Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jq7JjC5JOKczgNh0-VDgERIfMVc.roa
File: jq7JjC5JOKczgNh0-VDgERIfMVc.roa (raw, json)
Hash identifier: qHhxF7rpHzpOHRvc61R6xhbjw9YekBuMSQGNdCoV4aI=
Subject key identifier: 8E:AE:C9:8C:2E:49:38:A7:33:80:D8:74:F9:50:E0:11:12:1F:31:57
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB77B76C9796129956EB1D02F865D6
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jq7JjC5JOKczgNh0-VDgERIfMVc.roa
Signing time: Wed 01 Jan 2025 17:48:13 +0000
ROA not before: Wed 01 Jan 2025 17:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59606
IP address blocks: 176.119.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:77:b7:6c:97:96:12:99:56:eb:1d:02:f8:65:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eaec98c2e4938a73380d874f950e011121f3157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:90:0f:33:cc:be:b9:00:81:94:4c:67:76:
41:58:f1:06:ec:99:40:bc:0b:54:02:00:42:a3:3c:
3d:f2:b4:8b:58:8e:9c:2c:d8:c6:c3:55:be:a9:f2:
16:02:bd:a9:3e:78:26:9e:d6:f0:6e:83:7e:ab:65:
e0:e4:23:1e:e6:61:cb:0e:49:11:90:80:a1:fd:7e:
2e:d5:45:8f:62:98:9b:4a:cb:2a:83:8a:4d:6d:bd:
0b:dd:bc:fe:f9:d3:e8:e5:02:2f:c0:c6:5b:64:e4:
58:9f:47:6c:22:65:02:a8:c5:83:b5:f3:33:11:f4:
81:5f:18:29:84:45:26:6a:08:a0:3d:d8:54:79:d0:
93:77:c8:09:98:ae:3e:5c:66:c2:ba:38:5b:bf:58:
61:65:e1:e8:8e:c0:35:2b:74:13:a7:c3:87:69:dd:
42:f0:23:c8:4b:f1:e4:6d:ff:f4:04:7f:fa:00:11:
46:9e:f2:73:c8:b3:93:f7:b2:5a:db:fc:b9:6d:e6:
33:da:a8:eb:0c:e9:12:37:b3:ee:d3:a9:19:e6:83:
6f:f4:ec:69:78:d6:81:88:1c:d5:54:16:52:e0:b5:
4a:83:6b:a0:78:6a:0d:8d:13:69:e8:09:ee:2d:61:
ea:a0:74:10:d2:ac:65:a3:3c:82:73:f2:0b:e9:47:
be:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AE:C9:8C:2E:49:38:A7:33:80:D8:74:F9:50:E0:11:12:1F:31:57
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jq7JjC5JOKczgNh0-VDgERIfMVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.142.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:bb:9f:c6:45:a9:18:6e:e0:da:0e:fe:64:c2:8c:b2:da:b0:
6c:2f:13:c2:b0:fe:86:50:b5:31:5a:73:d3:78:f4:a5:b9:0f:
d3:00:62:d6:e4:50:1a:e1:1b:8a:46:da:a5:07:e9:d1:ed:4a:
4c:ac:1e:dd:d1:69:42:bd:62:82:dc:39:22:4d:88:e1:fb:b6:
60:40:86:68:3f:d0:b5:35:2a:77:cb:c5:c9:9a:25:b4:52:cc:
15:2a:4d:6e:50:ce:3d:e7:5d:93:59:55:c3:44:19:60:0f:21:
09:01:7c:97:69:0b:83:c6:8b:d7:d6:db:0f:70:da:0a:6b:91:
ed:17:40:02:2b:db:d9:ac:5a:c1:61:65:58:28:f9:e3:cc:50:
52:d9:13:6f:f0:6f:c4:b8:0a:4b:67:0c:31:08:b2:8c:52:9c:
81:a1:55:e0:39:8d:b2:75:32:60:58:b4:ed:88:7b:d1:64:71:
06:e3:68:3d:26:a3:61:a4:dd:32:00:90:46:bf:c5:85:e9:f3:
23:db:52:7a:e7:49:12:6b:4c:e6:90:e0:39:0e:cd:67:64:c0:
93:3f:54:ce:e6:10:ea:c7:50:ef:d0:00:97:dd:e5:bf:ab:27:
16:61:f2:88:6b:16:3c:80:c5:12:08:df:a0:f2:18:cc:cb:58:
99:b1:d5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:20 2025 by rpki-client