Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa
File: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (raw, json)
Hash identifier: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=
Subject key identifier: BA:EA:CD:10:F8:E1:46:D0:C8:0C:16:F7:39:CF:9E:E7:EA:E0:B3:E2
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 0194221F409DC513ECBFE9219AFF96DA804F
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa
Signing time: Wed 01 Jan 2025 13:47:40 +0000
ROA not before: Wed 01 Jan 2025 13:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41743
IP address blocks: 176.115.136.0/21 maxlen: 21
176.115.136.0/24 maxlen: 24
176.115.137.0/24 maxlen: 24
176.115.138.0/24 maxlen: 24
176.115.139.0/24 maxlen: 24
176.115.140.0/23 maxlen: 23
176.115.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:40:9d:c5:13:ec:bf:e9:21:9a:ff:96:da:80:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Jan 1 13:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baeacd10f8e146d0c80c16f739cf9ee7eae0b3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:c6:b8:6c:0a:b9:e7:2b:2b:1a:4e:c1:91:
39:5e:f0:3b:94:68:b5:3b:b2:39:ff:ae:3b:4f:ee:
f7:d5:50:0d:db:c1:9c:ce:a9:97:11:0d:c0:b3:ef:
a6:33:51:d8:33:de:af:53:d0:32:a7:bf:0b:65:b1:
be:bd:1e:31:af:b6:4b:f0:d5:dc:d8:65:cb:4a:8d:
c9:ae:35:02:c7:53:0c:03:13:0b:02:f7:7c:8c:1c:
b8:84:dd:ef:31:0f:b8:81:98:aa:0a:f9:71:f5:88:
f7:59:b8:43:af:d4:e4:73:1b:4f:9c:f8:39:f5:2e:
67:9f:a0:18:12:1f:72:86:2c:ef:e0:fd:5a:fc:b9:
b9:c2:29:c6:15:cd:91:25:d5:d5:67:61:12:a8:83:
65:8c:3b:4e:77:ba:c0:92:c1:ae:3d:80:35:f4:de:
89:8c:34:cd:d6:76:5a:61:81:be:a5:8a:73:ac:08:
0f:43:4e:d5:ca:f7:95:f3:c0:6e:bf:37:49:ed:3a:
a3:5b:cb:37:43:c6:43:e7:df:85:62:df:45:7c:bb:
32:94:1c:da:e8:58:ea:c3:50:8a:c3:30:af:6b:08:
2b:1a:9f:41:cf:74:2b:13:38:b2:0e:49:99:83:ad:
1b:9a:02:e9:02:51:6e:9f:2b:2d:af:7c:97:98:e7:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EA:CD:10:F8:E1:46:D0:C8:0C:16:F7:39:CF:9E:E7:EA:E0:B3:E2
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.115.136.0/21
Signature Algorithm: sha256WithRSAEncryption
94:aa:5f:8a:f5:48:22:d7:f9:6f:c6:c0:6b:5e:85:3f:0d:66:
38:c4:60:ee:79:56:1e:7e:61:50:c8:c1:b3:8b:8f:6f:5e:c9:
10:ed:35:b4:4d:01:76:b3:08:87:59:16:9f:8c:98:77:85:e9:
bb:ba:cb:c7:71:63:c0:78:97:99:83:d6:10:12:4a:ac:bd:36:
18:8a:2a:e7:97:91:7c:88:47:d2:3f:c2:cd:b8:88:6e:40:2f:
69:4d:f9:b4:18:e2:94:eb:ba:95:c8:06:c3:4e:a2:76:4c:57:
21:ae:92:2d:f7:ad:82:d3:c8:66:0d:e0:6a:12:8d:6e:6b:cc:
50:2a:22:1a:d5:4b:ad:21:d1:1c:ef:55:51:ff:06:3f:5c:c0:
28:39:25:5f:6e:a0:e6:3e:70:6a:1b:f3:98:d1:2d:0a:89:f6:
fe:2f:f8:00:98:85:ef:fb:f5:9c:33:d1:4a:84:a3:e6:a4:29:
e2:68:c9:fb:39:b1:8c:6f:22:26:75:47:c0:4f:bd:e4:cf:c7:
aa:e2:b2:f6:30:95:70:87:cf:79:ba:d5:90:90:5d:ec:ce:8c:
cc:f9:d1:71:88:17:df:4c:df:b3:b3:0c:3d:6a:a8:c8:65:9d:
ae:4f:c7:8d:51:33:11:fd:6f:fb:9e:5b:f9:38:39:41:f4:19:
45:f1:3f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:10 2025 by rpki-client