Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/AHbXdKXc3M-CfGXTwbfq7QGRrvM.roa
File: AHbXdKXc3M-CfGXTwbfq7QGRrvM.roa (raw, json)
Hash identifier: YbPDz6n014xlIU7wVTub26EyYvqoU35p6NFQjROCV14=
Subject key identifier: 00:76:D7:74:A5:DC:DC:CF:82:7C:65:D3:C1:B7:EA:ED:01:91:AE:F3
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019424455C8BF2F19EB90F8F54AD11364677
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/AHbXdKXc3M-CfGXTwbfq7QGRrvM.roa
Signing time: Wed 01 Jan 2025 23:48:32 +0000
ROA not before: Wed 01 Jan 2025 23:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48624
IP address blocks: 176.56.80.0/22 maxlen: 22
176.56.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5c:8b:f2:f1:9e:b9:0f:8f:54:ad:11:36:46:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 23:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0076d774a5dcdccf827c65d3c1b7eaed0191aef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:30:6d:ca:25:81:44:47:c3:ff:92:9d:00:
7d:e2:e4:1c:77:df:fe:95:74:5c:70:bf:8d:2d:de:
80:b3:85:42:04:51:bc:d5:3c:c7:6a:c5:c2:0e:da:
82:23:1e:85:0e:12:59:8a:54:8f:59:f1:35:ed:37:
e9:dd:a5:4d:12:c6:a4:c3:b2:d0:ba:66:31:9f:25:
5b:fa:6e:9f:56:66:9f:2d:b4:0e:df:5d:57:76:e8:
0c:d8:f1:f0:37:b8:6c:9b:9e:10:a0:51:60:90:cb:
ab:bf:7a:28:7b:6c:0d:0c:45:44:ac:66:e2:d2:a1:
d6:8e:75:94:74:23:c0:19:03:12:a1:be:5b:17:ae:
71:4a:13:e5:af:68:5f:17:bd:ff:cc:e2:57:d1:60:
22:53:a8:5e:0b:67:12:b2:22:0a:0e:a3:dd:50:1a:
ad:23:6c:ed:e1:91:75:ac:4d:a9:22:ec:e9:14:2e:
bf:bb:f2:2a:11:8b:40:56:d9:b9:cf:a0:87:31:5b:
e7:22:d5:8d:93:61:4c:a3:76:a6:9f:bd:13:c3:c6:
c1:e7:41:8a:e2:ac:48:44:7b:c5:41:a1:d9:83:7a:
e2:aa:67:0d:7a:de:f4:6b:fd:68:0d:ff:34:dc:5c:
a4:97:0b:a8:cd:52:6f:d2:b4:eb:9c:53:d5:9c:db:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:76:D7:74:A5:DC:DC:CF:82:7C:65:D3:C1:B7:EA:ED:01:91:AE:F3
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/AHbXdKXc3M-CfGXTwbfq7QGRrvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.80.0/22
176.56.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:b9:04:93:1e:42:00:52:62:d0:76:c1:32:ba:32:d2:b7:37:
4d:69:55:76:2a:4b:8a:a9:62:2f:bb:2c:20:63:80:4d:f0:df:
ca:3c:a0:93:3f:31:c6:57:a1:6a:ca:3e:0c:4b:c1:02:5c:99:
4c:5c:f1:93:fc:36:be:80:54:f1:39:64:0f:2a:cb:50:7c:e4:
e8:50:0a:66:13:f4:f2:c3:78:fa:55:c3:1d:32:66:22:53:71:
0e:9d:93:52:9a:1f:58:47:0f:bb:85:9e:42:15:0e:dc:d4:23:
a8:2d:16:8a:11:f2:7c:e2:02:58:a4:48:8a:91:12:4f:83:4d:
cf:e6:2c:c5:ca:ba:a7:11:a5:97:7b:93:56:c6:b4:5d:94:55:
c0:e8:a3:94:0a:cc:8e:86:be:ff:e2:19:04:fa:0c:30:90:75:
f8:4c:1a:fe:f8:da:6b:22:ba:77:2b:38:f3:da:89:47:a3:1e:
20:f6:4e:f3:f1:59:b8:f8:7e:e3:2d:7c:1c:19:25:85:42:89:
6b:46:a6:85:a3:88:ea:9e:8b:5d:22:30:7b:b6:84:13:13:57:
55:46:3a:f6:06:1c:53:e1:9e:3a:6b:33:08:8e:e3:61:63:93:
8e:90:03:f1:02:b3:a2:94:15:db:9b:8c:f4:83:5c:db:62:3a:
2b:b3:e6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:09 2025 by rpki-client on console.sobornost.net