Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa
File: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (raw, json)
Hash identifier: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=
Subject key identifier: 0A:87:5D:31:09:BA:2D:30:92:65:9C:15:0F:24:4B:02:A0:17:38:B4
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019423D6C888B4030700427E82BB4E40DEBF
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa
Signing time: Wed 01 Jan 2025 21:47:46 +0000
ROA not before: Wed 01 Jan 2025 21:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44092
IP address blocks: 176.56.136.0/22 maxlen: 24
176.56.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c8:88:b4:03:07:00:42:7e:82:bb:4e:40:de:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Jan 1 21:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a875d3109ba2d3092659c150f244b02a01738b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:aa:e4:61:1f:c2:3f:aa:96:84:0c:63:81:f1:
b5:d7:fa:30:1a:02:ca:ea:70:9c:7c:31:8d:3b:5e:
93:73:21:aa:cc:6f:6f:25:ca:89:53:52:ed:ba:5b:
03:70:59:d0:00:bd:df:57:d3:fc:f2:de:8c:0d:62:
b1:36:bf:84:24:3b:83:6a:fd:10:2d:73:05:a7:ee:
1a:e3:f5:eb:1b:e9:16:40:f0:b3:f2:ae:14:71:d9:
be:54:bd:a9:81:71:f5:0b:c6:0d:ba:df:b4:0e:15:
79:1d:ac:14:83:4c:b1:41:22:93:49:f7:f1:f3:16:
d6:03:df:4f:b5:21:14:66:f8:93:f2:4a:c2:8d:e0:
60:3e:67:da:e0:49:56:5f:b2:0a:19:5f:a2:3b:a6:
6b:2d:05:a7:79:c6:77:47:3c:0b:1f:65:01:65:36:
c4:5c:b2:07:b5:21:5b:28:bd:d5:3c:65:6d:f6:22:
15:6d:8f:02:8e:31:ad:03:ed:dc:f7:df:8f:b6:28:
f6:29:49:36:76:5d:c2:87:12:b9:b0:d8:6a:a9:df:
ce:2e:9b:3c:62:a8:d2:28:89:9a:c2:f3:34:56:c1:
da:60:2c:f1:17:a3:4c:5e:22:8a:d8:ff:82:04:05:
3a:50:bd:ad:da:bc:5a:96:b4:54:2b:12:4c:49:5a:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:87:5D:31:09:BA:2D:30:92:65:9C:15:0F:24:4B:02:A0:17:38:B4
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.136.0/21
Signature Algorithm: sha256WithRSAEncryption
54:9b:ff:27:65:1e:c7:40:9c:25:7d:01:fd:b5:0f:d1:3d:14:
b8:f6:0f:70:9b:b0:ea:e5:99:b1:77:fc:7d:3c:22:f5:eb:84:
cf:c2:53:7b:bf:4a:7d:be:c3:d3:45:38:c5:f7:07:68:cf:5a:
14:9c:d7:67:21:a0:e1:24:21:11:9a:5b:c6:2f:82:54:9f:b6:
59:79:f5:b1:87:8a:cc:70:2e:73:7a:b3:9b:9c:80:29:b8:12:
35:6b:81:40:93:d9:2f:de:6e:cb:7c:02:21:3e:bb:37:6b:eb:
8a:7b:69:17:3a:53:64:6b:c4:db:b1:9f:2b:74:32:f2:76:c1:
bd:fd:4a:42:de:f2:57:ea:05:40:42:25:03:51:eb:e9:2c:51:
12:61:0c:29:bb:53:d9:01:ea:d7:26:43:58:d4:fd:f0:e9:dd:
b8:92:06:b0:50:a1:dc:3a:0c:3a:45:36:71:75:35:96:16:ad:
56:16:ff:b2:46:8a:e7:5f:c1:23:eb:f7:ad:ab:32:06:1e:ed:
ce:ee:12:6f:20:5f:58:3c:06:d9:50:87:82:08:a3:73:61:5f:
1b:83:c2:7a:1a:b7:9e:71:da:f4:14:66:23:83:f9:c0:18:dc:
dc:b5:86:81:6b:f4:29:31:10:70:66:1e:14:92:56:c4:88:f0:
6d:52:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:48 2025 by rpki-client