Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/be47b9-bd9f-4165-a871-4af0c4bdba6c/1/hGpjWNvIy6_mEg1xaXDuQyW_hkQ.roa
File: hGpjWNvIy6_mEg1xaXDuQyW_hkQ.roa (raw, json)
Hash identifier: a6ThUPukxbBhYTtVXrDiNGzc/6NOXGpUNhAbQUjYsy4=
Subject key identifier: 84:6A:63:58:DB:C8:CB:AF:E6:12:0D:71:69:70:EE:43:25:BF:86:44
Certificate issuer: /CN=8f3878e6b0f3b10e5f30f44aeb9d4553ed80823c
Certificate serial: 0185C6A76DEC0A1FA70EE29DA375F300B9BE
Authority key identifier: 8F:38:78:E6:B0:F3:B1:0E:5F:30:F4:4A:EB:9D:45:53:ED:80:82:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzh45rDzsQ5fMPRK651FU-2Agjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/be47b9-bd9f-4165-a871-4af0c4bdba6c/1/hGpjWNvIy6_mEg1xaXDuQyW_hkQ.roa
Signing time: Wed 18 Jan 2023 20:52:19 +0000
ROA not before: Wed 18 Jan 2023 20:52:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60699
IP address blocks: 176.97.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:a7:6d:ec:0a:1f:a7:0e:e2:9d:a3:75:f3:00:b9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3878e6b0f3b10e5f30f44aeb9d4553ed80823c
Validity
Not Before: Jan 18 20:52:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=846a6358dbc8cbafe6120d716970ee4325bf8644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:94:7c:de:46:e7:fc:e8:34:db:b8:db:0d:50:
75:14:69:42:51:7f:a5:ba:1d:88:c2:b0:76:2a:43:
8a:d0:53:df:a6:03:99:80:0c:9e:82:8f:23:84:ca:
17:c6:15:99:81:b7:43:9c:46:ce:c9:cd:2d:d3:df:
09:a0:e9:ae:34:68:1a:e0:6d:06:b4:6b:ae:5d:42:
d6:28:32:a5:68:a6:7f:6e:1a:e2:5a:72:c9:1c:7e:
b6:b0:d1:b6:6a:00:fb:c1:34:52:25:cd:19:b8:87:
ec:ad:d5:72:6e:98:d2:e9:05:05:36:f5:1c:b1:5d:
42:59:73:5e:1c:fd:c6:9b:b6:45:20:14:a5:3f:34:
4a:66:4c:c1:35:f2:f5:00:cd:6f:a9:bc:e8:9e:02:
45:d0:bb:51:41:b7:b8:d2:9f:ee:f4:0c:bb:de:e0:
8f:04:16:99:5e:d0:ad:e5:75:39:bf:19:fd:b2:e1:
03:13:11:72:b0:4d:b1:41:07:14:17:e2:6d:5e:e9:
f9:c0:23:c4:81:8b:11:09:9e:e0:a9:cb:cb:4e:92:
b6:70:87:dc:d8:62:d4:27:c7:6b:7e:ad:c9:09:ad:
d4:d6:bb:dc:86:5c:48:6d:bf:9a:11:01:e8:50:36:
28:4d:6a:50:e8:2e:f8:ec:b3:0e:4c:32:f7:08:8a:
fd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6A:63:58:DB:C8:CB:AF:E6:12:0D:71:69:70:EE:43:25:BF:86:44
X509v3 Authority Key Identifier:
keyid:8F:38:78:E6:B0:F3:B1:0E:5F:30:F4:4A:EB:9D:45:53:ED:80:82:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzh45rDzsQ5fMPRK651FU-2Agjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/be47b9-bd9f-4165-a871-4af0c4bdba6c/1/hGpjWNvIy6_mEg1xaXDuQyW_hkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/be47b9-bd9f-4165-a871-4af0c4bdba6c/1/jzh45rDzsQ5fMPRK651FU-2Agjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.205.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7d:5f:5a:6b:21:a0:d2:85:d4:40:34:e9:3e:b8:1b:fd:a0:
5d:fd:5d:eb:c1:ae:0b:de:6e:86:55:06:d1:c9:9d:83:8e:1b:
db:5a:74:5c:44:ad:f9:bc:25:f6:2f:b0:74:3a:61:64:4c:e2:
43:b0:b3:70:28:d9:65:9b:ec:b0:d2:e8:e3:3e:c4:46:01:a4:
b7:fc:36:f6:a9:fc:b7:f2:0a:02:37:3a:c5:61:96:e9:5c:c5:
40:94:6e:3d:71:7c:20:f4:58:9a:68:dd:29:53:d4:6a:45:dd:
db:46:d4:51:13:67:a2:5d:11:24:8d:42:19:43:d6:28:28:90:
54:f9:89:87:3e:43:17:24:c8:3e:e0:c2:77:27:bf:2a:a7:3e:
74:ce:df:33:24:64:da:01:91:38:f4:29:fd:36:e5:86:1e:8d:
16:81:66:a0:3f:7c:4f:a4:4e:5d:1b:48:eb:82:3f:7e:39:20:
25:eb:64:bf:d9:3a:a8:11:ab:3d:3e:5b:ae:50:36:b4:eb:ce:
f5:f7:a3:35:0f:d4:c4:b3:19:b5:fa:26:d2:c0:d6:2e:08:8d:
8a:80:94:f6:1d:0b:95:4c:79:de:48:d6:3c:b9:69:1e:73:d3:
86:53:59:94:f8:0e:b9:d5:97:bd:4f:cc:2e:93:5a:f5:28:c6:
97:49:2f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:37:58 2025 by rpki-client