Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/70f358-ba41-452f-8640-81dfdbd64c01/1/CeiKGXLEgbv3_eccr9mTXYo7_d0.roa
File: CeiKGXLEgbv3_eccr9mTXYo7_d0.roa (raw, json)
Hash identifier: 2o96AkjPLjdWYIJD0HREbiqz34WV/mGn2Tz93RtfC5A=
Subject key identifier: 09:E8:8A:19:72:C4:81:BB:F7:FD:E7:1C:AF:D9:93:5D:8A:3B:FD:DD
Certificate issuer: /CN=7ba513f38cceef4bc6332099a2d4fa08c25a8403
Certificate serial: 0189654A8CCA71FC65A403E1EEC3B6F6B499
Authority key identifier: 7B:A5:13:F3:8C:CE:EF:4B:C6:33:20:99:A2:D4:FA:08:C2:5A:84:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6UT84zO70vGMyCZotT6CMJahAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/70f358-ba41-452f-8640-81dfdbd64c01/1/CeiKGXLEgbv3_eccr9mTXYo7_d0.roa
Signing time: Mon 17 Jul 2023 19:18:51 +0000
ROA not before: Mon 17 Jul 2023 19:18:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 176.116.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:8c:ca:71:fc:65:a4:03:e1:ee:c3:b6:f6:b4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba513f38cceef4bc6332099a2d4fa08c25a8403
Validity
Not Before: Jul 17 19:18:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09e88a1972c481bbf7fde71cafd9935d8a3bfddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:1b:f3:13:4d:71:a0:95:34:89:04:8e:5f:
c3:15:39:fd:32:8b:ea:c8:7e:24:de:67:49:59:ce:
dd:b0:68:f7:7d:cb:91:c6:27:e7:6b:ac:ac:90:0e:
45:ac:7e:66:42:dc:79:5a:78:76:b8:b2:4a:92:12:
f4:91:0f:dc:de:33:cd:53:39:dd:68:7c:57:c2:ae:
74:a4:0a:1d:82:54:ba:a3:5f:b3:25:ac:a5:fd:b7:
75:8c:0d:96:a5:56:8c:e5:f0:9e:e4:0b:9b:43:67:
50:0a:4d:07:7f:58:eb:99:a1:9c:1c:c2:1b:08:72:
15:a0:a4:17:dd:dd:65:91:60:1b:e3:ff:80:da:75:
5f:e4:11:2b:21:86:4e:d8:1e:3a:1a:b0:fb:e5:57:
f3:d7:53:0a:48:9a:b8:ca:f6:c8:1a:e8:11:2d:81:
2d:7a:43:59:28:9a:8d:de:f5:94:fa:60:05:81:75:
e4:24:4b:ec:e4:a7:b4:03:d7:96:4d:4a:12:51:23:
8f:ff:e5:f3:d8:48:a7:4e:44:09:48:bb:7f:49:60:
d8:fb:a9:10:a1:5a:1f:bc:5c:89:c1:4e:32:b1:53:
3d:1d:7b:ad:35:3c:5f:10:83:d0:d1:e7:d5:d0:33:
6a:88:da:a1:cb:d2:c0:a5:d1:00:6c:a0:0d:49:3b:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E8:8A:19:72:C4:81:BB:F7:FD:E7:1C:AF:D9:93:5D:8A:3B:FD:DD
X509v3 Authority Key Identifier:
keyid:7B:A5:13:F3:8C:CE:EF:4B:C6:33:20:99:A2:D4:FA:08:C2:5A:84:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6UT84zO70vGMyCZotT6CMJahAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/70f358-ba41-452f-8640-81dfdbd64c01/1/CeiKGXLEgbv3_eccr9mTXYo7_d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/70f358-ba41-452f-8640-81dfdbd64c01/1/e6UT84zO70vGMyCZotT6CMJahAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.24.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:05:5c:aa:e3:81:0d:5e:47:95:14:c0:4b:2f:70:1c:21:8b:
0e:8d:df:d5:93:c7:67:38:2b:bc:1b:56:c1:06:10:01:f9:f6:
dd:12:c0:60:64:c2:0d:72:e8:bd:be:fa:39:48:e6:d5:ba:59:
f6:fd:3b:92:2e:e6:4f:44:10:61:70:1f:82:59:ca:73:a4:df:
c3:61:75:e4:2a:24:2a:cf:8c:04:ce:0a:5a:79:82:19:a9:b6:
e6:d8:52:f2:b2:06:de:2e:7f:d4:17:5e:1c:4e:e9:07:f4:72:
3e:4b:3e:ef:dd:ca:81:ac:0a:82:d4:35:fb:76:02:e8:36:c0:
c6:9e:44:fd:94:cd:75:2e:f0:3b:e0:60:d4:af:fa:5a:b1:68:
90:bd:3a:eb:07:2c:62:8c:70:16:62:ad:11:ae:b6:6f:97:30:
0c:ec:10:5e:af:82:16:fe:45:a5:64:13:55:6c:ac:fd:44:9d:
00:d9:de:5d:75:08:00:66:42:c2:ce:68:da:de:3f:ee:55:58:
e7:18:5c:7d:dc:ee:62:b4:00:f9:ea:32:61:b5:86:60:9c:bc:
cc:89:23:a0:82:1c:64:75:2f:87:40:c2:84:04:5c:62:68:cf:
8b:a1:56:b3:47:34:ca:5b:72:78:93:1d:cb:84:d5:e6:cb:ae:
81:83:63:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:47:17 2025 by rpki-client