Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/vtQmEnQvCzTxgKx6eoQDleSryN0.roa
File: vtQmEnQvCzTxgKx6eoQDleSryN0.roa (raw, json)
Hash identifier: X99pd7WPnymxRoUriny009KnFNB5G5RPTZ3dWOg4RYg=
Subject key identifier: BE:D4:26:12:74:2F:0B:34:F1:80:AC:7A:7A:84:03:95:E4:AB:C8:DD
Certificate issuer: /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial: 019423D6D8C6D371D724AD574A98730A4203
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/vtQmEnQvCzTxgKx6eoQDleSryN0.roa
Signing time: Wed 01 Jan 2025 21:47:50 +0000
ROA not before: Wed 01 Jan 2025 21:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199351
IP address blocks: 176.124.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d8:c6:d3:71:d7:24:ad:57:4a:98:73:0a:42:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Validity
Not Before: Jan 1 21:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bed42612742f0b34f180ac7a7a840395e4abc8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:f6:0c:89:a8:61:4a:80:67:ed:70:72:8d:
65:a8:f8:cb:2c:e6:cb:f7:68:40:91:2d:83:99:e8:
11:ed:b5:20:3f:17:c7:49:ba:c2:36:61:cd:10:92:
82:6d:1b:59:37:2e:10:b9:59:fe:64:da:e0:61:7f:
b7:60:2c:73:99:d5:bc:2a:fe:9e:dc:da:ec:3d:07:
ec:e3:4f:99:97:50:b0:8a:0b:03:3a:74:9c:c0:e0:
d6:92:00:57:5f:a4:db:e5:14:15:f4:0b:53:61:1b:
5d:81:32:14:2f:2f:7c:13:3b:1a:a0:ae:23:b5:13:
fb:1e:44:e1:94:a7:5a:d7:87:e9:13:79:b5:6f:69:
f1:b4:36:71:4e:0c:40:8c:b5:8c:34:39:c6:d4:e0:
e9:9c:07:5b:d5:77:0c:e2:35:b4:44:dc:1f:65:29:
6b:30:03:40:25:50:0d:93:ba:d6:11:c5:f8:dc:5b:
fe:8f:f2:ee:29:3a:aa:ea:81:81:52:d1:ab:fa:b6:
bf:ae:bb:ff:f9:d2:08:bc:30:24:e2:7f:fb:37:bf:
0a:60:f0:1e:52:a4:8e:76:0f:ac:df:6d:61:d2:2c:
0f:32:0a:1d:86:82:4d:0b:76:5a:3f:fb:34:87:98:
28:71:7f:ec:11:a1:41:e5:c7:86:12:f7:57:f0:a8:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D4:26:12:74:2F:0B:34:F1:80:AC:7A:7A:84:03:95:E4:AB:C8:DD
X509v3 Authority Key Identifier:
keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/vtQmEnQvCzTxgKx6eoQDleSryN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:49:e2:2b:8f:e5:bb:71:69:6b:09:55:f2:44:40:49:6a:c4:
2c:e8:43:13:41:d6:d5:1a:f7:14:22:d0:0b:f6:4f:5d:95:13:
6e:f4:10:56:33:f8:e0:62:07:c7:aa:6e:45:40:e5:5f:34:49:
ca:c5:9c:e2:2e:64:e5:35:86:35:90:e4:27:5c:cf:c4:d7:71:
ec:27:cc:7f:0a:0b:7b:09:5c:bd:3e:40:34:f4:bd:1a:57:18:
59:fc:d7:69:f9:6d:13:ed:42:d3:98:74:fc:24:2e:9b:82:32:
69:1d:ec:0d:f8:f0:b6:1f:87:71:d6:84:9a:74:d1:74:28:25:
aa:ea:d5:5d:83:1c:e8:08:39:fc:46:0b:6e:50:33:6a:78:1c:
5c:ba:b9:1c:98:00:35:b8:74:47:eb:3d:0a:51:dd:d8:8e:c8:
5b:66:e8:45:05:e3:db:4d:f8:ab:24:d2:d8:d6:cc:cb:05:9c:
cd:cf:d5:cd:23:06:c9:4a:50:47:9f:21:e3:6b:82:f0:b4:88:
ef:ed:e9:18:05:d3:44:19:74:9f:8e:50:9b:53:9b:a9:0c:ef:
c9:c6:73:09:4c:29:94:56:b3:82:37:38:20:55:2c:5c:58:c0:
f6:55:19:dd:56:c5:4f:89:df:85:f7:8e:c6:85:97:99:53:80:
3e:4e:ee:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:43 2025 by rpki-client