Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/RfapQx5kz-KcEUJBDhqlf36XGPk.roa
File: RfapQx5kz-KcEUJBDhqlf36XGPk.roa (raw, json)
Hash identifier: 5esPSUrHtO9ZpdIa9TheJp5LPtvTGdoUIoS8FI2YC2U=
Subject key identifier: 45:F6:A9:43:1E:64:CF:E2:9C:11:42:41:0E:1A:A5:7F:7E:97:18:F9
Certificate issuer: /CN=bafd79b6dd85290fef6169a44e426107d274651a
Certificate serial: 01942369146E73957043418681AC1B3DA471
Authority key identifier: BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/RfapQx5kz-KcEUJBDhqlf36XGPk.roa
Signing time: Wed 01 Jan 2025 19:47:56 +0000
ROA not before: Wed 01 Jan 2025 19:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202302
IP address blocks: 176.117.76.0/24 maxlen: 24
176.117.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:14:6e:73:95:70:43:41:86:81:ac:1b:3d:a4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bafd79b6dd85290fef6169a44e426107d274651a
Validity
Not Before: Jan 1 19:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45f6a9431e64cfe29c1142410e1aa57f7e9718f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:b9:c1:43:17:d5:33:75:e8:9c:43:6c:e7:
4a:83:63:c7:b2:97:95:d2:b9:b2:a5:23:ba:8c:49:
3f:f3:60:97:29:3f:e5:d3:e4:36:f7:97:ee:23:ce:
9c:72:97:6b:f6:12:19:c5:fa:f2:09:f5:c1:a5:ad:
ea:1a:9e:0a:6e:79:bb:9a:4a:e3:38:e3:df:fb:e6:
a9:dc:59:64:1b:f0:bc:a9:2a:3a:b0:eb:d2:e5:57:
7e:46:2e:63:40:4f:dc:ae:c6:0a:5f:7c:f8:a4:a9:
a0:1b:49:2b:e9:02:a3:99:14:94:de:2a:3e:1a:15:
85:d3:b5:fa:2e:79:32:3e:4c:d9:1a:f2:71:a6:94:
69:4c:39:8d:52:af:0e:57:0d:ff:d5:65:57:ad:bc:
dc:ab:7d:d0:62:60:98:78:62:d3:3f:5d:b1:c3:2d:
51:33:25:88:be:ec:29:06:97:af:69:0d:19:82:0e:
85:d1:ad:5a:39:a4:70:e0:7a:11:0c:b0:f0:69:ca:
ca:1a:28:a5:0b:54:0e:b4:83:ef:a5:18:e1:82:43:
10:b7:45:69:0f:f4:67:60:8a:4c:64:b0:b8:4f:e4:
8e:47:6d:2d:cb:13:10:4e:f4:d6:f2:b1:32:46:74:
8a:78:95:6f:89:a8:4b:7e:c1:e1:8c:e3:8b:88:49:
07:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F6:A9:43:1E:64:CF:E2:9C:11:42:41:0E:1A:A5:7F:7E:97:18:F9
X509v3 Authority Key Identifier:
keyid:BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/RfapQx5kz-KcEUJBDhqlf36XGPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.76.0/23
Signature Algorithm: sha256WithRSAEncryption
44:61:e9:66:c2:bd:47:9b:47:8c:0b:18:ca:ab:4f:ec:8d:5c:
c5:07:cd:0a:fb:e3:18:6b:68:e5:3f:48:f2:fc:7f:35:b6:c6:
49:39:73:0f:bf:e2:b8:53:d6:7a:5f:0c:ec:ee:3d:d8:62:65:
ec:cd:2a:88:27:08:bd:a1:e2:c0:dc:df:85:10:62:f8:da:7d:
2f:0d:8e:97:72:24:c6:ce:51:89:b1:2c:80:23:b3:18:96:10:
aa:26:ee:ce:d4:d5:ec:ac:9d:48:1f:9f:75:8b:04:33:d8:e3:
3c:33:6e:a7:01:4a:80:79:32:27:0f:5d:fd:0b:0a:de:e0:b2:
fc:5a:86:af:e7:0c:1d:a8:c6:ca:96:17:ca:a0:43:00:91:4a:
ef:f7:a8:74:c7:b1:3a:3c:57:f2:90:21:41:c1:36:cd:df:93:
25:ab:69:b7:77:18:8b:f2:31:6f:cb:ba:b1:4d:26:99:db:03:
c5:36:3b:ef:72:c1:90:03:f5:c2:24:0b:cd:e1:51:f5:fd:c8:
8d:52:29:5e:c0:8b:7a:a0:14:5f:ab:52:d4:42:f2:d1:a2:1c:
45:64:2a:da:1d:dd:4a:50:d6:3a:35:b7:40:7f:f6:d8:96:0c:
95:35:4c:1d:cc:fa:1b:49:3e:09:7f:72:10:0d:38:e8:de:e9:
43:89:e5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:02 2025 by rpki-client