Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/duD9YQ4jRA3telkah1i-OVhA3pE.roa
File: duD9YQ4jRA3telkah1i-OVhA3pE.roa (raw, json)
Hash identifier: i34mTgchsjKccKSOftsEFIiydrQaMy7yIQu1TGf6N/I=
Subject key identifier: 76:E0:FD:61:0E:23:44:0D:ED:7A:59:1A:87:58:BE:39:58:40:DE:91
Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial: 019425FC53B3B04702FD93E0ABC45AB1FA5A
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/duD9YQ4jRA3telkah1i-OVhA3pE.roa
Signing time: Thu 02 Jan 2025 07:48:00 +0000
ROA not before: Thu 02 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206123
IP address blocks: 176.10.116.0/24 maxlen: 24
185.32.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:53:b3:b0:47:02:fd:93:e0:ab:c4:5a:b1:fa:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Validity
Not Before: Jan 2 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76e0fd610e23440ded7a591a8758be395840de91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:24:10:2f:d4:24:3c:82:cc:59:b4:c3:39:
4b:fd:ab:1b:20:85:69:49:65:46:0b:90:d2:c1:8c:
95:88:96:d7:0a:70:23:a0:11:d5:db:a3:cd:6b:b3:
f0:24:2a:ec:c4:a0:a7:03:0c:cb:bd:1d:d6:cb:db:
a1:0f:05:70:e2:ad:37:bc:d2:97:5a:40:c3:22:29:
a4:87:63:81:c2:9b:9a:e7:f1:31:b7:45:34:93:10:
30:54:c6:44:45:6f:02:c5:40:ea:eb:c4:42:86:0b:
5f:65:18:41:5d:f2:4b:24:e8:d0:24:aa:36:b0:4a:
b0:74:ed:c3:77:48:ae:29:52:9f:4e:1b:1c:40:1b:
89:d5:65:a6:e1:f7:77:ca:54:21:d7:b5:cb:ee:d3:
2c:b5:cb:fc:a3:aa:0f:34:9f:5d:be:86:eb:88:e7:
3f:a2:b9:5a:fb:23:b6:90:ba:a0:f5:ba:ff:9c:75:
ed:84:82:86:9b:0b:38:6d:8b:85:26:3e:20:e4:64:
6c:2a:b1:17:ff:e7:9e:ba:e0:86:c2:35:ab:08:8b:
d5:1c:79:70:f8:c2:1a:e4:51:79:ec:7b:48:c4:3a:
75:78:8b:fa:4e:fe:61:7b:4c:c6:fe:7a:74:ab:34:
07:0e:bf:0b:23:7e:ea:af:ea:eb:e6:f1:51:76:3c:
83:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:FD:61:0E:23:44:0D:ED:7A:59:1A:87:58:BE:39:58:40:DE:91
X509v3 Authority Key Identifier:
keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/duD9YQ4jRA3telkah1i-OVhA3pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.116.0/24
185.32.221.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5b:f2:d8:e3:0d:29:17:40:53:3b:74:7b:eb:67:45:bd:ed:
9f:0d:34:57:3e:14:3b:8f:e9:86:06:3a:c2:b4:0a:5a:26:39:
d5:e5:af:f6:89:b9:e1:87:2d:d1:72:05:6e:79:93:93:e8:41:
a7:60:f1:95:1f:c2:a8:f8:73:35:66:bf:3b:30:3c:9d:74:3f:
e8:ea:5f:ff:b8:93:49:87:f7:14:cd:91:48:ad:f7:20:bd:bb:
18:6b:d5:08:48:b2:a8:05:d6:0e:f8:d5:d3:92:36:8e:ab:aa:
51:96:da:08:04:d0:d6:0f:0e:7f:de:ec:37:cd:58:8c:be:2e:
a7:bb:ef:43:e9:75:45:d6:02:17:0b:db:56:ff:1d:e5:7e:00:
88:5b:0b:a9:f1:bf:41:19:ec:fb:06:9b:e4:e4:df:3a:6e:3d:
32:8f:e5:51:c0:34:48:bd:97:0d:2c:92:83:6b:e6:99:1d:b9:
18:ee:7b:4c:02:b1:4b:43:3d:49:e3:29:30:ea:f4:e0:c6:32:
c3:d0:d0:78:a4:cd:42:5f:9e:39:f2:c5:68:5a:f0:fb:99:5c:
26:15:0f:82:15:d8:94:51:92:dd:9e:a7:56:cc:f5:c3:20:15:
9f:fe:81:61:a4:6c:a9:82:b5:5c:74:43:37:0c:72:d4:20:13:
9c:ce:fe:ff
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/FOzsEcC/ZPgq8RasfpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZGExYzZiMWE2NWY3YTNkOTdmOWJkNzVlN2NhYzMxMzUy
NDZmYTUwHhcNMjUwMTAyMDc0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmUwZmQ2MTBlMjM0NDBkZWQ3YTU5MWE4NzU4YmUzOTU4NDBkZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAEkEC/UJDyCzFm0wzlL/asbIIVp
SWVGC5DSwYyViJbXCnAjoBHV26PNa7PwJCrsxKCnAwzLvR3Wy9uhDwVw4q03vNKX
WkDDIimkh2OBwpua5/Ext0U0kxAwVMZERW8CxUDq68RChgtfZRhBXfJLJOjQJKo2
sEqwdO3Dd0iuKVKfThscQBuJ1WWm4fd3ylQh17XL7tMstcv8o6oPNJ9dvobriOc/
orla+yO2kLqg9br/nHXthIKGmws4bYuFJj4g5GRsKrEX/+eeuuCGwjWrCIvVHHlw
+MIa5FF57HtIxDp1eIv6Tv5he0zG/np0qzQHDr8LI37qr+rr5vFRdjyDZwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHbg/WEOI0QN7XpZGodYvjlYQN6RMB8GA1UdIwQY
MBaAFAbaHGsaZfej2X+b1158rDE1JG+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MmEzYjEtMTE3ZC00YjE3LTk2NjIt
NDVlYjczOGNiOWM4LzEvZHVEOVlRNGpSQTN0ZWxrYWgxaS1PVmhBM3BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MmEzYjEtMTE3ZC00YjE3LTk2NjItNDVlYjczOGNiOWM4
LzEvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsAp0AwQA
uSDdMA0GCSqGSIb3DQEBCwUAA4IBAQAlW/LY4w0pF0BTO3R762dFve2fDTRXPhQ7
j+mGBjrCtApaJjnV5a/2ibnhhy3RcgVueZOT6EGnYPGVH8Ko+HM1Zr87MDyddD/o
6l//uJNJh/cUzZFIrfcgvbsYa9UISLKoBdYO+NXTkjaOq6pRltoIBNDWDw5/3uw3
zViMvi6nu+9D6XVF1gIXC9tW/x3lfgCIWwup8b9BGez7Bpvk5N86bj0yj+VRwDRI
vZcNLJKDa+aZHbkY7ntMArFLQz1J4ykw6vTgxjLD0NB4pM1CX5458sVoWvD7mVwm
FQ+CFdiUUZLdnqdWzPXDIBWf/oFhpGypgrVcdEM3DHLUIBOczv7/
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net