Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/4BEOVQrsThFlGW0cZQAMw7zNXnw.roa
File: 4BEOVQrsThFlGW0cZQAMw7zNXnw.roa (raw, json)
Hash identifier: 1TD7G2NjptDutIrZRBPS5Ex61KQxeiu7HZ9sUIa00i4=
Subject key identifier: E0:11:0E:55:0A:EC:4E:11:65:19:6D:1C:65:00:0C:C3:BC:CD:5E:7C
Certificate issuer: /CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Certificate serial: 018B002D335499EF450D73AF679ED9E84A81
Authority key identifier: 9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/4BEOVQrsThFlGW0cZQAMw7zNXnw.roa
Signing time: Thu 05 Oct 2023 14:10:44 +0000
ROA not before: Thu 05 Oct 2023 14:10:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204316
IP address blocks: 176.118.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:2d:33:54:99:ef:45:0d:73:af:67:9e:d9:e8:4a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Validity
Not Before: Oct 5 14:10:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0110e550aec4e1165196d1c65000cc3bccd5e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b9:b1:b2:05:86:7d:52:f2:dd:3e:fb:f2:32:
67:ed:5e:83:31:b6:d6:08:07:4f:78:c0:62:f6:ae:
06:d1:33:86:37:88:a3:dc:b0:2e:1d:3b:8c:09:d1:
bf:f2:aa:9c:b7:5c:48:f1:df:44:e4:a9:a2:6b:a1:
29:13:71:d3:a7:a1:46:e2:7e:9f:68:97:b7:9f:c2:
9b:a7:3a:10:90:d8:54:ab:79:b1:41:7f:78:d2:5b:
b4:09:89:24:e6:51:72:cd:72:f9:24:57:f4:71:3e:
84:b8:a2:92:3a:8e:8b:47:c3:e6:b1:22:90:15:cd:
7c:b8:45:7f:7a:c8:be:b6:43:54:c3:c2:70:f7:d8:
77:bd:00:62:73:73:38:e9:91:c2:ed:89:30:07:0b:
6d:c5:8b:8e:84:fe:02:b5:65:4f:11:bc:7c:44:6f:
d5:85:38:a2:08:49:ae:dd:41:85:2d:f6:f5:a4:17:
9c:55:61:9f:87:b0:46:91:79:0a:8c:4f:a9:9a:49:
53:d4:b3:3b:3f:b8:3f:1f:9b:63:80:47:3a:10:a1:
7b:12:98:b2:84:80:6b:b6:71:2d:ca:ad:41:dc:73:
89:07:5d:24:f0:14:da:06:2e:f9:0f:c2:1d:90:59:
a8:aa:cc:b1:48:a7:1c:52:5d:ca:a5:9e:12:84:80:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:11:0E:55:0A:EC:4E:11:65:19:6D:1C:65:00:0C:C3:BC:CD:5E:7C
X509v3 Authority Key Identifier:
keyid:9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/4BEOVQrsThFlGW0cZQAMw7zNXnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.162.0/23
Signature Algorithm: sha256WithRSAEncryption
46:07:ef:7b:56:05:0f:3d:7e:6b:bc:50:aa:ff:df:52:6f:88:
f7:98:9e:de:59:24:9a:b1:0e:a1:57:b4:6a:ad:c5:2f:f2:f5:
fa:fc:cc:ea:9f:10:9c:2d:23:48:2a:e9:31:75:77:53:32:c0:
17:fa:20:cc:8f:a2:e8:de:00:3b:e0:9c:99:14:ec:d0:44:4a:
f8:79:29:cd:66:38:ff:8d:5b:4e:bf:c8:88:53:55:2b:b4:51:
e3:98:94:6b:19:90:b6:21:db:0c:51:72:5d:51:08:58:d8:44:
08:8e:14:8b:8c:ee:ea:b6:02:b0:eb:49:54:e0:d9:15:ed:50:
a3:ee:ce:6c:14:65:89:ec:df:5a:80:d5:e7:e0:70:2a:36:89:
87:a7:94:51:df:34:07:23:7c:49:5e:ef:99:ae:86:1f:84:a6:
de:19:c5:3c:cf:95:35:f4:aa:42:16:33:71:32:13:7c:2c:9a:
d9:1b:e5:59:b4:fb:57:1b:59:a6:2c:ca:50:e9:91:01:32:ec:
f3:20:78:b3:cd:81:1e:6c:b5:72:06:6b:b7:f0:54:6c:91:a9:
c3:78:55:68:9b:54:02:06:30:d6:ab:da:4c:8c:ec:0d:72:7d:
00:af:0b:d2:4b:60:7f:05:33:e5:38:b4:1a:c1:f6:26:a2:37:
51:60:0d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:48:03 2025 by rpki-client