Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/uY3zUef0aSQ_1cVEf2POkOTu658.roa
File: uY3zUef0aSQ_1cVEf2POkOTu658.roa (raw, json)
Hash identifier: 5Ji2ueMdcBCO2VElJdA2ZSQYLd05uzaWuTi54eXzep8=
Subject key identifier: B9:8D:F3:51:E7:F4:69:24:3F:D5:C5:44:7F:63:CE:90:E4:EE:EB:9F
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 0194258F2E722D3A02C72C1EA8010EE9460F
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/uY3zUef0aSQ_1cVEf2POkOTu658.roa
Signing time: Thu 02 Jan 2025 05:48:48 +0000
ROA not before: Thu 02 Jan 2025 05:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211921
IP address blocks: 176.103.212.0/24 maxlen: 24
176.103.213.0/24 maxlen: 24
176.103.214.0/24 maxlen: 24
176.103.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2e:72:2d:3a:02:c7:2c:1e:a8:01:0e:e9:46:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Jan 2 05:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b98df351e7f469243fd5c5447f63ce90e4eeeb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:51:f8:72:90:2e:99:d4:3b:03:4e:a3:2a:
b7:54:53:e9:1f:bf:de:07:0f:ba:7f:a2:d4:01:bf:
71:9a:94:7e:c4:9f:d1:41:be:08:8c:8b:2d:4a:2e:
08:64:43:b8:4b:07:1b:69:36:62:72:e7:f1:8b:dd:
4b:58:7b:e1:7b:3d:a0:96:40:4e:6d:65:9b:4c:c9:
b6:17:2a:28:bf:be:da:f8:62:eb:d4:4a:5d:32:4d:
6c:6c:ab:1c:a0:03:19:38:ca:57:65:bf:41:5a:ef:
ef:ce:7a:64:00:fc:dc:10:67:35:f7:7e:d5:49:ee:
ac:a4:6d:36:0d:3b:14:ce:98:f4:f9:50:f3:67:2d:
02:56:0f:63:ba:ec:7b:98:6f:1a:85:96:83:2e:09:
87:8b:ba:6d:a1:23:d5:30:74:59:76:45:23:59:6b:
48:28:0d:57:29:57:ad:78:16:aa:f2:02:c3:1a:ac:
7e:ba:0f:97:bf:58:18:37:7b:26:a1:5f:65:93:11:
b2:45:e4:bf:13:57:f5:f8:14:81:e3:15:ba:a8:12:
66:8a:1a:c4:62:42:0d:f8:c6:b9:6a:23:6c:c2:ff:
9b:bf:88:5f:04:80:2f:7b:2b:ea:b4:bf:03:cf:bf:
5f:65:2a:d8:e6:31:84:c3:83:21:2d:75:ad:55:1e:
6b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8D:F3:51:E7:F4:69:24:3F:D5:C5:44:7F:63:CE:90:E4:EE:EB:9F
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/uY3zUef0aSQ_1cVEf2POkOTu658.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.212.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:b4:6a:bc:88:1c:3f:f4:ea:c2:75:40:1c:ec:0d:13:b5:6a:
a2:dd:14:de:e9:9c:21:cb:75:c9:89:ee:e3:46:d6:df:82:21:
b8:f4:0d:13:b4:6b:9f:d0:ac:c6:76:a8:07:24:90:79:83:dc:
55:42:99:30:1a:f1:62:2b:35:5f:10:a2:f1:96:ef:d3:f6:5f:
7b:0e:80:20:27:85:8e:a6:33:4c:0d:cf:bd:ec:1d:35:da:2b:
03:5e:45:57:5d:9a:51:8a:68:d1:1c:1b:7b:25:9e:78:3d:54:
eb:2b:89:49:60:f6:79:80:ef:2a:4d:32:ad:b5:fa:13:66:73:
97:f9:09:4d:a9:67:fd:9f:68:0f:e5:cb:bb:95:f7:d8:ec:7d:
84:4b:40:48:fa:9a:5b:ad:e2:51:95:6b:71:b7:fd:03:cf:ea:
12:68:8d:f0:ba:ba:26:0b:5b:ff:f5:94:e0:d4:9e:d4:e0:67:
e6:bd:05:cb:05:e0:4e:14:b5:20:40:cf:4b:03:ee:be:ee:18:
63:a8:bf:88:ba:7f:75:9d:23:16:3a:d2:84:b3:6e:eb:ce:da:
d3:dc:3e:5e:fb:cf:60:f2:3c:90:7d:24:65:82:82:00:58:79:
28:3f:68:82:de:f3:07:0b:aa:c8:4f:be:0a:21:5a:d3:85:0a:
1b:ad:cb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:05:32 2025 by rpki-client