Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/9hr0W1QFq7fLKHvI-JN46pvrd6s.roa
File: 9hr0W1QFq7fLKHvI-JN46pvrd6s.roa (raw, json)
Hash identifier: llxkB55Kg0/QiiLDZOQyY1c5/y2cbt1vYnid4rgRNeA=
Subject key identifier: F6:1A:F4:5B:54:05:AB:B7:CB:28:7B:C8:F8:93:78:EA:9B:EB:77:AB
Certificate issuer: /CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Certificate serial: 018571BA0DB2FFA49CEF6AF6413A354A017B
Authority key identifier: 9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/9hr0W1QFq7fLKHvI-JN46pvrd6s.roa
Signing time: Mon 02 Jan 2023 09:04:56 +0000
ROA not before: Mon 02 Jan 2023 09:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 176.118.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:0d:b2:ff:a4:9c:ef:6a:f6:41:3a:35:4a:01:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Validity
Not Before: Jan 2 09:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f61af45b5405abb7cb287bc8f89378ea9beb77ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:4e:b1:b9:ac:8f:b3:3e:99:41:33:7c:0c:
28:26:27:2c:34:d3:9a:12:78:b8:31:cf:28:56:23:
b2:6f:b4:af:f3:29:b1:21:3b:a7:7d:6f:d8:e0:f5:
1c:37:c0:15:17:ff:76:e3:52:82:59:4e:09:88:52:
2f:88:6a:2b:68:d6:1e:fc:30:0a:5a:38:f8:c2:7e:
87:01:48:f5:fa:a4:c4:98:cf:8d:40:89:42:b3:62:
de:4f:70:da:5a:1d:29:ac:44:b9:75:96:fe:df:88:
04:cb:80:fb:fe:60:fc:31:4e:3a:a4:b0:95:a1:54:
38:b9:1a:8e:9a:34:11:41:26:18:4f:11:f8:94:9e:
08:b0:09:05:a4:ba:30:cf:e2:2a:fa:1e:16:95:ea:
f3:bb:f9:66:5b:4e:a3:f0:90:26:55:58:ce:9a:d9:
70:49:b6:b9:92:e1:3c:5a:34:5a:cd:b4:e6:41:db:
f0:69:a9:16:07:33:82:ff:2d:d3:6b:3d:52:98:79:
67:a4:50:4f:b2:f1:1a:d5:00:a1:0c:27:19:d7:58:
20:12:26:12:bf:24:ae:9e:1a:e1:c0:84:3f:1e:e4:
95:32:27:dc:8b:0b:df:18:4e:4a:7b:6f:be:33:4c:
49:1f:0c:e9:af:01:a4:ea:34:9b:69:de:25:19:89:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1A:F4:5B:54:05:AB:B7:CB:28:7B:C8:F8:93:78:EA:9B:EB:77:AB
X509v3 Authority Key Identifier:
keyid:9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/9hr0W1QFq7fLKHvI-JN46pvrd6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.161.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a8:ad:de:84:9b:91:81:0f:b9:b8:8c:8f:46:e6:50:9b:7c:
2c:c3:73:c6:39:df:59:c3:b8:fb:c8:04:fd:4c:e0:c6:26:6c:
e8:6b:38:d4:f2:c9:14:cc:78:f3:3a:16:66:25:3c:76:16:cd:
13:91:e2:f9:7f:1e:30:67:8b:ab:f9:72:19:3a:f2:85:92:0e:
99:b5:5d:49:d8:dc:e6:f4:84:14:b3:d3:87:f8:96:55:d1:90:
19:48:8d:86:cd:88:d5:c3:eb:71:c7:0c:24:0f:ef:a1:b4:44:
48:e2:91:8f:63:b2:64:7f:2c:6a:05:f2:23:bf:2a:48:f5:31:
60:fe:65:b4:bd:d1:cf:b2:37:a3:14:8b:00:bd:e8:23:11:86:
95:5d:86:f4:39:d8:79:a4:c9:38:d5:32:6b:52:c6:b6:df:d3:
a6:2d:82:ff:7a:90:15:9f:b6:53:31:5e:10:79:2a:b6:73:df:
9d:84:83:cb:d1:df:5e:b6:56:1c:f8:0c:84:71:51:16:03:6e:
dc:15:f8:4e:f6:55:60:3a:ef:b2:21:a5:da:a9:3f:f6:94:a1:
dd:df:ef:38:d1:0d:e8:5a:0f:1c:a2:5f:7c:45:93:72:f6:c7:
34:a8:87:22:ab:e6:80:c8:79:cd:cd:2f:4a:4f:5d:66:2a:7a:
38:6b:52:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxug2y/6Sc72r2QTo1SgF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYWE5ZjE0Zjk3ZDRkYWQ4YzAwNGMyNTNhNWUxY2U3Yzdk
ZDdjNGIwHhcNMjMwMTAyMDkwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjFhZjQ1YjU0MDVhYmI3Y2IyODdiYzhmODkzNzhlYTliZWI3N2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolFOsbmsj7M+mUEzfAwoJicsNNOa
Eni4Mc8oViOyb7Sv8ymxITunfW/Y4PUcN8AVF/9241KCWU4JiFIviGoraNYe/DAK
Wjj4wn6HAUj1+qTEmM+NQIlCs2LeT3DaWh0prES5dZb+34gEy4D7/mD8MU46pLCV
oVQ4uRqOmjQRQSYYTxH4lJ4IsAkFpLowz+Iq+h4Wlerzu/lmW06j8JAmVVjOmtlw
Sba5kuE8WjRazbTmQdvwaakWBzOC/y3Taz1SmHlnpFBPsvEa1QChDCcZ11ggEiYS
vySunhrhwIQ/HuSVMifciwvfGE5Ke2++M0xJHwzprwGk6jSbad4lGYnAMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPYa9FtUBau3yyh7yPiTeOqb63erMB8GA1UdIwQY
MBaAFJ2qnxT5fU2tjABMJTpeHOfH3XxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFxZkZQbDlUYTJNQUV3bE9sNGM1OGZkZkVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kZmQ2MDUtMTBkYS00NmEyLTk2Nzct
NDE0MDEwMDhhNzBjLzEvOWhyMFcxUUZxN2ZMS0h2SS1KTjQ2cHZyZDZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kZmQ2MDUtMTBkYS00NmEyLTk2NzctNDE0MDEwMDhhNzBj
LzEvbmFxZkZQbDlUYTJNQUV3bE9sNGM1OGZkZkVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHahMA0G
CSqGSIb3DQEBCwUAA4IBAQCIqK3ehJuRgQ+5uIyPRuZQm3wsw3PGOd9Zw7j7yAT9
TODGJmzoazjU8skUzHjzOhZmJTx2Fs0TkeL5fx4wZ4ur+XIZOvKFkg6ZtV1J2Nzm
9IQUs9OH+JZV0ZAZSI2GzYjVw+txxwwkD++htERI4pGPY7JkfyxqBfIjvypI9TFg
/mW0vdHPsjejFIsAvegjEYaVXYb0Odh5pMk41TJrUsa239OmLYL/epAVn7ZTMV4Q
eSq2c9+dhIPL0d9etlYc+AyEcVEWA27cFfhO9lVgOu+yIaXaqT/2lKHd3+840Q3o
Wg8col98RZNy9sc0qIciq+aAyHnNzS9KT11mKno4a1KC
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:25 2025 by rpki-client