Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/jRsFCEmrJBkdVjAYJqWEvAlaGgU.roa
File: jRsFCEmrJBkdVjAYJqWEvAlaGgU.roa (raw, json)
Hash identifier: Uv4Byq2/+SHbPX4eJbHIcVHnlk9Spfh122BEW6Y6xyM=
Subject key identifier: 8D:1B:05:08:49:AB:24:19:1D:56:30:18:26:A5:84:BC:09:5A:1A:05
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 01856E38AF00695CAC0B35EF25D1010EC334
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/jRsFCEmrJBkdVjAYJqWEvAlaGgU.roa
Signing time: Sun 01 Jan 2023 16:44:46 +0000
ROA not before: Sun 01 Jan 2023 16:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 176.116.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:af:00:69:5c:ac:0b:35:ef:25:d1:01:0e:c3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Jan 1 16:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d1b050849ab24191d56301826a584bc095a1a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9b:0f:d1:37:3f:30:0b:da:b3:d7:f4:81:d5:
f5:23:93:46:4e:04:3b:71:99:51:f8:cc:c5:9e:60:
8d:5f:6c:55:3b:4a:db:b9:51:a7:ec:34:48:d9:90:
fa:12:38:39:bf:5d:d0:43:5f:4f:53:75:fd:aa:61:
64:03:b8:44:f9:50:d9:e9:a9:80:00:80:b4:93:da:
1f:ec:04:5b:9f:40:0d:e3:3e:06:2c:d7:b1:d4:33:
30:d2:47:d8:e2:6a:48:34:5a:8a:e2:e1:ae:76:15:
91:e3:79:b6:be:8c:cc:e0:2e:03:d2:7e:22:c8:e6:
af:90:5a:b4:0c:6f:56:3b:dd:fc:c0:34:6d:51:66:
98:1f:c7:98:79:a0:07:fe:e7:58:13:97:e9:34:67:
9b:df:70:cc:ec:c9:19:24:ff:73:ec:d1:c1:80:11:
0b:91:17:16:b9:6f:71:1f:bf:63:f2:a6:9c:c6:9b:
93:1b:44:e6:c6:a9:31:9c:51:10:13:56:e9:40:ee:
16:ef:c1:96:23:03:31:8b:2c:12:65:48:75:6e:81:
4b:a9:3c:cb:74:d0:37:f4:2f:ba:c3:52:02:e6:ce:
b9:0f:6e:65:63:ea:0c:b6:49:65:06:b8:7a:9b:50:
6c:34:ff:e6:32:56:f5:46:a8:e6:69:f7:27:98:e8:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1B:05:08:49:AB:24:19:1D:56:30:18:26:A5:84:BC:09:5A:1A:05
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/jRsFCEmrJBkdVjAYJqWEvAlaGgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.21.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2d:8e:52:47:7e:e8:2d:90:6d:e5:99:93:6f:3c:ac:ec:77:
df:56:1b:10:43:f7:6c:ab:0c:f1:f8:16:37:09:e7:77:0c:a2:
e7:69:df:fa:e5:2a:2f:b1:4d:7c:cf:21:10:89:06:18:37:46:
1f:b7:e5:ef:81:cd:38:af:18:14:8f:99:a8:e5:ac:79:4e:9f:
68:05:3d:7a:94:93:40:07:9c:e2:44:74:f0:20:84:07:41:8d:
b9:3d:cf:e9:35:a5:2b:1d:c3:f5:c5:1c:b6:b4:02:07:9e:4e:
3a:de:f9:06:0b:3f:37:58:b9:5d:2a:4a:68:46:37:a4:ec:ad:
b3:e2:6f:60:cd:bb:a8:ae:56:2c:ea:86:05:4e:be:dc:d1:7a:
3d:d4:18:a6:88:2c:5d:47:e2:8c:b3:de:64:33:dc:39:8b:f9:
2a:2e:32:26:79:01:78:ce:fd:bf:69:5e:4e:5d:48:8f:e0:4d:
a5:d9:ea:8e:8f:bc:8c:93:58:03:a6:3d:d5:e5:76:60:5e:ac:
78:dd:74:ea:7b:fe:9a:f5:dc:69:fc:79:38:2a:96:ea:37:88:
72:06:ae:f5:90:74:86:ff:93:7b:9c:56:67:62:2a:14:72:05:
63:4b:e6:52:2d:fb:4d:be:9a:9d:b3:2c:08:02:75:7a:ee:88:
38:64:2d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:29 2025 by rpki-client