Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/fsiSKtfr1vd7jNqGvz2rWlb2WGU.roa
File: fsiSKtfr1vd7jNqGvz2rWlb2WGU.roa (raw, json)
Hash identifier: JYUZh82zsCTaCv7uAVxiuRXoppFvfB/m/R6UI/2LG30=
Subject key identifier: 7E:C8:92:2A:D7:EB:D6:F7:7B:8C:DA:86:BF:3D:AB:5A:56:F6:58:65
Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial: 01942067D3674E7AB62FD4ECD8274DD90A26
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/fsiSKtfr1vd7jNqGvz2rWlb2WGU.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 176.124.200.0/24 maxlen: 24
176.124.201.0/24 maxlen: 24
176.124.208.0/24 maxlen: 24
176.124.209.0/24 maxlen: 24
176.124.210.0/24 maxlen: 24
176.124.211.0/24 maxlen: 24
176.124.212.0/24 maxlen: 24
176.124.213.0/24 maxlen: 24
176.124.214.0/24 maxlen: 24
176.124.215.0/24 maxlen: 24
176.124.216.0/24 maxlen: 24
176.124.217.0/24 maxlen: 24
176.124.218.0/24 maxlen: 24
176.124.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d3:67:4e:7a:b6:2f:d4:ec:d8:27:4d:d9:0a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ec8922ad7ebd6f77b8cda86bf3dab5a56f65865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:e8:a2:6b:d7:be:ce:2d:14:7a:6d:25:22:
e6:e9:6f:57:79:98:70:6e:60:9b:81:a2:a6:98:90:
87:d1:8c:44:79:56:ef:6b:78:98:38:a6:6e:a2:5a:
70:9a:81:1f:fc:37:ae:3d:cb:27:89:ab:67:75:13:
8a:b8:02:ed:a5:2c:4e:23:a1:a9:87:2a:d9:23:32:
a2:d7:8b:39:d7:15:6f:28:10:9e:5c:ad:da:22:34:
fa:01:58:ca:47:4e:c8:d2:de:8f:04:88:18:4b:43:
f0:5d:fc:82:f6:f6:fe:2d:93:ca:83:8b:e5:fa:4a:
5a:fa:31:80:f8:41:5d:1f:fb:c2:00:10:a6:67:71:
79:d7:18:78:ee:30:8a:bf:21:c6:96:48:01:da:50:
90:97:32:f9:dd:45:37:0d:9b:e5:12:25:2a:5f:04:
9f:0d:90:b5:83:50:7c:ea:8b:49:8e:42:65:e5:82:
ee:c0:e9:90:7f:7e:c2:7c:13:12:54:7b:f8:91:56:
7e:bb:86:1f:a1:c3:40:26:a4:70:c4:29:53:2c:41:
13:85:33:ec:8c:62:2f:a6:26:83:d0:60:f7:9d:56:
4b:10:fb:ac:01:77:b6:b2:08:83:65:4a:bb:a5:df:
c9:dc:2a:a3:7d:eb:ec:eb:54:4d:a0:63:a1:12:e9:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C8:92:2A:D7:EB:D6:F7:7B:8C:DA:86:BF:3D:AB:5A:56:F6:58:65
X509v3 Authority Key Identifier:
keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/fsiSKtfr1vd7jNqGvz2rWlb2WGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.200.0/23
176.124.208.0-176.124.219.255
Signature Algorithm: sha256WithRSAEncryption
23:a1:80:a2:d9:f1:59:d2:b7:5d:d8:73:9b:a5:c0:39:5d:bc:
4e:52:2d:01:92:e3:3e:ca:e8:73:4e:f9:07:32:a0:13:47:ef:
e5:00:9b:22:d9:6b:11:95:a1:48:cb:6a:bf:d9:d8:3d:7a:38:
32:ee:85:74:de:6c:3b:23:72:0d:26:b5:1d:04:b2:18:37:58:
3e:a2:20:b5:0b:39:af:76:3a:27:ac:ac:77:2f:d7:fc:dd:15:
a3:8f:d7:f0:fb:75:7a:ff:35:e6:73:0a:0e:d5:33:3f:67:94:
3f:91:89:1c:10:f1:2a:f7:8a:52:40:10:b2:82:2f:07:fd:50:
3b:e9:93:a3:d9:a5:d3:15:4f:7c:f3:9d:fe:fb:a4:f4:26:2d:
0d:c1:0a:28:70:e4:dd:83:cd:55:d8:e5:a1:49:fa:c5:2d:82:
6c:61:46:79:e2:aa:81:87:f8:7d:26:b0:16:82:ef:a5:e3:30:
b2:48:c4:25:ae:fc:8c:e7:73:c3:42:60:2d:90:31:39:27:c5:
62:30:2b:18:b7:31:5b:57:3c:38:0e:60:51:7c:cd:87:5b:ec:
d3:15:e5:67:b5:3d:8d:d5:7d:26:59:f3:79:0b:2d:22:3b:73:
ba:4a:3f:af:23:10:e4:04:18:67:24:18:8e:24:6d:07:7b:4f:
31:9a:c6:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:40:21 2025 by rpki-client