Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/ImxZW674_5fXdmlZfvGnuAIzuOY.roa
File: ImxZW674_5fXdmlZfvGnuAIzuOY.roa (raw, json)
Hash identifier: 9/kVoJM9dkwpP3u46CBs9jfgtCbtD6Yrvc+TFbbmgkw=
Subject key identifier: 22:6C:59:5B:AE:F8:FF:97:D7:76:69:59:7E:F1:A7:B8:02:33:B8:E6
Certificate issuer: /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial: 019423D755D41A41FA28CFA77C830E5FFBB8
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/ImxZW674_5fXdmlZfvGnuAIzuOY.roa
Signing time: Wed 01 Jan 2025 21:48:22 +0000
ROA not before: Wed 01 Jan 2025 21:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41195
IP address blocks: 176.118.186.0/23 maxlen: 24
2a0d:ca47::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:55:d4:1a:41:fa:28:cf:a7:7c:83:0e:5f:fb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Validity
Not Before: Jan 1 21:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=226c595baef8ff97d77669597ef1a7b80233b8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f2:d5:3c:a0:92:e0:be:c8:de:0d:de:a3:12:
a6:ce:cb:cb:4b:f4:67:a9:56:95:58:ef:22:39:28:
3d:62:7d:9c:24:e5:67:6c:48:38:6d:59:bb:a4:f3:
03:82:30:1f:69:21:c2:11:80:94:3f:8a:9a:52:72:
2c:74:1a:27:50:51:95:63:c6:d9:3f:fe:4c:eb:38:
69:55:81:8c:33:f7:63:10:d1:73:33:9d:ba:dc:bf:
76:45:11:9e:1e:75:11:7d:69:cc:b9:92:c7:62:d5:
0a:f9:1d:18:80:b4:72:eb:e1:cc:a3:79:b6:af:4d:
2c:8c:5e:bf:a8:a1:7d:ac:58:89:64:ec:e1:d0:cf:
34:77:14:f3:ae:82:47:43:17:59:88:50:71:58:3f:
37:2e:78:f8:b6:eb:63:79:22:6a:8e:3e:29:fd:d1:
88:69:1e:66:e4:82:2d:f1:5e:63:25:00:a7:48:7a:
fb:f6:de:26:9d:0b:3b:d4:09:68:b4:97:88:8f:c8:
cb:91:e1:96:08:8f:a7:66:eb:aa:d4:3e:33:a2:4c:
8f:a0:44:bb:bf:39:50:09:41:b9:5d:5f:7c:d4:04:
47:12:51:d0:d6:c9:35:6f:52:a5:28:cd:7b:9e:ec:
bb:bd:34:33:43:2b:57:30:63:e4:bb:ec:b7:20:22:
68:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6C:59:5B:AE:F8:FF:97:D7:76:69:59:7E:F1:A7:B8:02:33:B8:E6
X509v3 Authority Key Identifier:
keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/ImxZW674_5fXdmlZfvGnuAIzuOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.186.0/23
IPv6:
2a0d:ca47::/47
Signature Algorithm: sha256WithRSAEncryption
88:61:be:3a:1c:8f:0b:8f:dd:39:ee:d1:46:1e:35:ae:1f:69:
30:ab:6b:0b:36:b5:3c:54:de:11:29:8b:dc:7b:49:5a:16:fa:
bc:52:64:69:a4:9d:95:27:b1:59:c4:6c:3f:c2:3f:f8:85:c4:
e6:7e:0d:b2:92:7c:b1:27:bb:c5:1e:63:ae:89:31:89:01:9e:
dc:e0:69:14:e8:ba:2b:bc:6f:49:93:62:22:f2:3e:78:99:f9:
81:e5:45:a4:8f:22:d7:3b:c4:1f:08:94:a4:d5:e9:4c:90:8b:
09:be:af:55:35:8d:12:2a:9e:2f:98:27:b1:16:da:5a:65:95:
87:f0:47:54:54:ac:18:36:00:2b:d0:d6:99:d4:cb:32:8e:ec:
fd:7a:c1:77:2d:e6:2a:21:79:2e:76:c9:db:3c:4c:93:f1:3e:
da:51:94:d9:82:5b:0d:5c:1f:ce:27:e4:a9:0f:7e:81:28:fe:
f5:b8:e3:d1:10:b5:b4:f4:fc:6a:91:4d:49:4d:31:f4:07:30:
45:fa:bd:b3:6b:3e:c8:75:19:0d:60:32:f7:b7:b6:c8:47:f1:
67:8e:0c:8c:7b:87:01:01:63:15:1d:b7:a8:11:4b:fe:8b:75:
65:61:34:91:8e:a5:a5:98:d0:bf:bc:d1:36:f6:38:5c:39:21:
00:52:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:44 2025 by rpki-client