Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/13zsYUD0hA67z1BODvjquGKoT_E.roa
File: 13zsYUD0hA67z1BODvjquGKoT_E.roa (raw, json)
Hash identifier: MKw8FhdsNVau1tjrdAX7ReUxGObo82luQsljT5owYXc=
Subject key identifier: D7:7C:EC:61:40:F4:84:0E:BB:CF:50:4E:0E:F8:EA:B8:62:A8:4F:F1
Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial: 019425FCCA67DA81DDF685EBEC6D2E1AAB3E
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/13zsYUD0hA67z1BODvjquGKoT_E.roa
Signing time: Thu 02 Jan 2025 07:48:31 +0000
ROA not before: Thu 02 Jan 2025 07:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20719
IP address blocks: 176.119.248.0/21 maxlen: 21
176.119.248.0/22 maxlen: 24
176.119.251.0/24 maxlen: 24
176.119.252.0/22 maxlen: 24
176.119.253.0/24 maxlen: 24
176.119.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:ca:67:da:81:dd:f6:85:eb:ec:6d:2e:1a:ab:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Validity
Not Before: Jan 2 07:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d77cec6140f4840ebbcf504e0ef8eab862a84ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:a6:d5:4e:ae:7f:b2:06:f7:74:5f:ec:80:
0d:98:12:45:b9:27:e8:5b:df:91:fb:f0:ef:43:b9:
c6:01:26:17:68:51:80:33:51:dd:dd:9d:20:33:e6:
f2:10:f4:ed:1b:bb:d5:81:ad:c8:91:ca:bb:61:37:
53:c4:95:af:23:53:03:70:dc:92:5e:ad:b2:26:d7:
79:9b:d2:71:e5:95:a4:26:17:82:69:be:0f:6f:b5:
a4:e4:e2:a0:26:8b:41:e3:ba:28:ae:80:9f:f4:37:
d1:a1:61:e7:55:a7:12:5a:3b:12:d1:69:9a:75:a5:
7d:bd:59:85:70:dd:cd:36:e0:4e:55:ab:d7:63:ca:
1d:a3:9c:b0:4d:c1:f5:a3:96:e3:5c:7d:19:22:30:
d0:d6:56:cd:61:ef:aa:85:80:4b:9c:30:0f:2f:1b:
30:7e:b0:00:a2:53:51:0e:1b:76:c1:59:b0:08:48:
30:ac:75:9e:97:21:72:65:f5:ef:2f:06:87:1c:e0:
d4:62:24:89:61:f3:01:4d:e4:c3:73:c6:19:e3:d3:
dd:dc:3b:fd:24:7a:68:26:67:c9:dc:28:81:f3:76:
32:b4:3f:e1:9e:ec:0b:2e:3d:49:31:70:46:7d:5c:
03:b2:8b:4a:50:87:8d:cf:a1:56:78:1b:b0:5a:d8:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7C:EC:61:40:F4:84:0E:BB:CF:50:4E:0E:F8:EA:B8:62:A8:4F:F1
X509v3 Authority Key Identifier:
keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/13zsYUD0hA67z1BODvjquGKoT_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.248.0/21
Signature Algorithm: sha256WithRSAEncryption
77:c1:82:41:b5:2b:13:9c:02:08:ca:ed:97:33:fe:45:12:7e:
ef:2d:7d:f7:2b:90:93:d5:69:be:04:b2:a6:7a:90:1e:91:eb:
bd:f7:38:51:c2:2c:61:40:3d:9f:b4:68:81:54:21:95:e2:bd:
cb:f2:83:fe:62:3f:ba:cc:88:f6:c0:24:22:be:fb:73:c7:27:
ca:0e:16:c6:dd:f2:27:d6:5d:5c:d4:57:71:e6:d3:88:d3:4a:
58:9b:26:8d:20:df:1b:a4:f7:35:28:c5:cd:c0:87:03:b3:de:
e2:f6:68:02:33:5d:b3:7f:bd:a2:29:85:22:31:9b:21:59:df:
ca:f9:17:e2:a6:3e:7d:fb:a9:af:86:bd:c0:38:c3:29:c3:b0:
3a:48:3f:0e:af:bc:8b:84:d8:41:ea:ac:05:86:4e:be:69:e1:
8f:eb:ab:f5:b6:d3:f0:0a:97:23:45:41:83:68:eb:6b:bb:22:
ba:1a:e6:1f:15:19:83:8d:2c:7b:9e:88:4b:e2:97:3f:b8:89:
10:14:6a:8c:2f:19:51:42:5d:14:b0:2c:9a:97:2c:24:f9:d0:
ef:97:fc:c8:4a:67:30:07:b6:07:64:16:90:3f:c7:41:ff:37:
da:6f:e3:7c:f4:de:c3:4e:73:ed:95:85:f6:92:2e:f2:7f:20:
c1:65:e1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:36:19 2025 by rpki-client