Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/omOz8kLGa2RxwX9MPa2q5c49XYE.roa
File: omOz8kLGa2RxwX9MPa2q5c49XYE.roa (raw, json)
Hash identifier: ax1FOB8255IuLVcuk9ebcvppmz53iQQImw3sZutXxnM=
Subject key identifier: A2:63:B3:F2:42:C6:6B:64:71:C1:7F:4C:3D:AD:AA:E5:CE:3D:5D:81
Certificate issuer: /CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
Certificate serial: 977EC6
Authority key identifier: 6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/omOz8kLGa2RxwX9MPa2q5c49XYE.roa
Signing time: Sat 01 Jan 2022 01:03:03 +0000
ROA not before: Sat 01 Jan 2022 01:03:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34863
IP address blocks: 176.116.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9928390 (0x977ec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
Validity
Not Before: Jan 1 01:03:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a263b3f242c66b6471c17f4c3dadaae5ce3d5d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1f:ef:b0:2f:2a:e5:ec:05:aa:96:58:a8:7f:
6a:68:4b:de:7e:26:9e:ed:0f:64:aa:ca:f2:17:02:
e8:06:c9:af:2c:ce:4f:67:50:83:8e:de:0a:03:79:
56:59:79:35:12:c9:75:a9:79:b8:44:3d:14:53:e1:
10:92:03:e2:b0:a9:91:e2:fb:da:7b:c7:04:4c:59:
74:7a:c2:4f:03:19:7c:b5:34:28:42:fe:9b:99:7e:
9c:cc:5a:c0:ac:a8:63:30:69:c9:45:ef:a9:5e:f0:
23:10:79:b2:c8:11:e7:73:49:0b:37:17:b1:7b:18:
21:ea:2f:e9:6b:c9:62:2e:e0:e0:31:cc:30:56:24:
2a:eb:3e:04:5c:4f:82:4f:54:2a:f6:34:62:4a:69:
39:e8:c0:56:50:d2:e4:0f:ac:f1:09:3a:f3:8d:6d:
ff:00:9d:97:eb:1b:46:06:9a:72:7d:bf:de:92:79:
1b:58:de:be:b6:0f:86:bf:3f:50:e9:c8:9d:cf:32:
ef:1b:9e:96:4f:90:62:8f:a9:82:df:34:76:d0:be:
fc:52:fd:92:99:ff:a3:0b:d6:30:06:3c:eb:e4:66:
2f:77:21:50:09:26:5b:d2:58:fc:e9:ac:b3:91:be:
fc:d4:d8:5b:a1:c6:52:44:ce:fb:ae:8e:3e:08:20:
0b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:63:B3:F2:42:C6:6B:64:71:C1:7F:4C:3D:AD:AA:E5:CE:3D:5D:81
X509v3 Authority Key Identifier:
keyid:6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/omOz8kLGa2RxwX9MPa2q5c49XYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d6:90:fe:25:6c:9c:dd:a4:36:dd:b9:ec:81:eb:47:b2:4d:
b2:40:a4:53:24:17:f1:64:92:2d:fd:01:91:cb:fd:16:ce:56:
2b:65:96:eb:f8:23:6c:cf:03:65:3c:cf:0a:ba:35:03:5a:ef:
d7:f3:a2:51:dd:ca:fd:50:7d:7b:20:1d:84:05:26:30:1c:a3:
b2:2e:4e:b9:f1:3e:47:59:c6:3d:dc:56:92:b6:87:48:9a:64:
87:35:8b:c5:bd:ab:f1:d5:48:a4:c1:55:f3:db:08:d8:2d:bc:
63:ad:d9:8c:ea:0b:22:98:70:28:6a:b9:b2:7d:4b:82:2d:23:
76:92:f3:11:c8:c8:47:a2:75:0d:65:7a:48:1c:c7:49:1e:e7:
a6:b1:2b:f5:54:58:1f:c2:5b:f5:41:c1:1a:2b:c0:e9:22:74:
03:00:58:2a:4e:68:26:39:36:73:b9:67:9e:18:4e:e2:08:4b:
69:7b:e8:13:f8:b2:ac:ae:71:de:26:4c:ef:0f:52:90:cb:ef:
82:47:ea:c6:e1:3a:da:9f:42:68:5e:35:40:e1:2d:fb:33:32:
d1:b3:0e:f0:67:16:2c:e6:c1:d5:65:0a:19:93:00:10:d8:ba:
d0:5a:a5:21:8d:b4:28:53:3a:0b:bb:71:c9:c8:d6:44:93:4b:
88:8e:21:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:53 2025 by rpki-client