Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/bADe8xiQTt_A88q5kXJmeUt-iHk.roa
File: bADe8xiQTt_A88q5kXJmeUt-iHk.roa (raw, json)
Hash identifier: u6CJ9DSqw8LvcUhQI42InBQIP+wN1G/r5EtVs1sq02o=
Subject key identifier: 6C:00:DE:F3:18:90:4E:DF:C0:F3:CA:B9:91:72:66:79:4B:7E:88:79
Certificate issuer: /CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Certificate serial: 019425FD41F860741014BDE309DE9251BBAF
Authority key identifier: 8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/bADe8xiQTt_A88q5kXJmeUt-iHk.roa
Signing time: Thu 02 Jan 2025 07:49:02 +0000
ROA not before: Thu 02 Jan 2025 07:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210756
IP address blocks: 176.57.66.0/24 maxlen: 24
176.57.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:41:f8:60:74:10:14:bd:e3:09:de:92:51:bb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Validity
Not Before: Jan 2 07:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c00def318904edfc0f3cab9917266794b7e8879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:10:f7:4d:90:c4:de:af:cc:b4:7c:3f:5e:
81:2a:fe:fb:fa:cc:02:a5:29:d8:7e:60:10:eb:20:
4b:dd:ea:42:ed:06:12:89:c1:bf:a4:6e:81:39:e0:
05:f5:bf:23:d1:7c:db:8c:8f:f0:c0:ea:05:97:a2:
b3:71:06:ef:3e:f1:4b:c2:93:1a:0c:21:e1:32:fa:
f2:a4:c1:e3:ef:64:09:28:51:99:f0:ef:86:fd:ae:
72:54:cf:71:a6:a2:28:dc:50:5d:a1:66:5e:cb:1e:
3f:ef:e4:4c:cc:5b:f9:06:89:8b:f7:9f:57:26:6d:
f8:77:35:0a:25:0f:5e:08:df:63:14:85:d4:9c:6d:
fa:2d:c2:1a:ba:ca:f9:12:97:96:79:30:dc:61:32:
05:9c:a5:e9:64:34:7e:2f:d2:7a:27:6a:28:20:4d:
58:78:c5:84:91:9a:7b:7f:11:6b:25:b8:bc:4e:97:
bb:2c:3a:cd:09:a1:2a:2c:b6:cc:bf:01:f6:63:37:
fe:e0:e4:d2:ad:ed:e2:41:80:bf:63:0a:00:8d:31:
f5:52:21:41:6d:ce:08:6c:02:84:79:32:56:05:69:
29:cd:b8:83:d6:2b:41:6a:63:35:3c:82:5d:40:c9:
7b:03:12:ba:79:d2:f9:2a:fe:dc:8f:c6:86:78:15:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:00:DE:F3:18:90:4E:DF:C0:F3:CA:B9:91:72:66:79:4B:7E:88:79
X509v3 Authority Key Identifier:
keyid:8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/bADe8xiQTt_A88q5kXJmeUt-iHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.66.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:9e:78:0e:38:53:d5:a5:ec:e1:b3:8f:f1:0f:f3:eb:7c:40:
15:95:50:7f:99:46:85:45:4d:c8:8c:f3:19:ab:c9:4b:c6:d7:
10:6a:5b:44:c7:59:2e:9f:17:64:f1:a1:8a:56:b0:51:46:43:
ec:c8:37:82:d0:a7:58:c1:ce:8e:9a:db:d9:8c:cc:8e:87:41:
ee:97:f0:43:f0:85:70:7d:bf:7a:9d:b0:3e:0a:5f:e6:59:e1:
9e:97:f9:4f:98:4c:75:a4:a1:40:25:e7:12:f8:53:72:c9:11:
bd:a9:48:35:d0:54:b6:73:dc:ef:87:e1:ae:f6:98:b4:eb:b2:
2b:89:b1:8c:f2:f2:56:aa:d9:2b:8d:f8:46:4e:53:bc:f9:21:
5d:7e:2e:78:1d:10:8e:96:04:99:d1:8b:bd:f0:50:0b:08:5b:
f4:c8:c6:03:53:7b:df:27:c1:bd:9f:32:52:98:95:42:a9:9f:
88:87:b0:38:50:a2:00:3e:ef:f2:6d:af:c2:e8:72:2e:42:a8:
46:29:61:ec:26:5c:34:6f:3c:54:08:06:45:5e:b4:51:65:a0:
69:c5:3d:9d:97:e1:36:d4:3b:a6:b3:45:e9:63:58:a1:db:31:
61:59:d6:f6:02:db:75:ce:ee:a7:39:c8:05:03:7f:8b:c1:1c:
3c:ef:f6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:41:40 2025 by rpki-client