Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/h13V4d_ekYYA6uv0-jBvE7ljXgg.roa
File: h13V4d_ekYYA6uv0-jBvE7ljXgg.roa (raw, json)
Hash identifier: 64VEKJzZ2W6+uSgCoWExxMNGZCghiQUddh02slxkwlI=
Subject key identifier: 87:5D:D5:E1:DF:DE:91:86:00:EA:EB:F4:FA:30:6F:13:B9:63:5E:08
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 01942220029E3378A50B2FF94770AF59BC28
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/h13V4d_ekYYA6uv0-jBvE7ljXgg.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272401
IP address blocks: 176.57.203.0/24 maxlen: 24
176.57.204.0/24 maxlen: 24
176.57.205.0/24 maxlen: 24
176.57.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:02:9e:33:78:a5:0b:2f:f9:47:70:af:59:bc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=875dd5e1dfde918600eaebf4fa306f13b9635e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:41:65:53:1f:81:ff:58:2f:05:34:ba:ef:
81:6b:91:28:dd:e5:72:98:31:28:a8:fb:e9:3d:ae:
c0:e4:c1:6a:02:47:31:83:8e:a6:8b:fc:ed:2a:4a:
84:8a:95:ff:d6:96:0c:f0:fd:eb:67:7a:6f:a8:d1:
da:51:4c:45:70:bd:a9:02:f8:f4:5e:28:e2:78:25:
ba:40:34:2f:65:bf:a0:68:c6:a7:f0:c7:f5:51:49:
2e:7a:70:3d:0b:2d:6a:9c:b5:dd:b2:65:13:91:2b:
eb:b9:56:32:b1:a7:d8:ae:7c:09:fb:5e:f6:3e:2b:
ad:60:a7:56:06:4d:37:94:50:93:c7:84:c8:1a:b4:
f3:78:3c:08:fc:90:bb:30:b9:53:61:de:91:47:19:
da:33:fe:4e:7a:ba:21:ff:cd:c4:56:a6:fc:ca:97:
c1:e6:f2:5d:c7:bf:af:65:83:7f:c0:03:7d:2e:89:
6c:fd:89:db:1c:00:56:bf:cd:ad:a4:1d:1f:b3:b3:
f3:69:96:ab:10:ad:85:b8:e5:60:ec:b9:19:f4:35:
f6:d7:75:ba:e9:1c:ca:a0:73:ac:ba:c8:01:cb:02:
af:1d:c3:0e:eb:7d:70:e6:8b:76:63:af:f8:39:5b:
62:d6:fd:05:c0:53:6b:fc:7b:10:cc:f9:e7:cc:1b:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5D:D5:E1:DF:DE:91:86:00:EA:EB:F4:FA:30:6F:13:B9:63:5E:08
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/h13V4d_ekYYA6uv0-jBvE7ljXgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.203.0-176.57.206.255
Signature Algorithm: sha256WithRSAEncryption
77:81:d0:e5:23:db:0b:47:04:8a:60:20:83:89:98:da:71:c1:
80:e4:7e:e3:6f:e5:1b:17:62:94:44:7e:31:d2:76:bd:17:07:
ea:e4:37:23:5b:a4:82:ef:f7:3a:a2:c7:9e:a8:35:be:2f:a6:
f8:99:60:5c:60:5c:14:f0:96:64:9f:f0:11:9e:af:f0:5c:ba:
29:50:e4:76:d8:89:7c:51:b3:80:49:4d:9b:51:c2:ae:7e:f9:
a1:5f:60:4b:e7:8e:d7:1a:8c:db:31:82:62:40:48:e6:a3:88:
fb:3e:db:00:24:de:78:46:ec:01:79:9d:01:01:3e:84:56:b4:
35:16:15:50:b3:e1:e1:be:09:3f:a5:b4:f0:a5:61:d7:f2:32:
a0:85:e8:a8:34:f4:54:dd:8b:92:23:70:3b:fe:d8:7a:ed:d9:
ea:e3:0a:a6:54:2f:d7:e5:ae:29:7e:bc:06:75:10:7b:fa:fb:
61:6c:f5:bf:0c:4f:80:c0:12:fc:6f:9a:bf:f2:39:01:73:ac:
ed:ae:50:1f:e3:9f:49:c3:33:6f:0e:86:25:b2:16:f1:71:3a:
03:51:e1:89:bb:21:db:c5:bd:82:d6:61:55:8a:9e:97:2d:9c:
2f:a7:b9:05:cf:76:50:13:15:f9:31:06:93:d3:f1:67:d2:dc:
e7:fd:7b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:45 2025 by rpki-client