Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/36HTuZWVYznRWr-Y9OyOjFMfg8o.roa
File: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (raw, json)
Hash identifier: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=
Subject key identifier: DF:A1:D3:B9:95:95:63:39:D1:5A:BF:98:F4:EC:8E:8C:53:1F:83:CA
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 019424B3FD4D46E40D937825CC1E97B255C2
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/36HTuZWVYznRWr-Y9OyOjFMfg8o.roa
Signing time: Thu 02 Jan 2025 01:49:23 +0000
ROA not before: Thu 02 Jan 2025 01:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57422
IP address blocks: 176.100.0.0/23 maxlen: 23
176.100.4.0/23 maxlen: 23
176.100.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fd:4d:46:e4:0d:93:78:25:cc:1e:97:b2:55:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfa1d3b995956339d15abf98f4ec8e8c531f83ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:0e:bf:53:5d:fd:3a:2b:39:32:80:c8:1b:
32:d1:e3:5d:a1:44:13:4d:5c:cb:3a:e1:ef:bf:ac:
1e:1e:11:65:19:91:16:04:32:a5:c4:c2:68:2c:3f:
ba:a9:dd:b2:cb:35:f3:de:c3:a7:b2:c5:9d:2d:de:
e5:40:f2:f1:10:a3:28:c9:93:00:9d:c2:0a:a5:cc:
21:c4:45:70:6d:6d:0c:69:a1:28:ea:14:65:32:ab:
d5:ac:e1:c0:9b:4e:90:27:9d:de:55:de:75:8e:7a:
85:ce:be:13:25:21:ed:80:45:f8:ad:96:14:9f:a3:
42:08:a0:40:d8:49:43:03:91:d1:2e:e3:61:85:38:
79:bf:18:c6:06:d0:ab:35:8c:37:e0:34:27:43:a3:
02:1c:a1:e8:af:8b:b7:ce:0d:15:2a:ca:40:42:11:
23:eb:7a:d9:ab:68:d1:af:d5:26:32:ce:2b:d8:a3:
be:e5:d1:85:6b:42:62:57:de:4d:b7:bf:11:29:32:
60:82:27:db:26:48:c4:b9:48:ee:bf:6f:37:cf:e7:
d1:9b:54:35:96:66:99:2d:51:78:98:47:fc:61:4f:
2b:f5:f9:2c:dc:eb:3a:1b:49:71:09:17:c7:b1:6f:
89:87:57:17:11:b2:47:f7:40:0a:da:53:65:e3:c6:
df:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A1:D3:B9:95:95:63:39:D1:5A:BF:98:F4:EC:8E:8C:53:1F:83:CA
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/36HTuZWVYznRWr-Y9OyOjFMfg8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.0.0/23
176.100.4.0/23
176.100.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:94:a2:58:52:dc:84:06:fe:a4:02:4e:5b:19:27:9f:46:f4:
28:84:a1:f6:f9:d2:a7:cd:fb:12:b2:c2:60:c8:02:07:8d:87:
5a:98:e9:d0:2a:91:6b:86:be:8d:11:78:e1:da:8a:a9:6b:c6:
36:c5:ad:67:60:7e:b0:36:50:87:cf:fe:24:b5:1d:78:84:f9:
4b:90:63:02:a8:38:dc:3c:62:a0:fa:86:7a:eb:45:c0:03:af:
01:19:59:3a:3a:ce:a5:27:3e:bd:d0:16:4e:37:3b:25:0b:c6:
8d:6b:5e:fe:7c:28:03:00:c0:82:44:8e:58:5e:69:b2:0f:c8:
6f:99:cb:a6:2d:c1:63:e2:99:d0:4f:f8:d6:32:4d:0e:06:fc:
0b:8a:40:72:fc:d9:35:7e:d3:f9:f9:30:c8:d2:2c:ff:f9:b8:
e7:97:e0:06:b3:ad:45:f1:17:53:5d:9a:27:e1:75:cd:3a:53:
02:33:cb:2d:3b:69:8d:40:32:1a:51:7b:78:1e:be:c8:78:ac:
ba:a0:43:bf:2c:93:e4:ac:1b:4f:f5:8a:ba:23:dc:f8:e6:cd:
e0:e6:bf:74:e3:66:d2:78:9f:6e:61:2a:fd:51:1a:c7:56:0c:
df:8e:62:93:f4:ed:22:a4:4e:e1:b3:f3:0e:ae:1c:53:0e:47:
c5:bb:1e:20
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQks/1NRuQNk3glzB6XslXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjM3NDY1N2Y1NzA3OGYzY2EyYzcxMTA5ZDM1OTI3YzIy
NDg2ODEwHhcNMjUwMTAyMDE0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmExZDNiOTk1OTU2MzM5ZDE1YWJmOThmNGVjOGU4YzUzMWY4M2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF4Ov1Nd/TorOTKAyBsy0eNdoUQT
TVzLOuHvv6weHhFlGZEWBDKlxMJoLD+6qd2yyzXz3sOnssWdLd7lQPLxEKMoyZMA
ncIKpcwhxEVwbW0MaaEo6hRlMqvVrOHAm06QJ53eVd51jnqFzr4TJSHtgEX4rZYU
n6NCCKBA2ElDA5HRLuNhhTh5vxjGBtCrNYw34DQnQ6MCHKHor4u3zg0VKspAQhEj
63rZq2jRr9UmMs4r2KO+5dGFa0JiV95Nt78RKTJggifbJkjEuUjuv283z+fRm1Q1
lmaZLVF4mEf8YU8r9fks3Os6G0lxCRfHsW+Jh1cXEbJH90AK2lNl48bf4wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFN+h07mVlWM50Vq/mPTsjoxTH4PKMB8GA1UdIwQY
MBaAFM/zdGV/VwePPKLHEQnTWSfCJIaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEt
M2VhMmViZmU4NzA3LzEvMzZIVHVaV1ZZem5SV3ItWTlPeU9qRk1mZzhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEtM2VhMmViZmU4NzA3
LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBsGQAAwQB
sGQEAwQAsGQHMA0GCSqGSIb3DQEBCwUAA4IBAQC1lKJYUtyEBv6kAk5bGSefRvQo
hKH2+dKnzfsSssJgyAIHjYdamOnQKpFrhr6NEXjh2oqpa8Y2xa1nYH6wNlCHz/4k
tR14hPlLkGMCqDjcPGKg+oZ660XAA68BGVk6Os6lJz690BZONzslC8aNa17+fCgD
AMCCRI5YXmmyD8hvmcumLcFj4pnQT/jWMk0OBvwLikBy/Nk1ftP5+TDI0iz/+bjn
l+AGs61F8RdTXZon4XXNOlMCM8stO2mNQDIaUXt4Hr7IeKy6oEO/LJPkrBtP9Yq6
I9z45s3g5r9042bSeJ9uYSr9URrHVgzfjmKT9O0ipE7hs/MOrhxTDkfFux4g
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:11:52 2025 by rpki-client