Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/ZrrY5yZDaijMwFk9J62DGbE7PoQ.roa
File: ZrrY5yZDaijMwFk9J62DGbE7PoQ.roa (raw, json)
Hash identifier: WLgQxcKDjvlfxGsniLIfs/lCDLWqV2wnKdkP7dsfdrg=
Subject key identifier: 66:BA:D8:E7:26:43:6A:28:CC:C0:59:3D:27:AD:83:19:B1:3B:3E:84
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 01D832
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/ZrrY5yZDaijMwFk9J62DGbE7PoQ.roa
Signing time: Wed 22 Jun 2022 05:56:44 +0000
ROA not before: Wed 22 Jun 2022 05:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49183
IP address blocks: 176.120.98.0/24 maxlen: 24
176.120.100.0/24 maxlen: 24
176.120.99.0/24 maxlen: 24
176.120.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120882 (0x1d832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jun 22 05:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66bad8e726436a28ccc0593d27ad8319b13b3e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:30:95:bb:3e:d8:6b:c5:f2:b5:65:ca:55:
f8:f9:88:5e:67:93:f9:27:6e:71:45:42:d3:e0:d8:
7b:40:68:5e:f7:e0:f8:35:d6:d1:15:7b:58:f4:db:
01:27:b6:e0:cd:50:7b:b6:f4:8f:be:41:cc:56:ca:
9d:c4:10:00:75:28:f3:76:52:57:c3:4b:3c:ea:2c:
98:08:98:14:06:9b:1f:c7:07:83:f6:ca:55:69:06:
4a:7a:d2:f2:11:2a:0c:87:9a:05:61:23:5a:e2:4f:
55:08:58:27:b4:4b:45:5e:80:7d:17:da:00:17:54:
cc:27:8d:44:d3:59:76:fc:e4:46:e1:e2:11:45:f8:
66:ae:8f:f4:d9:47:07:3b:6d:ae:54:8e:f4:0a:a6:
0a:75:5d:eb:ec:98:fe:19:18:3c:dc:2b:60:0e:26:
35:a4:51:c5:78:4c:20:39:a0:3c:0b:f1:a1:76:e0:
fc:6d:c0:f4:81:20:4a:36:d4:4a:de:1f:f7:a2:f8:
d0:06:5b:c4:d1:54:cc:fd:2a:ad:ff:0e:9c:5f:d0:
75:49:57:a5:64:26:1a:70:d1:54:8f:2b:50:1a:4b:
92:ab:20:ea:7e:d7:40:6d:66:ca:25:18:cf:5c:ae:
9c:d6:e3:14:7a:aa:49:3c:a9:d9:51:78:c7:32:06:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BA:D8:E7:26:43:6A:28:CC:C0:59:3D:27:AD:83:19:B1:3B:3E:84
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/ZrrY5yZDaijMwFk9J62DGbE7PoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.98.0-176.120.100.255
176.120.102.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f2:e9:78:a0:94:c9:61:ce:c4:4a:5d:9a:3f:28:d1:8d:5c:
d7:fe:bb:6b:cf:ee:60:5e:db:78:92:f6:37:fd:86:4d:99:05:
b3:06:e4:58:25:da:96:74:7f:ae:fd:32:bb:cb:b0:02:22:1d:
ff:6a:64:00:12:a8:ec:4d:0f:9c:0c:a4:01:7b:8a:f9:76:d6:
ce:01:83:49:0a:fc:50:bb:0c:25:b6:1d:26:97:6a:7d:db:d6:
fd:82:3b:ad:a2:d5:2b:2a:b0:f9:5b:5f:2f:d3:4b:1d:c8:b8:
60:c7:31:34:ff:56:f6:91:d5:e5:fc:75:ee:0c:0a:ef:5e:70:
f3:28:dc:86:c9:34:d8:b8:d7:48:85:55:77:b9:71:2b:5f:f2:
90:1d:d4:05:f5:cc:28:2f:ba:04:f0:98:26:21:97:99:82:af:
2b:e7:0f:aa:31:1e:5c:cc:7e:02:6f:44:92:b0:db:01:10:55:
d3:5c:44:a9:d3:e4:3a:d4:5e:6c:2f:27:bf:da:31:5c:c5:66:
77:a2:a6:8e:0b:cd:31:76:da:e3:b0:96:66:ca:e5:d5:90:62:
33:f3:e8:53:b2:64:de:88:35:5b:1e:a8:fb:e5:b7:f9:d4:b7:
57:db:a6:d8:33:55:90:e7:39:96:cf:f0:27:39:fa:28:72:d1:
94:bc:01:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:29 2025 by rpki-client