Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/lab5J5RcCtas1L2Y7YMr6FyHoxc.roa
File: lab5J5RcCtas1L2Y7YMr6FyHoxc.roa (raw, json)
Hash identifier: N6A8KQuXMFwbmov+/kvLYo4potH2uakqtbpTY9DXAJc=
Subject key identifier: 95:A6:F9:27:94:5C:0A:D6:AC:D4:BD:98:ED:83:2B:E8:5C:87:A3:17
Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial: 0194236A3F166F44C5BDA28C0F063B7EAE9D
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/lab5J5RcCtas1L2Y7YMr6FyHoxc.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199251
IP address blocks: 176.58.44.0/24 maxlen: 24
176.58.45.0/24 maxlen: 24
176.58.48.0/23 maxlen: 23
176.58.51.0/24 maxlen: 24
176.58.52.0/24 maxlen: 24
176.58.55.0/24 maxlen: 24
176.58.57.0/24 maxlen: 24
176.58.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3f:16:6f:44:c5:bd:a2:8c:0f:06:3b:7e:ae:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95a6f927945c0ad6acd4bd98ed832be85c87a317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:6b:2b:0f:0a:dc:45:e0:6b:9c:01:54:da:
54:a6:4a:fc:4e:44:03:75:8a:4d:d1:16:aa:ba:c3:
0b:8c:4a:d9:c4:bb:85:e1:b9:f5:81:09:1a:dd:ff:
46:74:13:1a:26:95:75:6e:0b:36:6b:fc:7a:87:2a:
79:66:30:fe:2c:96:92:22:35:85:a2:33:be:57:46:
ad:bf:4c:6e:99:a2:6f:e9:43:03:7e:49:84:b6:e5:
b5:87:da:36:03:83:76:cd:d9:3f:2c:40:43:39:16:
71:92:dd:58:a2:5f:12:3d:da:29:6b:85:8d:b4:86:
37:26:78:b2:f7:04:92:74:33:82:a6:27:40:10:9e:
3f:11:4c:40:ef:8f:d5:76:d1:12:78:24:e5:d5:a6:
54:de:9f:d2:df:bc:dd:22:da:ea:37:98:23:98:f1:
7c:e1:95:ca:f0:66:a5:e3:0a:48:02:ca:03:a6:92:
aa:95:cc:35:90:14:cb:cd:f5:df:99:7c:4a:a6:ed:
97:5a:61:19:ae:58:77:11:63:36:09:d4:a3:42:17:
b0:b2:c4:b8:24:c5:15:b9:2c:97:66:7a:d2:d1:9b:
b8:af:b1:82:cb:a0:de:63:f9:18:43:e2:79:04:c8:
56:e2:c6:ea:bc:ec:07:3b:46:4c:58:20:7e:91:92:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A6:F9:27:94:5C:0A:D6:AC:D4:BD:98:ED:83:2B:E8:5C:87:A3:17
X509v3 Authority Key Identifier:
keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/lab5J5RcCtas1L2Y7YMr6FyHoxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.58.44.0/23
176.58.48.0/23
176.58.51.0-176.58.52.255
176.58.55.0/24
176.58.57.0/24
176.58.59.0/24
Signature Algorithm: sha256WithRSAEncryption
67:a3:de:87:e6:d5:7a:3e:69:98:3d:06:09:9a:f5:14:43:4a:
e8:d7:7e:d5:51:05:13:11:e0:7b:44:47:73:8a:aa:e3:82:64:
b4:96:4f:62:08:f9:04:06:87:8f:c6:85:78:52:e1:79:82:eb:
81:c1:7f:4b:e0:36:fb:72:f0:f8:bb:e0:17:ee:d3:e5:4c:89:
ae:29:c5:3d:e3:c4:02:e8:31:a1:d7:41:b9:af:61:f5:c5:61:
b5:02:f7:0f:00:19:8e:d9:48:f6:4e:97:46:5d:3b:21:f3:44:
fa:da:0a:bd:6a:00:f7:ac:aa:f5:e4:06:4f:1b:40:d1:94:e0:
e5:d1:00:77:35:9a:3d:2b:16:66:fb:7e:c2:a2:7d:ed:9f:73:
55:84:dc:52:54:4a:2a:12:c1:16:a2:cf:9c:f9:67:3c:82:e3:
0c:c6:44:71:4b:d8:e4:66:17:17:67:f7:52:f3:cb:61:33:da:
99:84:8d:62:ca:a2:58:4e:90:d4:2b:14:87:7e:fa:fe:20:c4:
dc:3b:13:77:c7:3e:1c:26:a0:43:74:14:e2:64:3c:e9:b5:eb:
0c:88:40:cd:45:d6:12:67:a4:7a:0e:82:21:67:e8:6b:9d:e1:
43:01:e8:08:a3:1f:9d:eb:a6:30:71:f5:a2:b8:07:a4:07:3d:
6f:e8:9f:13
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZQjaj8Wb0TFvaKMDwY7fq6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjc0ZDU4ODRhNTBhODRlMDdkYmRmNjc5OGRkY2JiOWNj
MjAzMmUwHhcNMjUwMTAxMTk0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWE2ZjkyNzk0NWMwYWQ2YWNkNGJkOThlZDgzMmJlODVjODdhMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvtrKw8K3EXga5wBVNpUpkr8TkQD
dYpN0RaqusMLjErZxLuF4bn1gQka3f9GdBMaJpV1bgs2a/x6hyp5ZjD+LJaSIjWF
ojO+V0atv0xumaJv6UMDfkmEtuW1h9o2A4N2zdk/LEBDORZxkt1Yol8SPdopa4WN
tIY3Jniy9wSSdDOCpidAEJ4/EUxA74/VdtESeCTl1aZU3p/S37zdItrqN5gjmPF8
4ZXK8Gal4wpIAsoDppKqlcw1kBTLzfXfmXxKpu2XWmEZrlh3EWM2CdSjQhewssS4
JMUVuSyXZnrS0Zu4r7GCy6DeY/kYQ+J5BMhW4sbqvOwHO0ZMWCB+kZLZlQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFJWm+SeUXArWrNS9mO2DK+hch6MXMB8GA1UdIwQY
MBaAFKNnTViEpQqE4H299nmN3LucwgMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTct
OWUyMjBmMDRhOTAxLzEvbGFiNUo1UmNDdGFzMUwyWTdZTXI2RnlIb3hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTctOWUyMjBmMDRhOTAx
LzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBsDosAwQB
sDowMAwDBACwOjMDBACwOjQDBACwOjcDBACwOjkDBACwOjswDQYJKoZIhvcNAQEL
BQADggEBAGej3ofm1Xo+aZg9Bgma9RRDSujXftVRBRMR4HtER3OKquOCZLSWT2II
+QQGh4/GhXhS4XmC64HBf0vgNvty8Pi74Bfu0+VMia4pxT3jxALoMaHXQbmvYfXF
YbUC9w8AGY7ZSPZOl0ZdOyHzRPraCr1qAPesqvXkBk8bQNGU4OXRAHc1mj0rFmb7
fsKife2fc1WE3FJUSioSwRaiz5z5ZzyC4wzGRHFL2ORmFxdn91Lzy2Ez2pmEjWLK
olhOkNQrFId++v4gxNw7E3fHPhwmoEN0FOJkPOm16wyIQM1F1hJnpHoOgiFn6Gud
4UMB6AijH53rpjBx9aK4B6QHPW/onxM=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:13 2025 by rpki-client