Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/OTaHjIMpLxFWuQAZXA9yQAI67UI.roa
File: OTaHjIMpLxFWuQAZXA9yQAI67UI.roa (raw, json)
Hash identifier: gI7NUDWMZFB51O4j+1WU/esMOiyEMduqfS9pjZifpno=
Subject key identifier: 39:36:87:8C:83:29:2F:11:56:B9:00:19:5C:0F:72:40:02:3A:ED:42
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 0A4F9A
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/OTaHjIMpLxFWuQAZXA9yQAI67UI.roa
Signing time: Wed 22 Jun 2022 06:02:45 +0000
ROA not before: Wed 22 Jun 2022 06:02:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58332
IP address blocks: 176.120.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675738 (0xa4f9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jun 22 06:02:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3936878c83292f1156b900195c0f7240023aed42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:ff:e2:5b:3a:a8:c1:43:a8:a1:68:2a:e1:
41:8b:0a:e6:3b:23:d7:8a:c7:77:67:34:04:a3:27:
b3:a3:bf:86:b6:9c:1f:40:c0:f5:71:11:9d:27:c2:
0c:79:e7:1f:dc:e2:05:30:ba:6a:21:4e:84:08:8b:
97:85:ac:4f:08:07:e3:59:09:03:c4:ee:1c:e7:30:
3c:92:5d:e0:33:fa:7b:5c:4f:e8:15:85:6a:a7:65:
28:b6:4f:12:6e:44:53:b4:cd:73:9a:8f:75:31:e7:
34:cb:52:02:00:f5:27:5e:9c:cd:0f:f6:c2:ff:30:
b3:6b:6f:b7:4a:0d:82:00:92:8c:d6:a5:50:92:b0:
64:42:30:3d:6c:89:b8:bd:c1:30:4e:36:56:8a:9e:
a4:e5:ff:1c:b0:d9:95:c5:82:7c:16:35:2a:da:53:
fb:18:97:a4:6d:f8:16:b5:79:db:c6:3b:49:74:4e:
d6:4d:51:58:c5:a4:70:b8:3d:29:b8:dc:7c:f1:06:
5b:5c:92:c7:8f:7b:3a:e1:ef:7c:b5:cd:50:d6:79:
1b:c6:d4:98:03:fb:b8:42:c4:a5:e8:e1:90:46:01:
b0:3c:e1:82:fc:b8:9b:7c:22:b2:f8:0c:c0:20:aa:
06:ce:aa:50:6b:9f:34:a8:88:ee:f5:27:63:82:88:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:36:87:8C:83:29:2F:11:56:B9:00:19:5C:0F:72:40:02:3A:ED:42
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/OTaHjIMpLxFWuQAZXA9yQAI67UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.104.0/24
Signature Algorithm: sha256WithRSAEncryption
91:fb:d2:14:e9:32:bc:cc:4a:40:85:38:1e:8f:26:8b:62:bb:
f6:c5:e9:b3:6c:f4:98:e0:78:d2:58:68:71:1a:4b:75:eb:44:
17:95:d7:71:42:fb:f8:fb:fe:9f:33:6e:48:f5:38:b4:c6:42:
d3:ce:18:79:97:76:d2:d9:19:4b:77:8c:d7:2d:0b:75:bb:12:
4e:ec:7b:31:cd:10:8d:b4:90:59:78:9a:ec:2d:a2:ba:ac:59:
44:29:92:d9:3a:75:4b:d1:70:c0:59:5c:5e:5a:6e:7f:b3:90:
6a:b2:f1:f8:fa:14:60:81:9f:a2:7d:e8:57:e2:09:34:b1:c0:
f3:d5:e1:3e:ae:03:bd:21:28:22:98:da:f7:87:81:31:be:19:
b4:77:d2:27:c5:b9:3d:a1:02:3f:fe:0f:a9:da:0e:a1:65:ec:
39:04:cc:24:cf:ff:88:4c:ff:89:f3:af:e9:d0:1e:65:92:73:
5f:43:a0:f7:69:2a:53:1d:67:5f:1f:f8:e9:2c:fd:14:c1:b7:
f8:71:f9:e0:7a:a8:c8:a9:da:48:b7:12:28:74:12:01:c2:40:
61:44:86:4f:fe:a8:92:0b:13:4b:98:b4:e7:a0:4d:d3:bb:39:
0d:17:c2:cb:a3:63:7b:47:ee:65:4a:52:cf:04:9f:5a:a4:47:
52:3f:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:23:15 2025 by rpki-client