Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/88e353-3013-4b7d-a8d6-6c6ed71e25da/1/dzrfq_ihNQ2EdkLagDhxtZJ0-s8.roa
File: dzrfq_ihNQ2EdkLagDhxtZJ0-s8.roa (raw, json)
Hash identifier: o7KfKks60hUIQEyyksVjQ8RD3qbhK6astqWIuEkyWCs=
Subject key identifier: 77:3A:DF:AB:F8:A1:35:0D:84:76:42:DA:80:38:71:B5:92:74:FA:CF
Certificate issuer: /CN=b11863e1705accc128f12d16476fa4fe1eb0d7d3
Certificate serial: 01865933CE119964D408EF60DBAE6175C445
Authority key identifier: B1:18:63:E1:70:5A:CC:C1:28:F1:2D:16:47:6F:A4:FE:1E:B0:D7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRhj4XBazMEo8S0WR2-k_h6w19M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/88e353-3013-4b7d-a8d6-6c6ed71e25da/1/dzrfq_ihNQ2EdkLagDhxtZJ0-s8.roa
Signing time: Thu 16 Feb 2023 07:50:12 +0000
ROA not before: Thu 16 Feb 2023 07:50:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 176.118.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:33:ce:11:99:64:d4:08:ef:60:db:ae:61:75:c4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11863e1705accc128f12d16476fa4fe1eb0d7d3
Validity
Not Before: Feb 16 07:50:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=773adfabf8a1350d847642da803871b59274facf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f7:57:3b:5b:de:e3:4f:cd:b7:a3:13:8f:58:
65:9f:5e:49:58:4e:11:52:da:bc:aa:64:70:82:38:
7f:7d:f5:48:74:28:87:2b:5f:bc:b9:0e:64:c9:bc:
12:33:ab:5f:41:41:ef:0c:27:47:d5:59:ab:4c:a2:
76:af:85:ce:ce:61:96:31:a5:d4:0c:d7:e9:99:a4:
3d:e1:61:49:be:6e:88:68:70:f3:78:32:27:25:43:
f4:ea:70:5f:44:89:87:50:29:4e:f6:cb:64:db:3c:
75:13:7f:c6:2d:a9:ad:9c:73:fa:33:a1:c7:11:b7:
e2:19:3a:90:89:9e:cc:cf:14:b7:81:19:79:84:7a:
ae:8e:70:b7:7f:c8:73:ff:9b:04:4f:40:0a:c6:c2:
0b:07:28:ba:ba:a0:8e:9c:c6:7d:dc:5c:ec:c9:63:
20:c5:89:24:01:db:99:b4:0e:3a:d0:f7:84:9e:5a:
ab:5c:9d:8a:02:8e:a2:19:16:a0:60:66:c7:40:bd:
f2:87:93:6c:d5:ee:e3:dd:eb:9c:9e:cf:28:53:23:
26:7b:b2:b8:80:b0:9e:67:ad:08:59:41:c7:09:91:
56:13:5e:27:10:e8:66:40:bd:ba:9c:69:1b:e8:73:
2e:76:86:41:9f:c7:e4:d8:81:92:8e:14:19:8a:66:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3A:DF:AB:F8:A1:35:0D:84:76:42:DA:80:38:71:B5:92:74:FA:CF
X509v3 Authority Key Identifier:
keyid:B1:18:63:E1:70:5A:CC:C1:28:F1:2D:16:47:6F:A4:FE:1E:B0:D7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRhj4XBazMEo8S0WR2-k_h6w19M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/88e353-3013-4b7d-a8d6-6c6ed71e25da/1/dzrfq_ihNQ2EdkLagDhxtZJ0-s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/88e353-3013-4b7d-a8d6-6c6ed71e25da/1/sRhj4XBazMEo8S0WR2-k_h6w19M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.34.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:dd:c5:4b:f1:9b:47:d5:1f:7a:73:7e:26:77:9b:80:51:55:
8f:e5:92:24:37:b2:22:cf:3d:b2:90:41:bc:c2:f4:9f:04:8c:
3f:31:87:9f:6e:14:11:b6:2e:e6:93:12:66:5c:d7:53:f6:02:
a1:24:44:44:9f:68:da:b6:92:40:ac:0c:60:57:cd:17:0e:4f:
27:45:84:60:14:70:82:a0:a3:cd:d2:74:f0:a4:d9:a9:a3:06:
6b:a0:7b:18:e4:16:e5:24:c2:e4:e9:cc:ad:3b:97:16:1a:20:
b2:ea:8b:e2:b0:80:30:37:98:f7:b9:0a:1c:27:1e:56:ab:16:
95:5a:6e:89:62:1d:b6:eb:07:b8:b9:84:08:50:e4:66:59:e0:
89:3f:26:8b:a0:9a:5a:93:a0:70:04:13:26:64:b2:d3:cc:11:
58:22:80:1b:9d:06:76:f1:9b:6e:44:eb:05:52:ad:b9:34:67:
77:74:af:d7:27:1d:5e:82:d0:0e:39:6f:56:f5:b2:a7:72:19:
12:d3:35:09:94:4e:a5:60:da:1a:2a:3a:03:eb:5a:00:1c:ad:
87:36:2f:06:11:a2:e7:c3:dd:87:5c:21:18:17:6f:2f:91:0b:
e1:f7:68:fa:22:10:51:5b:04:8e:f5:d1:8a:f6:e0:51:bf:55:
f6:79:4d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:38:26 2025 by rpki-client