Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/Vr2MHbk4BkpwijegPw7svFXxpY8.roa
File: Vr2MHbk4BkpwijegPw7svFXxpY8.roa (raw, json)
Hash identifier: J4FlYQ16tBtXCX4bdbpdB9oishsKJVSj1Pc1U4pte9s=
Subject key identifier: 56:BD:8C:1D:B9:38:06:4A:70:8A:37:A0:3F:0E:EC:BC:55:F1:A5:8F
Certificate issuer: /CN=d31af2872c3f5503073866dffef488b71783dab6
Certificate serial: 019420D5BECF3C3C4FC2FF2A70E071358D45
Authority key identifier: D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/Vr2MHbk4BkpwijegPw7svFXxpY8.roa
Signing time: Wed 01 Jan 2025 07:47:46 +0000
ROA not before: Wed 01 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198076
IP address blocks: 176.123.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:be:cf:3c:3c:4f:c2:ff:2a:70:e0:71:35:8d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31af2872c3f5503073866dffef488b71783dab6
Validity
Not Before: Jan 1 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56bd8c1db938064a708a37a03f0eecbc55f1a58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:18:8a:11:ab:6f:3d:02:c9:30:2d:7b:a3:
9b:e5:e5:69:68:0b:06:1c:58:f6:48:d8:85:ee:a9:
28:d5:53:64:54:13:03:aa:da:9a:9a:ff:a8:7f:1d:
5c:35:ca:ea:92:68:94:86:e5:79:f1:0f:a0:24:7e:
c5:66:3e:06:de:9b:bc:0d:a2:18:a5:cf:25:8d:77:
2d:a4:34:ae:35:3d:e4:4c:ae:e9:4a:e5:13:09:37:
f1:42:76:6e:a7:47:16:b3:28:aa:91:48:50:47:a2:
aa:36:40:4d:d7:95:ff:77:33:6a:61:4c:7c:a6:7a:
f0:c9:eb:87:39:10:3f:47:16:63:02:16:aa:f1:f0:
96:3a:60:24:13:54:bd:5b:4b:b9:ba:45:d1:f0:d6:
68:ab:62:d2:06:bd:86:fd:49:e9:a3:90:b7:dc:11:
e4:c9:80:a8:37:60:66:2b:c1:14:15:a4:42:8e:cd:
15:a9:09:47:38:bb:0a:03:25:59:26:43:8d:aa:1f:
57:c7:e8:a9:3c:b9:e7:be:f6:3e:7f:6a:6d:17:e9:
9e:e7:95:f6:d0:cc:58:7f:cc:ec:42:86:75:27:40:
04:e9:af:df:35:0b:e8:10:51:69:d6:f0:5a:14:82:
3c:b8:ac:c8:a0:98:d8:33:bb:13:ec:a3:98:e8:e9:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BD:8C:1D:B9:38:06:4A:70:8A:37:A0:3F:0E:EC:BC:55:F1:A5:8F
X509v3 Authority Key Identifier:
keyid:D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/Vr2MHbk4BkpwijegPw7svFXxpY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.49.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d9:e2:9a:26:f2:49:92:7f:8c:c7:17:4d:8f:cb:ee:0b:51:
56:84:4c:c1:3d:4a:24:8a:81:8d:36:ca:db:93:db:05:5a:ef:
6b:77:37:9f:0c:d1:e0:33:db:bf:06:22:c3:13:90:36:41:6c:
d0:08:e9:b3:2c:d1:4a:9c:32:b0:e2:d2:1f:56:b1:2c:22:74:
4d:37:7d:63:bc:38:85:ab:9c:fa:a9:79:b7:5a:79:3a:5b:14:
d4:03:46:b3:60:6a:54:4a:9e:d4:3a:ee:a8:79:6e:e6:f2:b7:
6e:db:7f:47:7e:4d:b2:1f:ca:a4:9d:69:fe:3f:19:08:0d:f1:
84:84:99:88:58:0b:02:7e:f7:d4:84:5a:34:b6:77:56:43:16:
51:c6:f4:2b:37:59:1a:5f:69:90:10:45:8f:fe:d7:c6:75:07:
a9:12:1a:6c:ec:b4:6c:f1:87:a3:18:37:0f:48:ea:79:39:26:
6f:85:f2:0a:4e:74:f3:23:eb:95:ca:39:fd:e3:5b:29:6f:ae:
f3:2b:6c:a3:7d:ea:5a:ed:73:25:dd:ea:49:8d:22:f9:f0:de:
77:52:e5:a5:59:4f:fd:fd:28:9f:dc:3b:7b:98:4d:06:2a:de:
6b:6b:c3:8e:b6:6c:eb:aa:66:5c:62:36:34:8b:71:56:3b:57:
c3:c8:c6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net