Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/R2sdJYM0bzL1JWcocw5xOqVf2-o.roa
File: R2sdJYM0bzL1JWcocw5xOqVf2-o.roa (raw, json)
Hash identifier: UVs9ACpirVYwK+GmgA9ofE7RMTKKebnzws60nJ7ZSRY=
Subject key identifier: 47:6B:1D:25:83:34:6F:32:F5:25:67:28:73:0E:71:3A:A5:5F:DB:EA
Certificate issuer: /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial: 01941F8C0E0A33D4FE600626D292FCE980DB
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/R2sdJYM0bzL1JWcocw5xOqVf2-o.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50427
IP address blocks: 176.116.184.0/21 maxlen: 21
176.116.184.0/22 maxlen: 22
176.116.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0e:0a:33:d4:fe:60:06:26:d2:92:fc:e9:80:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=476b1d2583346f32f5256728730e713aa55fdbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:24:3b:a9:11:9a:c8:60:cf:34:d7:3a:18:
16:c0:4f:75:7e:75:80:d7:89:ce:c9:c9:73:ec:f7:
d9:6c:53:94:12:c1:21:e1:2b:9d:7f:a4:d9:3b:57:
80:41:bb:5f:78:18:e8:03:92:ff:25:ca:ac:7e:3e:
94:08:12:2b:3e:0e:f3:eb:b6:4e:d8:5b:89:60:26:
44:09:44:f2:91:79:97:5f:84:e0:ba:06:76:c5:9e:
fb:50:78:49:5f:d4:9f:fd:9d:ce:61:94:7c:c2:3d:
99:70:dd:c9:93:59:69:c7:3d:00:51:df:f8:9a:82:
c1:9b:80:cf:aa:2d:8a:e2:5c:07:cf:0c:62:bf:23:
36:91:15:25:07:54:62:36:31:38:5b:5c:a1:57:4b:
8d:70:69:b5:96:6b:88:7e:97:23:98:74:90:f9:a4:
ba:f1:15:83:76:84:94:52:62:df:ff:43:95:17:0b:
78:30:97:76:63:58:d4:6a:c2:3a:ce:18:4b:b6:06:
66:a0:2f:14:23:78:27:a0:84:68:eb:b2:4b:4d:1e:
d3:39:b5:9f:4a:77:3c:b2:9d:42:67:b4:9c:0f:4b:
6f:4e:95:92:7f:6d:1b:ee:46:0c:23:76:6f:8b:95:
88:e9:74:68:7b:1d:bc:9d:8a:e9:39:ac:e5:76:0e:
a4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6B:1D:25:83:34:6F:32:F5:25:67:28:73:0E:71:3A:A5:5F:DB:EA
X509v3 Authority Key Identifier:
keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/R2sdJYM0bzL1JWcocw5xOqVf2-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.184.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:c7:f3:20:c4:17:79:10:89:34:a7:e8:f8:3e:50:32:03:12:
78:fb:7b:4f:e4:70:ee:29:f8:c0:e0:e4:4b:b8:bc:06:83:3d:
3a:0d:30:28:41:f3:f4:c6:f4:b6:d0:98:22:09:9e:9d:9f:50:
b0:67:24:fc:10:6d:90:f9:9a:73:a5:93:7b:f9:ff:b2:a5:f8:
a0:cd:25:c3:93:03:2f:b3:25:69:eb:f3:a8:59:d3:dc:e8:02:
d0:77:c7:ea:5e:99:37:7e:7e:90:eb:fc:2a:6a:9c:88:37:5a:
ed:06:bc:1b:46:2f:df:8f:9c:17:bc:1c:11:03:5a:21:48:a1:
f7:d3:04:62:df:38:62:36:cd:bf:c9:1b:5f:34:d6:58:56:b0:
79:41:e8:10:5b:89:5f:48:fd:8e:12:c2:0e:b0:ba:7a:79:d6:
73:f8:80:d4:67:aa:6a:46:13:4d:78:5e:c2:72:2a:00:7f:51:
09:76:91:ef:d4:1b:91:4c:5b:71:46:d8:4a:39:57:89:06:a3:
de:01:35:fa:d0:80:9c:92:4c:dd:84:0e:84:0a:ad:d0:c4:95:
f6:e3:4c:1e:73:ff:94:32:88:58:d9:34:64:31:97:e7:c8:f4:
7c:a5:d3:2b:0f:64:99:cb:b9:79:07:72:bc:90:d1:f1:39:e4:
24:a8:fd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:13 2025 by rpki-client