Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9UQ0_3_mS41_iKwg1qjiuH2k8kg.roa
File: 9UQ0_3_mS41_iKwg1qjiuH2k8kg.roa (raw, json)
Hash identifier: kiU7QM0C1mwEaOQNcthFFJZevyv4iXHm9WMDBPMiwH8=
Subject key identifier: F5:44:34:FF:7F:E6:4B:8D:7F:88:AC:20:D6:A8:E2:B8:7D:A4:F2:48
Certificate issuer: /CN=f731c339b1861722bffe867218314ce1295c3c85
Certificate serial: 01941FFA6F44A2C2DB082DA55D0EB4D33610
Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9UQ0_3_mS41_iKwg1qjiuH2k8kg.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56791
IP address blocks: 176.32.128.0/19 maxlen: 32
176.119.197.0/24 maxlen: 32
185.45.100.0/22 maxlen: 32
2a00:9e80::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6f:44:a2:c2:db:08:2d:a5:5d:0e:b4:d3:36:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f54434ff7fe64b8d7f88ac20d6a8e2b87da4f248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6d:a7:84:7c:0e:9a:c9:15:51:b9:e9:ff:53:
e1:dc:26:07:74:92:49:4a:c6:76:46:a9:bf:d4:ea:
33:9f:38:42:18:88:e0:cb:7b:d8:51:5f:8a:59:88:
3a:6c:f0:de:92:54:2a:d9:f9:32:dd:c5:8e:5c:d9:
e3:d2:10:7b:99:1f:13:c7:f3:31:73:b3:2a:f5:7e:
3f:f9:07:4a:7a:a0:63:a1:63:e7:f4:d1:bd:b4:d5:
f0:c9:fd:e9:24:20:58:ee:ea:8b:04:76:97:9b:b4:
67:cd:99:e2:b2:46:b4:34:08:84:fa:e5:d2:72:d2:
09:44:e6:ef:ef:08:67:b4:73:66:e3:ee:51:6e:e5:
3d:f5:77:c8:69:ce:78:99:6f:2e:c4:7b:d1:67:ad:
ea:9a:61:42:cb:52:b8:80:1c:85:01:53:d3:a8:9a:
8c:e0:99:e7:c5:ae:b7:a5:1c:b4:d2:7b:4e:13:c3:
4b:ed:9e:90:60:35:49:23:31:7e:ef:6b:f3:b2:26:
62:92:af:7c:d5:b8:8c:8d:fa:9c:5a:27:6f:c2:bd:
c3:83:cb:8b:22:5c:92:c4:09:11:a5:c5:a1:14:14:
ce:4c:dc:4a:13:57:70:d9:49:f3:69:66:34:9f:24:
39:07:53:52:0c:28:6d:12:cd:f3:2c:a5:dd:a2:62:
85:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:34:FF:7F:E6:4B:8D:7F:88:AC:20:D6:A8:E2:B8:7D:A4:F2:48
X509v3 Authority Key Identifier:
keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9UQ0_3_mS41_iKwg1qjiuH2k8kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.128.0/19
176.119.197.0/24
185.45.100.0/22
IPv6:
2a00:9e80::/29
Signature Algorithm: sha256WithRSAEncryption
5a:7d:a1:43:62:9c:e1:dc:9b:dd:90:f6:fa:58:35:f8:e0:fe:
38:36:0a:c8:d5:d5:3c:5e:a7:d9:b2:bd:6b:54:44:21:3c:6a:
16:51:a7:d5:b7:db:8b:b4:ff:a8:63:2b:d6:b7:21:f9:cf:3b:
7b:ad:d7:f4:26:92:b3:0e:91:de:5a:05:78:99:cb:67:be:dc:
11:32:de:15:12:8a:38:45:1f:35:fd:3f:2a:b8:17:70:8f:01:
6e:1b:59:e6:ca:47:9b:c4:6a:c3:5d:48:19:82:31:1f:24:f0:
4a:59:d1:87:9a:56:c0:d2:4d:9b:b5:ce:65:f0:2e:33:7f:0c:
af:34:58:68:1a:94:81:b4:70:c9:4e:d4:74:8e:7c:2e:4e:34:
10:04:f4:29:2d:9b:05:90:26:4d:9b:e0:5b:94:cb:17:f0:22:
e4:09:c6:8e:a1:f0:76:74:43:af:55:8b:1d:d0:6a:64:20:bd:
fd:cb:d5:c0:c2:1d:73:ff:04:85:7a:11:89:d3:ed:5c:bb:6b:
1a:e7:87:80:23:28:90:ac:a6:67:3d:06:ce:ec:91:f0:ac:84:
d6:0d:f7:04:a2:7b:93:b6:d7:28:c1:59:c1:32:c3:03:2d:0c:
82:cc:ca:77:a4:b8:13:06:6a:0c:93:1f:d4:c3:fd:a0:17:cc:
4e:c8:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:10:16 2025 by rpki-client