Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/6nka26L-7vbT-huqQ7zH80Ad2_Q.roa
File: 6nka26L-7vbT-huqQ7zH80Ad2_Q.roa (raw, json)
Hash identifier: bi36P0sQvSkI3t0S3Th1jO23VxQKQmTqbcjBaO1g00A=
Subject key identifier: EA:79:1A:DB:A2:FE:EE:F6:D3:FA:1B:AA:43:BC:C7:F3:40:1D:DB:F4
Certificate issuer: /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial: 019428261ADADA7F25422D1AE31F97ADF9F4
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/6nka26L-7vbT-huqQ7zH80Ad2_Q.roa
Signing time: Thu 02 Jan 2025 17:52:53 +0000
ROA not before: Thu 02 Jan 2025 17:52:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39422
IP address blocks: 176.108.232.0/21 maxlen: 21
176.108.232.0/22 maxlen: 22
176.108.232.0/23 maxlen: 23
176.108.236.0/22 maxlen: 22
176.108.236.0/24 maxlen: 24
176.108.238.0/23 maxlen: 23
195.182.202.0/23 maxlen: 23
195.182.202.0/24 maxlen: 24
195.182.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:1a:da:da:7f:25:42:2d:1a:e3:1f:97:ad:f9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Validity
Not Before: Jan 2 17:52:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea791adba2feeef6d3fa1baa43bcc7f3401ddbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:74:7c:64:ce:d6:ad:93:9c:51:34:cd:c3:
86:bc:59:44:3b:0e:ae:72:f7:d7:9d:bf:2e:86:5d:
bf:eb:16:04:ab:31:f0:82:1e:8a:88:b4:6b:b2:76:
41:09:89:a2:40:87:c8:02:83:8d:b3:57:46:4d:22:
02:25:51:a9:11:9e:30:26:7f:d3:3a:c1:a0:c9:09:
60:b5:48:8f:c6:2d:52:c2:c4:fc:30:a6:89:d4:96:
5e:dd:7c:ca:b1:6c:e1:79:db:a1:f0:b5:fb:c9:2f:
06:23:d0:df:cf:f6:fa:2e:dc:66:ca:6b:fe:ee:c0:
4a:ef:91:d8:2d:c8:2d:d4:65:70:87:f0:36:4c:8e:
5b:ac:93:c9:6a:41:f9:45:96:50:88:ba:88:4f:4a:
ac:85:5b:70:c2:d5:01:fe:29:d5:98:ee:9b:f7:2e:
89:e7:ac:f0:32:1f:6e:71:7d:b1:85:ca:1b:8e:71:
15:43:76:87:8f:aa:bd:9a:a3:5c:c7:3a:4d:ee:62:
b2:0f:72:d3:b4:14:f4:62:0b:32:1f:06:15:8b:33:
b0:8d:91:db:23:aa:84:99:ba:c2:6e:c1:2a:65:a7:
d0:16:39:c5:e3:68:ec:50:10:3c:4b:01:05:61:5e:
2b:e6:43:a7:16:f2:91:86:f8:b9:82:9c:b8:0a:09:
f5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:79:1A:DB:A2:FE:EE:F6:D3:FA:1B:AA:43:BC:C7:F3:40:1D:DB:F4
X509v3 Authority Key Identifier:
keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/6nka26L-7vbT-huqQ7zH80Ad2_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.232.0/21
195.182.202.0/23
Signature Algorithm: sha256WithRSAEncryption
be:9b:3a:67:98:60:95:3c:b2:aa:a9:93:9f:37:d7:86:6c:35:
1d:33:1c:38:e1:8e:b5:bf:cb:e4:3c:0f:88:ce:bd:00:6f:b0:
71:38:1d:1f:7f:b0:7d:26:05:54:f0:f6:ea:e7:1d:55:7c:87:
a7:6c:22:4b:d3:f9:db:d7:6d:9e:95:f5:b9:3e:62:23:02:ff:
6e:5b:ae:aa:6f:d0:25:f5:05:d8:01:53:8b:94:b2:f1:df:26:
28:a0:67:24:b1:6d:14:a0:d0:75:36:e6:39:89:b3:1e:53:d2:
5e:4b:ce:d0:9b:32:09:f9:a6:39:c7:bb:77:fa:3e:ba:3b:e7:
56:4c:9d:cd:c0:7f:b3:92:dc:5f:54:3f:34:a6:16:8b:08:30:
44:b1:a2:22:19:e8:b9:f2:e4:76:54:17:38:b4:cd:d2:05:d2:
44:22:9d:5f:6d:4b:7f:35:59:77:b7:f9:45:e7:7d:45:c5:23:
ee:d7:37:52:7d:1e:f3:4c:09:6c:e7:aa:d2:62:6f:47:ac:e3:
88:ea:87:36:d5:db:c9:87:26:dd:e6:27:df:a3:f9:af:10:cb:
3d:87:2d:37:b6:70:30:f0:a2:5b:0e:29:35:2b:47:fa:82:88:
0a:3f:99:f9:20:1f:c4:e8:2b:ae:78:62:a8:53:b9:8d:ce:27:
1e:e2:5b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:48:48 2025 by rpki-client