Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/oJSpmKHDBTQennb3bFM-AUri38c.roa
File: oJSpmKHDBTQennb3bFM-AUri38c.roa (raw, json)
Hash identifier: gaj/8isA/Vy8LzqeD5fj8KpWVmIYxfupI+6YOWca7WI=
Subject key identifier: A0:94:A9:98:A1:C3:05:34:1E:9E:76:F7:6C:53:3E:01:4A:E2:DF:C7
Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial: 01942067D41318C481E5CDBE25BA0080CA9F
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/oJSpmKHDBTQennb3bFM-AUri38c.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 176.124.202.0/24 maxlen: 24
176.124.203.0/24 maxlen: 24
176.124.204.0/24 maxlen: 24
176.124.205.0/24 maxlen: 24
176.124.206.0/24 maxlen: 24
176.124.207.0/27 maxlen: 27
176.124.220.0/24 maxlen: 24
176.124.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d4:13:18:c4:81:e5:cd:be:25:ba:00:80:ca:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a094a998a1c305341e9e76f76c533e014ae2dfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:1d:67:4f:a8:44:9d:7e:cd:7a:ee:0f:70:
0b:46:0e:b6:2d:d6:10:09:1f:e0:c0:62:06:4b:fb:
06:e9:f3:69:d9:3f:f5:4a:f7:46:c2:34:32:ea:a5:
11:1c:03:94:37:03:36:f4:a7:32:ae:39:25:9d:88:
04:f0:4b:42:ee:be:5c:9d:ad:a6:70:88:0d:04:1e:
a1:4c:49:fc:a4:51:55:75:0c:05:7b:a4:7e:53:98:
fe:2c:96:d0:35:f2:60:4c:c3:9b:c7:13:f3:5a:f9:
99:1a:bb:24:c2:6d:a1:61:96:ce:47:29:3c:e3:dd:
4d:cd:6a:ce:c8:c0:35:1e:19:03:09:22:33:f1:96:
13:b7:d6:6f:b5:7f:ce:f2:85:96:22:99:55:86:3b:
23:d3:48:f6:9e:a7:e7:94:16:89:58:59:83:f4:20:
7d:6d:cc:97:30:51:ad:27:f5:cb:23:a5:1a:e0:03:
e9:d7:a0:7b:1d:59:3b:1a:4c:79:69:64:78:e7:17:
d9:c9:8d:79:b8:40:ed:d9:19:04:2a:76:62:2a:cc:
f0:8a:9d:49:41:c0:c6:a9:62:8d:f4:90:84:35:57:
ab:93:c5:b5:57:27:83:23:e0:52:06:82:be:a4:83:
4c:00:10:af:38:a0:21:d7:18:7d:b8:b3:dd:1d:f5:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:94:A9:98:A1:C3:05:34:1E:9E:76:F7:6C:53:3E:01:4A:E2:DF:C7
X509v3 Authority Key Identifier:
keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/oJSpmKHDBTQennb3bFM-AUri38c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.202.0-176.124.207.31
176.124.220.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:eb:f8:bd:59:b5:0e:56:97:e4:f1:81:5f:97:1a:b6:59:65:
4b:a6:ec:bf:b2:b3:53:04:77:c7:0b:a4:a7:f0:14:8e:ed:b1:
48:71:17:79:7d:54:70:9f:a2:12:9b:41:53:2c:38:96:80:d6:
e9:32:23:21:83:19:ee:3d:04:6a:cb:41:26:38:ae:6c:c5:5f:
dd:29:87:75:23:60:c4:6e:83:41:5a:9e:0a:e8:83:d8:79:e5:
48:68:cd:07:f2:0c:f5:b7:4d:4b:62:86:b1:b2:d5:44:e0:75:
e4:09:ef:06:fc:a0:84:a0:97:20:05:c7:41:49:a6:35:5d:46:
b2:13:7a:4d:d0:e2:77:10:e8:9a:c7:fd:f2:a4:ab:2b:71:78:
5f:1f:70:b6:00:e1:22:66:0d:2f:1e:08:ca:c0:bc:6a:01:01:
bf:5f:86:42:52:86:6d:da:b6:4b:c1:b0:74:74:b2:dd:0c:e1:
16:cc:7f:04:6e:7a:47:5e:39:ed:2c:87:bb:9d:0b:a4:f0:b5:
bc:9d:42:85:a7:dc:1d:20:b7:5a:e9:c1:7c:fd:82:61:3c:13:
9f:17:d9:7b:40:4b:d2:70:88:37:66:3c:0d:f7:03:21:c4:7a:
a2:6d:5b:2a:7a:3f:13:3a:dd:97:48:fe:b4:d6:b1:72:f7:ce:
42:11:60:fc
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgZ9QTGMSB5c2+JboAgMqfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2Q1ODNjOGQ3MWEyNDI3ZTAwNjBlM2NjOTI0ZjMyZGMx
YTgyMGIwHhcNMjUwMTAxMDU0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDk0YTk5OGExYzMwNTM0MWU5ZTc2Zjc2YzUzM2UwMTRhZTJkZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLAdZ0+oRJ1+zXruD3ALRg62LdYQ
CR/gwGIGS/sG6fNp2T/1SvdGwjQy6qURHAOUNwM29KcyrjklnYgE8EtC7r5cna2m
cIgNBB6hTEn8pFFVdQwFe6R+U5j+LJbQNfJgTMObxxPzWvmZGrskwm2hYZbORyk8
491NzWrOyMA1HhkDCSIz8ZYTt9ZvtX/O8oWWIplVhjsj00j2nqfnlBaJWFmD9CB9
bcyXMFGtJ/XLI6Ua4APp16B7HVk7Gkx5aWR45xfZyY15uEDt2RkEKnZiKszwip1J
QcDGqWKN9JCENVerk8W1VyeDI+BSBoK+pINMABCvOKAh1xh9uLPdHfU9rQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKCUqZihwwU0Hp5292xTPgFK4t/HMB8GA1UdIwQY
MBaAFMzNWDyNcaJCfgBg48ySTzLcGoILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYt
ZjQ4NTAyZDEzOTQ4LzEvb0pTcG1LSERCVFFlbm5iM2JGTS1BVXJpMzhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYtZjQ4NTAyZDEzOTQ4
LzEvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAATAVMA0DBAGwfMoD
BQWwfM8AAwQBsHzcMA0GCSqGSIb3DQEBCwUAA4IBAQCK6/i9WbUOVpfk8YFflxq2
WWVLpuy/srNTBHfHC6Sn8BSO7bFIcRd5fVRwn6ISm0FTLDiWgNbpMiMhgxnuPQRq
y0EmOK5sxV/dKYd1I2DEboNBWp4K6IPYeeVIaM0H8gz1t01LYoaxstVE4HXkCe8G
/KCEoJcgBcdBSaY1XUayE3pN0OJ3EOiax/3ypKsrcXhfH3C2AOEiZg0vHgjKwLxq
AQG/X4ZCUoZt2rZLwbB0dLLdDOEWzH8EbnpHXjntLIe7nQuk8LW8nUKFp9wdILda
6cF8/YJhPBOfF9l7QEvScIg3ZjwN9wMhxHqibVsqej8TOt2XSP601rFy985CEWD8
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:09:16 2025 by rpki-client