33:49:da:3c:
1d:f9:6d:43:15:67:89:3f:bc:ea:ad:d3:5e:dd:3f:
92:e6:a1:ea:f5:53:e4:21:5d:e3:6d:84:10:14:6f:
30:69:72:67:64:53:be:00:69:e3:f0:ab:1b:53:af:
f9:60:ae:62:f6:8a:f0:f6:69:ca:6b:8b:bb:63:97:
01:be:eb:cd:ec:8f:32:9b:ac:75:b7:39:a7:8e:8c:
1f:d5:90:1c:52:33:d6:08:3c:8e:41:85:8f:a8:45:
b7:6e:29:34:0f:2d:d2:30:ac:88:d6:7d:c4:32:17:
34:56:c1:76:20:ae:83:20:54:5c:a8:18:0b:ef:74:
9a:e5:f0:77:4b:b9:29:06:fe:c8:b4:f3:69:5b:c1:
75:67:fb:07:94:82:08:5e:66:8f:4c:26:76:0d:c5:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D0:97:75:32:3B:98:4A:56:F4:A3:DA:63:DD:43:06:AF:1A:97:A7
X509v3 Authority Key Identifier:
keyid:96:B8:97:D6:4D:9F:3D:DF:68:59:BF:62:3A:C5:16:1A:5F:19:21:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lriX1k2fPd9oWb9iOsUWGl8ZIUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/T9CXdTI7mEpW9KPaY91DBq8al6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/lriX1k2fPd9oWb9iOsUWGl8ZIUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.217.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ae:bf:08:a6:b9:f4:e7:56:ae:30:13:f9:f5:2f:00:87:b4:
68:94:b8:a8:67:75:c6:c8:27:7e:3b:f4:eb:31:ad:3e:50:9a:
71:86:64:65:f5:bc:6b:6d:b9:7f:09:fd:6e:37:49:88:3b:ec:
3b:60:b2:6f:e1:92:2e:b0:47:46:35:8b:df:6b:c9:4c:93:5f:
db:4a:b9:37:fe:47:f5:9f:0d:6e:e4:ac:5d:57:15:c1:5f:f0:
10:48:24:94:08:7a:6c:65:b2:4e:43:4a:5d:d8:68:9c:15:63:
42:81:61:23:4c:d4:be:7f:f6:8f:46:a9:8f:db:35:8b:86:73:
ce:09:98:ba:2b:6e:35:42:39:4f:40:ff:43:e3:9f:fc:72:c9:
38:09:e9:97:35:48:29:d7:4b:ed:98:86:91:59:87:1d:c6:ee:
cf:79:f3:60:b6:d0:ab:fb:2a:9f:3a:98:36:bf:ec:3a:31:90:
ef:97:6c:87:be:2b:69:26:90:ae:95:2d:43:d9:90:9e:6d:98:
2d:3a:96:7a:9a:86:a4:50:af:97:b2:5c:de:9d:b7:f0:bb:b4:
c3:3c:25:44:44:49:df:1a:3b:1b:91:bc:6e:12:dd:7f:c2:ef:
37:bc:11:1f:18:f4:cf:78:ab:f2:3b:09:5c:6c:b6:f3:fb:26:
22:6a:6f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:40 2025 by rpki-client