Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/9102de-d3bb-46f2-a567-69a3573c2e33/1/z5x7j_WasEJIsCkynDtiGol5-5g.roa
File: z5x7j_WasEJIsCkynDtiGol5-5g.roa (raw, json)
Hash identifier: WTw3iiWh+gJInlQOmOPeK18AqvhmOSyQWVZGsmIDB3Q=
Subject key identifier: CF:9C:7B:8F:F5:9A:B0:42:48:B0:29:32:9C:3B:62:1A:89:79:FB:98
Certificate issuer: /CN=4c91418c204d8649a340b67b3283628f2f8858e7
Certificate serial: 018CC26D5C042656984C10A74C1A0629FA82
Authority key identifier: 4C:91:41:8C:20:4D:86:49:A3:40:B6:7B:32:83:62:8F:2F:88:58:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJFBjCBNhkmjQLZ7MoNijy-IWOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/9102de-d3bb-46f2-a567-69a3573c2e33/1/z5x7j_WasEJIsCkynDtiGol5-5g.roa
Signing time: Mon 01 Jan 2024 00:29:56 +0000
ROA not before: Mon 01 Jan 2024 00:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210669
IP address blocks: 176.126.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5c:04:26:56:98:4c:10:a7:4c:1a:06:29:fa:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c91418c204d8649a340b67b3283628f2f8858e7
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf9c7b8ff59ab04248b029329c3b621a8979fb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a9:7e:f9:eb:9d:72:b6:58:18:57:a3:aa:10:
7a:8a:d6:b5:36:0d:c8:bc:17:2b:70:56:6f:a5:47:
87:f9:c4:3a:66:ee:48:5b:3e:cd:5d:94:97:b8:f0:
88:c1:48:c6:6a:37:8e:7f:b1:a1:78:2b:78:23:e8:
84:bf:8f:50:0b:06:7e:07:11:5d:e6:40:18:c0:22:
09:6d:25:c0:b1:f1:93:6f:13:5f:bf:15:68:fe:3d:
73:e8:9d:57:16:c4:c1:ff:84:c7:5e:83:54:15:44:
8b:0e:24:60:ff:7c:9f:c2:16:00:e3:74:b2:67:15:
8d:d5:03:8d:0b:7c:34:7e:7c:78:79:41:9b:7f:e8:
df:fd:13:22:e6:13:0d:ab:b5:65:3e:5e:de:a9:64:
b0:49:82:1c:68:b8:f6:79:47:fa:d9:a4:6b:4c:2b:
f5:2f:7c:ec:b9:c3:ed:b6:78:88:e1:70:75:11:ce:
5e:7b:4b:43:81:ef:a6:d7:7a:22:d4:3a:c9:1f:bf:
78:c5:6e:26:14:67:5a:b6:76:d8:69:54:2e:e6:e3:
e7:f6:97:dd:35:ed:9e:ac:51:b6:8c:40:45:be:bc:
5b:44:4a:f5:d3:5e:56:f4:d5:51:01:62:2d:47:b0:
33:71:9d:02:7d:ac:f0:5c:5b:48:06:c1:3c:fe:f4:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9C:7B:8F:F5:9A:B0:42:48:B0:29:32:9C:3B:62:1A:89:79:FB:98
X509v3 Authority Key Identifier:
keyid:4C:91:41:8C:20:4D:86:49:A3:40:B6:7B:32:83:62:8F:2F:88:58:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJFBjCBNhkmjQLZ7MoNijy-IWOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9102de-d3bb-46f2-a567-69a3573c2e33/1/z5x7j_WasEJIsCkynDtiGol5-5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9102de-d3bb-46f2-a567-69a3573c2e33/1/TJFBjCBNhkmjQLZ7MoNijy-IWOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.121.0/24
Signature Algorithm: sha256WithRSAEncryption
07:92:a0:b4:17:cc:fd:44:e2:aa:26:b5:b1:bf:67:2f:55:f2:
4e:ca:75:e5:97:87:04:25:94:b0:7b:c8:99:6b:af:9d:65:76:
c7:77:3d:8d:b6:05:a3:42:a1:9d:ae:bc:48:ea:5b:0b:9d:0c:
de:82:ef:68:20:3f:4f:9e:1b:d6:87:1d:b1:02:cd:78:5c:3a:
2a:f1:8c:e0:23:10:25:f4:c2:7a:84:2b:be:12:45:b0:1e:33:
1e:88:d3:8c:82:e1:9e:17:6b:43:55:42:49:cb:cf:1c:2e:2c:
2a:c7:5d:d3:f9:2c:00:7a:a7:11:7e:9d:bd:ab:b8:8d:f6:4a:
34:5b:30:f1:82:22:b5:22:18:df:33:a3:49:fc:e3:ff:dd:f6:
6a:ad:71:03:04:b8:ac:16:25:31:f6:d8:cc:76:f3:73:c3:c6:
12:e0:ec:76:39:cd:88:51:7b:a4:1e:ec:d3:45:72:b0:b1:4b:
81:23:ff:0a:7f:16:38:b0:34:66:c8:9c:b8:49:80:a3:51:21:
34:92:37:58:8a:fd:8d:89:b8:6e:a2:2d:84:8d:c5:3e:81:1c:
36:31:69:53:3f:c7:3b:71:55:f0:40:4a:af:42:6f:1c:e2:02:
1c:b2:8b:eb:d5:92:15:2e:21:e5:99:12:2f:98:d7:38:f9:e0:
25:90:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:34 2025 by rpki-client