Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/49B0SV3aq_qlfvTwlp8UE5CobPo.roa
File: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (raw, json)
Hash identifier: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=
Subject key identifier: E3:D0:74:49:5D:DA:AB:FA:A5:7E:F4:F0:96:9F:14:13:90:A8:6C:FA
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 0194228D1895E593F9D2C065C80082176E9B
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/49B0SV3aq_qlfvTwlp8UE5CobPo.roa
Signing time: Wed 01 Jan 2025 15:47:39 +0000
ROA not before: Wed 01 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48276
IP address blocks: 176.96.186.0/24 maxlen: 24
176.96.187.0/24 maxlen: 24
176.96.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:18:95:e5:93:f9:d2:c0:65:c8:00:82:17:6e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jan 1 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3d074495ddaabfaa57ef4f0969f141390a86cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:96:59:f2:61:a8:da:4c:01:e4:4c:8c:01:
4a:31:04:ab:f6:d3:4e:2c:86:c5:43:7c:d1:71:04:
59:f7:78:7f:23:9e:42:03:2c:23:bd:09:f6:6f:ba:
7b:a4:0c:5f:72:5b:d1:1b:4b:b3:24:1e:53:46:ca:
e2:e4:d2:51:da:4b:11:19:1c:68:11:1e:ba:e3:0f:
0e:ca:18:10:c2:29:3f:72:64:11:0c:ef:88:d8:0d:
62:c1:b0:4e:b6:a0:5a:99:73:45:20:32:b1:89:26:
f9:cd:33:f3:bc:dc:c4:d2:aa:b8:02:d3:51:6b:40:
78:e2:8b:12:a4:84:61:83:77:e3:97:b0:ce:d0:ea:
9a:b9:0e:98:20:3b:39:ae:a9:51:17:35:bf:9e:1a:
4d:b7:76:88:d2:04:32:2d:ed:25:d6:8b:3d:65:9e:
e0:bb:8a:f5:8a:a4:e8:91:80:eb:7b:52:a4:b7:21:
e2:ee:44:96:51:8c:d3:ab:01:b4:27:0e:6f:5d:c3:
e4:8d:56:92:2b:22:8d:ff:c7:19:d6:98:29:97:63:
74:4f:f2:4b:99:e6:44:38:ad:37:01:f8:07:8f:ca:
75:a2:77:1b:44:1c:c7:1c:8e:a8:fb:d7:8e:c1:fe:
8f:89:ce:81:e0:a0:c1:2b:71:e1:6c:cf:9e:a9:fe:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D0:74:49:5D:DA:AB:FA:A5:7E:F4:F0:96:9F:14:13:90:A8:6C:FA
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/49B0SV3aq_qlfvTwlp8UE5CobPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.186.0-176.96.188.255
Signature Algorithm: sha256WithRSAEncryption
23:db:44:fc:8c:77:0d:6b:3d:bc:d1:63:6e:cd:3e:b2:8f:3f:
47:95:8f:31:a1:28:68:3f:8b:2a:9b:6b:4b:34:a9:28:c4:fe:
d1:5d:9c:03:90:6f:a1:0c:44:1c:00:4a:69:29:a5:b4:a1:6d:
08:41:0c:db:60:11:1c:58:cb:a9:90:2d:75:f8:a8:cd:58:12:
15:37:00:c3:2e:9c:5b:ed:5d:8d:33:68:d4:6f:27:ff:85:3f:
07:ee:44:81:4c:83:15:28:04:a4:04:41:76:1d:7d:85:4a:4f:
30:df:0e:0a:8e:6b:08:39:3d:74:9b:db:b8:09:9f:87:8e:46:
e8:70:cd:89:b3:b7:eb:05:c1:1c:76:9e:ea:22:9c:27:a9:ef:
62:84:4e:df:2a:87:00:7c:83:33:94:35:dc:00:c2:5e:ea:4e:
e3:f1:a4:24:5a:38:30:ee:67:ab:02:eb:36:42:ba:68:d1:5b:
0b:44:ea:36:fa:c0:ec:99:f9:d7:0e:1f:65:07:88:d7:f0:f5:
ae:40:ad:41:28:c2:f8:7b:d4:10:c8:8e:c0:db:44:2e:97:7a:
9b:e6:23:9d:80:49:d4:d4:c4:e1:78:b1:1a:25:8e:0d:70:8b:
0c:4d:49:33:e2:55:f6:76:7f:a8:20:ed:75:d2:5a:75:a9:d4:
4a:63:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:38:17 2025 by rpki-client