Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa
File: mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa (raw, json)
Hash identifier: zwJx6M98s8at6u4x9fLfaXSOW6xFzqNRxDzug5GEBAw=
Subject key identifier: 99:03:2E:28:3A:07:9E:BD:4B:78:69:13:97:11:EC:7D:36:77:3D:64
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 01942444917DA3FB744237CCB8A1A7436B8D
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61408
IP address blocks: 176.222.27.0/24 maxlen: 24
176.222.29.0/24 maxlen: 24
176.222.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:91:7d:a3:fb:74:42:37:cc:b8:a1:a7:43:6b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99032e283a079ebd4b7869139711ec7d36773d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:dd:df:46:8f:99:8c:ba:fe:5b:ef:d2:8e:
88:48:9a:10:b5:40:87:60:28:52:dc:1b:b1:6c:39:
c3:e2:64:31:66:12:51:e5:92:0b:ed:71:89:18:2c:
80:d8:e0:bd:47:d1:e9:36:2f:1f:71:e0:8b:9c:6b:
a8:fc:a1:15:89:15:83:4f:51:7e:3e:dd:c8:b8:96:
82:55:06:0e:4f:ff:64:3f:fb:7b:34:e4:ec:d5:ae:
88:de:dd:57:99:57:4b:07:45:80:7a:3b:88:48:3f:
e9:99:98:a8:f8:be:c7:13:0f:ba:1e:8c:3c:8c:2a:
38:29:5a:b1:23:f5:f1:d5:cc:32:fe:0c:22:e3:54:
73:b5:23:48:3c:a7:0a:41:db:2f:ae:4f:ef:20:7d:
4c:a5:bf:83:a0:ae:be:59:bd:35:01:fe:19:2b:5c:
11:91:31:9f:12:79:ce:19:57:d9:90:e1:a5:c7:52:
d2:82:6b:ab:08:83:53:ab:ef:e6:09:63:52:35:c2:
9d:64:68:f9:a3:51:96:01:aa:52:2e:7d:05:00:0e:
a5:7f:bd:a9:14:61:32:c6:95:68:bc:17:a9:13:a8:
12:77:9f:e1:20:e8:90:8b:b5:7b:fc:55:8f:a0:e3:
a7:20:63:9f:75:83:b1:b7:c3:51:d7:e9:bb:8d:a0:
71:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:03:2E:28:3A:07:9E:BD:4B:78:69:13:97:11:EC:7D:36:77:3D:64
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.222.27.0/24
176.222.29.0-176.222.30.255
Signature Algorithm: sha256WithRSAEncryption
75:e6:ea:9a:89:6e:f7:fe:39:fd:bd:d0:7d:8c:83:32:32:c9:
bc:38:01:03:8d:e0:99:48:94:e7:96:53:a9:58:e9:ea:13:81:
a5:39:17:17:9c:7d:d9:6c:8a:59:bb:09:3d:e8:3a:4d:12:09:
68:87:9b:cb:0e:d7:f0:d5:65:47:0a:47:b9:a2:ad:da:7a:03:
28:62:18:f8:7c:ff:16:35:de:67:cd:92:f3:45:3d:0d:10:06:
97:9c:01:f6:17:cb:af:0c:5e:59:ca:16:f4:5f:c0:1c:85:d9:
e3:ad:df:8b:1f:0c:96:2a:d0:d2:2b:e6:8f:11:34:d9:05:a3:
b5:05:d1:01:b8:e9:1f:b8:2e:ac:ba:fa:05:ac:83:cd:f8:4f:
16:0c:82:46:8d:27:48:4b:f3:7f:2a:ed:c5:62:d3:db:5d:18:
ab:b3:4a:28:73:0a:4c:40:8b:94:da:67:d8:c2:77:ea:ac:78:
30:bd:c6:f1:a0:3d:a9:90:c2:d9:6f:97:88:a9:77:61:73:e7:
af:a5:80:41:26:8e:ad:35:d5:31:61:2e:a8:16:6c:ee:a5:ef:
03:bd:27:86:ef:7d:5e:51:ad:e0:89:5d:59:49:a1:0b:98:a8:
65:25:83:b3:3f:69:9e:7d:f6:75:8f:92:a9:4a:f5:c9:bb:16:
2e:63:d3:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:34 2025 by rpki-client