Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/DcUU6zmuQBsqgMNss0d7pazOzTk.roa
File: DcUU6zmuQBsqgMNss0d7pazOzTk.roa (raw, json)
Hash identifier: ZPYaIoTSO9Kz2uw0TY3pz4y/nRB9cqbcC5HGiPKh708=
Subject key identifier: 0D:C5:14:EB:39:AE:40:1B:2A:80:C3:6C:B3:47:7B:A5:AC:CE:CD:39
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 881E14
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/DcUU6zmuQBsqgMNss0d7pazOzTk.roa
Signing time: Sat 01 Jan 2022 03:52:17 +0000
ROA not before: Sat 01 Jan 2022 03:52:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 176.116.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8920596 (0x881e14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Jan 1 03:52:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dc514eb39ae401b2a80c36cb3477ba5accecd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:fb:31:5d:6f:70:44:29:d9:0e:bf:92:45:
6a:2c:1a:6b:32:c1:28:63:16:34:f9:1a:c6:9e:c0:
7d:74:3e:f2:91:23:84:c8:2c:21:8a:ae:92:f8:c1:
f9:35:18:5f:7c:1e:31:7a:d5:38:b2:b1:3b:90:90:
5c:19:59:f5:d1:49:d7:4b:70:4e:7a:d1:64:03:03:
61:95:7a:ff:c9:17:79:ce:9d:8e:24:12:96:39:f9:
1a:92:41:ad:90:fc:86:cb:f9:16:5b:71:3d:34:d3:
a0:e7:3b:8e:8b:d7:17:5c:69:5e:8b:ce:bd:aa:c9:
11:a9:c0:89:c6:18:d2:a1:02:bd:e6:d8:70:c3:0a:
ea:97:aa:39:67:38:35:52:1f:09:df:33:14:e4:bb:
b8:b9:74:58:41:63:58:2d:2b:77:25:47:44:92:47:
f8:2c:45:3b:a9:61:21:66:01:51:de:28:65:00:da:
21:c1:5a:c5:ab:67:f5:36:fb:29:54:3e:d1:2c:24:
df:3e:ae:20:4a:c1:8b:c5:94:3c:06:37:89:6f:d4:
cf:76:b1:68:69:b2:c1:bf:27:c9:64:a2:b2:b4:5f:
e8:fb:83:47:a1:c1:6e:fa:5b:6a:11:26:4b:a0:29:
4e:7d:d3:7d:24:a2:da:18:31:2f:6d:04:63:f8:64:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C5:14:EB:39:AE:40:1B:2A:80:C3:6C:B3:47:7B:A5:AC:CE:CD:39
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/DcUU6zmuQBsqgMNss0d7pazOzTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.21.0/24
Signature Algorithm: sha256WithRSAEncryption
65:bc:de:6a:cd:94:85:ce:69:88:a5:0a:81:09:4a:4a:87:5a:
53:f3:e0:e0:3a:ec:f6:3c:b0:1e:a7:b0:17:82:07:2c:79:77:
c6:cb:af:75:f5:54:fd:1a:a2:0a:85:d5:6a:ca:00:cd:fe:c4:
6f:5b:b2:54:f3:14:90:ae:39:f2:95:19:51:3a:06:31:66:01:
f2:1c:4e:bc:e2:bd:6a:64:46:0f:19:bc:69:8f:32:b4:ff:f6:
07:c1:8d:a7:19:b9:1f:f5:5b:fa:84:70:a1:bd:e5:aa:55:2f:
02:a6:04:e4:5c:e9:2b:25:63:f9:c6:a2:0e:8d:90:c1:ac:74:
45:23:62:db:5a:1c:4a:14:e6:25:5b:c7:5a:82:95:c8:59:7c:
48:e9:cf:a1:f4:ba:1c:dc:60:e1:a1:e9:01:e0:7d:16:b6:5f:
ed:94:20:48:ca:61:75:a1:9b:28:f4:10:ff:aa:22:a4:0d:47:
07:53:9f:fd:b1:d9:6a:2c:f7:95:c6:85:a4:bc:2a:f5:1c:44:
4b:1d:35:e6:a3:37:a1:a3:f8:78:a2:bb:16:fb:19:49:e1:f6:
82:84:ef:1a:a1:ae:7b:56:3a:aa:74:b0:5c:73:06:3e:29:4c:
9e:bb:18:41:a1:f0:f4:ba:ac:00:10:d0:18:24:ef:4a:0e:65:
85:2e:55:92
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAIgeFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MzM2N2RiYTNhMjIwMDYwZTY3ZDRlYzY4MGIwZjk5ZjI0N2E4NzJjMB4XDTIyMDEw
MTAzNTIxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGRjNTE0ZWIzOWFl
NDAxYjJhODBjMzZjYjM0NzdiYTVhY2NlY2QzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMUF+zFdb3BEKdkOv5JFaiwaazLBKGMWNPkaxp7AfXQ+8pEj
hMgsIYqukvjB+TUYX3weMXrVOLKxO5CQXBlZ9dFJ10twTnrRZAMDYZV6/8kXec6d
jiQSljn5GpJBrZD8hsv5FltxPTTToOc7jovXF1xpXovOvarJEanAicYY0qECvebY
cMMK6peqOWc4NVIfCd8zFOS7uLl0WEFjWC0rdyVHRJJH+CxFO6lhIWYBUd4oZQDa
IcFaxatn9Tb7KVQ+0Swk3z6uIErBi8WUPAY3iW/Uz3axaGmywb8nyWSisrRf6PuD
R6HBbvpbahEmS6ApTn3TfSSi2hgxL20EY/hkFxkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQNxRTrOa5AGyqAw2yzR3ulrM7NOTAfBgNVHSMEGDAWgBTTNn26OiIAYOZ9
TsaAsPmfJHqHLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzB6Wjl1am9pQUdEbWZVN0dnTEQ1bnlSNmh5dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjMvYWM0MTBhLTQ5YTAtNGUzOC1hZTNiLTVjYTViZjY3ZTY5ZC8x
L0RjVVU2em11UUJzcWdNTnNzMGQ3cGF6T3pUay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMv
YWM0MTBhLTQ5YTAtNGUzOC1hZTNiLTVjYTViZjY3ZTY5ZC8xLzB6Wjl1am9pQUdE
bWZVN0dnTEQ1bnlSNmh5dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALB0FTANBgkqhkiG9w0BAQsFAAOC
AQEAZbzeas2Uhc5piKUKgQlKSodaU/Pg4Drs9jywHqewF4IHLHl3xsuvdfVU/Rqi
CoXVasoAzf7Eb1uyVPMUkK458pUZUToGMWYB8hxOvOK9amRGDxm8aY8ytP/2B8GN
pxm5H/Vb+oRwob3lqlUvAqYE5FzpKyVj+caiDo2Qwax0RSNi21ocShTmJVvHWoKV
yFl8SOnPofS6HNxg4aHpAeB9FrZf7ZQgSMphdaGbKPQQ/6oipA1HB1Of/bHZaiz3
lcaFpLwq9RxESx015qM3oaP4eKK7FvsZSeH2goTvGqGue1Y6qnSwXHMGPilMnrsY
QaHw9LqsABDQGCTvSg5lhS5Vkg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:55:37 2025 by rpki-client