Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/cdM459bUqR9CDHxK6hkgW3z_lyI.roa
File: cdM459bUqR9CDHxK6hkgW3z_lyI.roa (raw, json)
Hash identifier: yGuDalXNxH1KMB1e5SARV7XMjke+R1A0tgbxBSQwq0g=
Subject key identifier: 71:D3:38:E7:D6:D4:A9:1F:42:0C:7C:4A:EA:19:20:5B:7C:FF:97:22
Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial: 019427B5F2996475BB6F7B97FCDBAC1C4D9B
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/cdM459bUqR9CDHxK6hkgW3z_lyI.roa
Signing time: Thu 02 Jan 2025 15:50:22 +0000
ROA not before: Thu 02 Jan 2025 15:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 176.116.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f2:99:64:75:bb:6f:7b:97:fc:db:ac:1c:4d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
Validity
Not Before: Jan 2 15:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71d338e7d6d4a91f420c7c4aea19205b7cff9722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:fe:fe:df:49:6b:65:c5:60:fa:49:12:ec:
2f:4e:aa:5e:b6:c0:ba:3d:60:05:10:99:3a:5f:fd:
f8:95:b5:5a:89:62:87:5b:fc:97:ff:21:6c:08:2f:
66:3a:9b:1e:de:f8:54:6e:69:82:ee:30:29:70:cd:
af:db:36:f8:46:4f:b8:54:ab:68:d3:12:94:90:fa:
ae:fa:57:c2:34:80:62:d0:3b:b1:b7:dd:e0:9e:06:
6f:7f:72:bd:93:b4:ba:20:db:47:74:7f:c0:9b:ba:
8a:19:40:06:9d:83:99:c0:5e:f4:76:d9:15:c8:03:
18:3f:3d:54:02:a2:a9:44:48:e5:5d:8d:61:da:41:
cc:9a:8c:1b:1a:cd:0e:52:e6:6e:6a:f3:54:99:4f:
0e:57:05:ee:52:77:6e:7c:b7:99:cf:ca:a7:b7:1e:
00:18:7a:e0:02:e0:31:67:9f:f7:18:23:85:4c:5c:
d9:24:00:5e:e5:34:d6:27:45:d7:ec:09:94:69:c4:
cc:56:3f:ea:06:62:a6:67:a7:9d:f1:9e:87:7d:cd:
b0:7e:c6:e6:da:2c:0c:1a:b8:24:bf:1f:b4:45:9a:
07:ce:ba:66:76:e0:37:eb:b0:0f:f0:06:c8:ae:24:
fe:f4:c2:56:8e:3c:4c:7c:35:41:0b:72:00:79:d3:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D3:38:E7:D6:D4:A9:1F:42:0C:7C:4A:EA:19:20:5B:7C:FF:97:22
X509v3 Authority Key Identifier:
keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/cdM459bUqR9CDHxK6hkgW3z_lyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.14.0/24
Signature Algorithm: sha256WithRSAEncryption
64:86:11:7c:ad:79:f7:4e:45:6a:d3:64:dd:64:f6:01:17:71:
31:25:fa:c2:88:60:89:8b:d1:5e:b2:82:28:3d:23:fc:8d:4c:
78:14:11:1a:cc:2a:34:d3:e0:67:56:f8:14:dd:35:9f:3e:30:
fb:42:f7:2e:a0:02:35:9f:6d:1c:d3:23:69:74:76:8d:e4:fa:
46:95:8e:07:eb:fb:85:20:71:b6:09:4c:4b:f6:d5:f0:ba:5d:
28:7a:32:f8:6c:2c:0a:ca:c0:d8:c0:65:8b:92:4d:89:86:52:
1f:57:e5:70:81:f7:e8:3e:21:d9:ea:ec:c2:97:a3:0b:4c:29:
b8:ce:b0:0a:33:32:8a:69:0d:1b:9e:5f:10:bd:09:08:4e:17:
d2:76:3c:be:8f:f7:0f:20:72:0f:2b:3d:b2:b1:82:c7:d1:d7:
ce:2d:54:6c:76:dc:8c:1a:da:85:e8:e7:93:81:b6:57:ea:74:
12:d1:a8:f0:b3:28:97:89:b2:01:d7:74:c4:e6:e9:6d:8f:5e:
93:e4:80:a6:27:4c:e3:b4:32:e3:1d:05:bb:15:77:f6:3b:be:
86:4e:77:ad:04:bf:cb:ef:ca:10:df:e3:49:85:67:9d:d0:09:
81:20:f1:96:f3:78:cf:1f:9e:56:00:5a:71:d2:a5:c5:ad:25:
47:92:c2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:52 2025 by rpki-client