Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/n7z_DfOtkGmMleyu2ItBMkfbWIg.roa
File: n7z_DfOtkGmMleyu2ItBMkfbWIg.roa (raw, json)
Hash identifier: JfGahSu9V1xovP5pxrTlWe3nwAxY6TrxY6kTUEokFws=
Subject key identifier: 9F:BC:FF:0D:F3:AD:90:69:8C:95:EC:AE:D8:8B:41:32:47:DB:58:88
Certificate issuer: /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Certificate serial: 01942067F8D1121DD7CC881A79D2BA1244AF
Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/n7z_DfOtkGmMleyu2ItBMkfbWIg.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 176.124.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f8:d1:12:1d:d7:cc:88:1a:79:d2:ba:12:44:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fbcff0df3ad90698c95ecaed88b413247db5888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:9c:f9:dc:5b:9d:45:06:1b:9d:88:09:2b:
b0:93:1b:96:22:81:02:67:38:2f:bc:76:cc:82:2b:
01:10:e2:d2:6e:b1:4d:87:da:88:f3:a8:74:96:b6:
53:eb:70:6b:d3:5a:9b:06:33:b9:05:8d:4e:85:64:
31:dc:57:69:40:c4:dd:3c:a5:66:37:a0:bb:47:62:
c5:f0:82:e4:92:3d:b5:68:a9:fe:a0:af:29:69:e5:
e0:a9:7c:08:3b:00:4d:44:43:cd:a0:fa:35:f9:2e:
5e:20:8b:1c:6f:ae:be:04:69:73:dd:d1:b0:c2:0a:
77:52:05:a6:af:4a:ef:49:8a:43:88:3d:d5:ae:bb:
b7:4b:9e:22:de:88:7a:2e:85:e5:0c:2a:66:6a:17:
b5:cf:a3:76:48:43:ab:d3:9b:34:60:81:7e:d8:82:
c6:07:b2:51:34:50:0e:1a:1d:6a:86:23:28:a8:39:
a6:92:81:f4:04:db:fd:a5:02:99:b7:a0:44:1c:c3:
85:8f:d6:bb:62:28:38:48:a6:5a:43:82:ba:a5:4e:
d4:bb:4b:44:6e:d8:06:85:e8:0f:8a:15:41:6f:e8:
5f:76:19:d2:9a:ef:79:7b:bf:b9:15:c0:61:e0:f6:
57:17:38:e0:cc:62:cf:41:a9:89:bc:9a:56:7b:40:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BC:FF:0D:F3:AD:90:69:8C:95:EC:AE:D8:8B:41:32:47:DB:58:88
X509v3 Authority Key Identifier:
keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/n7z_DfOtkGmMleyu2ItBMkfbWIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a3:20:c0:f2:04:52:7e:07:37:bf:d9:e6:18:d3:b1:4c:f1:
58:a4:e5:c1:65:f5:e4:9c:22:3b:43:56:e9:03:e9:65:7e:ac:
6a:66:02:5e:35:e6:f9:fc:ca:e1:39:84:51:c6:4a:05:ab:b0:
dd:a8:ed:6f:ad:81:ce:c7:0c:c9:e5:37:8b:fd:67:d7:7c:a7:
62:ef:3e:39:59:bb:b9:de:0a:43:f6:8b:19:90:05:2e:8e:f3:
63:6f:1e:23:99:79:39:52:37:81:be:6d:6d:b8:f5:18:80:5f:
11:d2:79:4d:93:13:3a:3c:d1:a4:60:96:4c:66:69:f3:df:69:
f7:64:eb:eb:d6:9c:b2:a5:87:8c:7d:24:e7:3f:50:d8:e1:ea:
c2:b4:68:bf:13:e3:a3:0d:f4:31:e8:37:a3:c4:ec:c0:23:21:
e3:09:06:ce:57:63:9e:18:19:df:49:6a:dd:7f:94:88:14:40:
fa:ba:dc:f3:cb:c3:35:56:7e:b0:56:6d:76:8a:a8:f5:6e:2f:
37:26:78:6c:d7:ec:d5:73:2d:64:31:0f:b4:e0:31:f0:70:21:
fa:12:7a:73:09:c0:71:60:06:a6:48:45:55:af:00:98:15:fa:
c5:e0:36:61:fa:64:ff:1e:4c:d9:df:fb:b3:a8:e2:b5:7a:1c:
6d:6e:7c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:20 2025 by rpki-client