Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/lu6MfF-Y-dD_5b6SvniGuPVhx3g.roa
File: lu6MfF-Y-dD_5b6SvniGuPVhx3g.roa (raw, json)
Hash identifier: IKP0upkpjDtZ1PCIZi1vCzqIwOQbrVFfN7L+UKiIdek=
Subject key identifier: 96:EE:8C:7C:5F:98:F9:D0:FF:E5:BE:92:BE:78:86:B8:F5:61:C7:78
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 018B85860A061F5C54986353D4E8F894C41D
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/lu6MfF-Y-dD_5b6SvniGuPVhx3g.roa
Signing time: Tue 31 Oct 2023 11:37:15 +0000
ROA not before: Tue 31 Oct 2023 11:37:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62047
IP address blocks: 176.126.59.0/24 maxlen: 24
178.216.40.0/21 maxlen: 21
2001:7f8:5b::/48 maxlen: 48
2001:67c:778::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:86:0a:06:1f:5c:54:98:63:53:d4:e8:f8:94:c4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Oct 31 11:37:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96ee8c7c5f98f9d0ffe5be92be7886b8f561c778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:01:8e:55:b8:ee:e9:21:40:f0:92:1a:a7:
f2:a5:0b:71:1d:d6:e8:a4:60:fa:8c:5a:14:03:29:
fa:95:55:4c:1d:a2:d0:0c:e1:11:45:2a:63:13:38:
72:d3:2b:8d:e5:9f:eb:f1:cd:49:6b:f8:66:40:ca:
2c:9b:cf:5c:6d:cb:90:df:86:d2:32:74:83:95:0d:
6b:3d:71:bc:3b:90:00:ea:5d:ec:0a:a3:22:60:00:
64:82:82:85:18:0d:97:28:68:4c:a2:cb:e7:8f:95:
a6:8c:bd:4c:0f:20:ec:7a:98:f3:ba:e7:5a:d7:8d:
25:a6:de:8b:33:07:c0:cd:40:cf:5e:a0:cf:3b:38:
70:c1:ec:41:c0:c7:c5:7d:71:51:43:f6:22:36:0f:
cd:6c:cd:01:5f:06:15:ca:e7:fa:d4:23:54:2d:56:
af:e9:5b:4f:06:f8:41:db:04:3e:9c:af:cc:4e:a1:
87:1c:97:35:ba:9e:c0:b3:8e:48:35:00:a0:7a:e8:
b9:b2:4c:6f:50:91:58:17:a9:d3:1d:d9:3c:89:6a:
52:f3:eb:ce:13:f2:fe:3a:f7:ca:47:13:38:fa:3a:
cc:21:26:d6:38:70:be:77:b1:ce:a0:57:72:b4:64:
5a:54:eb:52:d8:a3:f6:84:6d:f3:ab:eb:82:fa:98:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EE:8C:7C:5F:98:F9:D0:FF:E5:BE:92:BE:78:86:B8:F5:61:C7:78
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/lu6MfF-Y-dD_5b6SvniGuPVhx3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.59.0/24
178.216.40.0/21
IPv6:
2001:67c:778::/48
2001:7f8:5b::/48
Signature Algorithm: sha256WithRSAEncryption
c0:ce:f1:83:b7:a0:49:d5:7e:2c:91:74:4d:f6:fc:46:b0:bc:
fa:28:04:1f:d4:3f:73:93:1c:f4:75:7e:da:52:99:18:8b:0f:
d4:f7:e2:c2:7b:71:29:7a:f0:e2:a6:88:1f:2a:aa:61:54:07:
dd:fd:0a:c0:0c:6a:dc:64:15:64:45:0e:b3:bf:31:c2:82:34:
8f:0a:4e:71:e8:1d:33:d2:be:77:9d:cd:61:79:41:14:c4:b1:
ca:6f:c4:5b:0e:37:f4:bb:bc:33:e6:58:ec:a8:a0:a0:87:56:
fd:d0:ae:93:cf:c1:2b:9c:99:0f:b4:ff:79:9a:51:33:d8:ca:
4e:4c:0e:f9:b2:21:85:e7:16:1b:44:3e:05:6d:1a:5b:07:c7:
28:cd:1e:f9:15:04:0a:7a:9b:4f:cb:78:33:fe:cf:37:35:a6:
fc:ea:79:02:8e:38:3b:c0:40:3a:c7:b8:9d:ab:05:69:49:7c:
af:8c:07:62:70:b7:6b:7a:22:6a:05:eb:98:40:8b:e8:7f:6d:
a2:07:8c:74:94:fc:dc:f2:44:84:02:27:0c:cf:9e:71:5a:12:
86:a6:8f:53:21:10:f8:7b:fa:d1:2c:6a:69:c6:57:dc:9c:31:
6d:a2:a8:81:07:d6:6b:b5:d9:37:72:62:b5:4e:71:0c:db:b7:
e4:e1:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:32 2025 by rpki-client