Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/jSx6lr1ClHwvX34A8pMwt0RR9b8.roa
File: jSx6lr1ClHwvX34A8pMwt0RR9b8.roa (raw, json)
Hash identifier: 8qaP26J8XC7Mhz3DA86mgKU6vMfpb43EGZW/j662nEI=
Subject key identifier: 8D:2C:7A:96:BD:42:94:7C:2F:5F:7E:00:F2:93:30:B7:44:51:F5:BF
Certificate issuer: /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial: 01942444AFEB9B31604FFE85716642EA256F
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/jSx6lr1ClHwvX34A8pMwt0RR9b8.roa
Signing time: Wed 01 Jan 2025 23:47:48 +0000
ROA not before: Wed 01 Jan 2025 23:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213754
IP address blocks: 176.103.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:af:eb:9b:31:60:4f:fe:85:71:66:42:ea:25:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d2c7a96bd42947c2f5f7e00f29330b74451f5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:1f:07:4b:15:43:8f:fb:79:f0:cc:c4:d0:
0d:a1:95:61:5b:23:f3:04:b6:7e:e0:a3:8e:0a:63:
fe:84:58:98:e4:89:29:bf:29:32:e0:57:1d:93:08:
de:b1:f5:5e:c4:9e:92:e9:b2:10:84:7f:46:8a:83:
7a:1c:17:59:07:7c:54:d7:f2:05:d3:d7:15:4c:40:
b3:36:46:f7:6f:dc:c0:0e:73:fd:20:0c:d6:50:3b:
7f:8c:d2:31:6e:01:35:bf:19:4c:64:d3:dd:26:32:
84:33:7e:30:ae:25:1f:f7:48:25:18:fa:e1:e5:5b:
ff:b7:88:51:79:92:47:02:f6:ec:64:94:6b:78:82:
db:11:3a:e8:97:67:f8:98:3a:79:b8:8e:58:49:f2:
1a:42:94:64:6b:70:47:a7:d8:6c:e8:ec:ca:56:19:
5c:fc:df:61:23:a4:5b:ad:fb:f1:75:23:00:be:8b:
be:d6:14:44:19:1c:e0:6b:6a:9e:b0:a7:b0:75:9f:
04:56:65:fb:6a:4f:48:25:e9:3b:4c:05:17:02:a2:
bc:b0:06:06:36:ea:25:be:dc:71:9f:09:c2:06:96:
a5:b8:d6:2c:bb:cb:80:89:10:9b:20:1b:47:2a:f8:
97:2b:90:18:9a:07:15:ff:95:b1:27:82:dd:40:d5:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2C:7A:96:BD:42:94:7C:2F:5F:7E:00:F2:93:30:B7:44:51:F5:BF
X509v3 Authority Key Identifier:
keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/jSx6lr1ClHwvX34A8pMwt0RR9b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.112.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c5:df:2e:fc:66:02:07:7d:fa:f1:47:cb:36:33:27:3f:f6:
7f:05:d0:b7:62:09:82:e8:53:3d:87:41:9f:9c:b6:50:10:88:
49:45:55:39:53:49:f4:9f:c3:d9:6d:71:81:23:64:66:59:aa:
af:72:48:c6:87:69:57:1a:72:19:72:d4:ee:1a:3c:16:f4:ec:
54:65:97:cc:f3:80:9e:54:42:e9:f8:2f:a3:da:ab:86:9f:02:
d6:f8:97:bf:a3:87:4c:12:d6:9a:df:ff:10:2d:b4:55:0a:05:
ce:d7:dc:71:da:79:15:47:4a:19:23:91:d4:42:61:9e:99:4b:
52:f8:73:be:01:5c:54:b6:01:b1:85:bc:96:c6:93:a0:63:b1:
ab:8f:52:fc:15:95:49:8b:71:ec:8c:b6:b5:20:a5:9e:78:1e:
8e:9c:57:40:1f:22:51:ee:45:30:da:94:17:3d:da:35:78:ae:
ad:a7:99:04:57:72:5c:ce:9b:40:31:0c:5a:20:89:f5:c5:28:
17:ee:83:2d:49:c2:c1:b2:19:4d:77:87:49:57:ee:79:65:52:
7d:a0:3e:8a:47:e1:45:6c:09:af:73:f0:97:bf:9d:1d:c9:e1:
d5:ad:41:9b:d5:1f:07:2d:9d:d3:16:04:9f:ee:09:cb:4f:46:
b7:6b:8e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:20:08 2025 by rpki-client