Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/yroUuw1scM5vJqw9L2C1NZloBMg.roa
File: yroUuw1scM5vJqw9L2C1NZloBMg.roa (raw, json)
Hash identifier: tq+65QQs/oxlmOUT1sm7YA/yaQJk+Rn+QS41OHsKCiw=
Subject key identifier: CA:BA:14:BB:0D:6C:70:CE:6F:26:AC:3D:2F:60:B5:35:99:68:04:C8
Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial: 01942067D57525C04D92346CA873D541075C
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/yroUuw1scM5vJqw9L2C1NZloBMg.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 176.124.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d5:75:25:c0:4d:92:34:6c:a8:73:d5:41:07:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caba14bb0d6c70ce6f26ac3d2f60b535996804c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:c3:b8:47:91:80:23:70:a8:74:e0:b5:61:
fc:88:24:a3:a1:37:cb:e9:4e:69:c2:8a:be:56:ee:
f4:19:70:65:b5:ca:25:ba:57:5e:69:85:f0:55:01:
8a:e3:a8:3b:a9:27:c1:0b:49:5b:2b:6b:b5:b8:ce:
61:36:f1:09:a2:13:49:90:5c:ca:fe:95:45:a0:ad:
77:96:49:fd:9d:cc:01:aa:07:7c:c5:79:54:46:20:
55:8e:04:25:60:c0:a7:a3:63:fb:0e:9f:e1:d9:bb:
48:76:56:8e:fa:52:3a:b3:20:2b:d8:fe:54:54:9a:
d5:19:58:76:77:c3:fd:83:16:35:f3:ad:76:ed:4d:
a9:6c:78:17:8d:46:71:cd:c0:ae:0d:87:a4:21:65:
a5:7c:2b:fb:cf:05:2b:4a:76:63:8c:ba:4f:d3:42:
41:bf:ff:d2:3b:92:69:96:2c:01:ea:31:2e:00:ec:
a9:9e:6d:1b:b8:dc:79:ce:87:0d:06:92:ae:89:59:
15:07:f3:c4:01:39:ed:f5:15:06:1a:76:d1:4c:a2:
ec:3d:4e:2f:d0:58:24:a3:ca:d9:b7:68:bd:b6:4b:
f4:87:02:23:71:95:b5:bb:80:26:a6:35:de:fb:54:
2f:83:a2:c8:5f:61:c7:09:c8:10:b4:0a:40:8e:05:
29:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BA:14:BB:0D:6C:70:CE:6F:26:AC:3D:2F:60:B5:35:99:68:04:C8
X509v3 Authority Key Identifier:
keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/yroUuw1scM5vJqw9L2C1NZloBMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.222.0/24
Signature Algorithm: sha256WithRSAEncryption
96:58:b9:4e:c8:04:ed:bc:20:7e:b0:68:ca:29:78:2b:6c:00:
1e:d9:75:ed:6f:4e:6c:b5:02:b3:96:55:de:ac:82:a3:d1:0b:
dc:cc:97:e8:34:8b:da:0b:8f:3d:60:6f:1d:93:ea:d6:99:42:
ab:a6:8e:a2:5b:8d:0d:da:1f:07:bc:f5:be:27:90:d1:d0:30:
c0:e2:20:61:67:98:20:3f:3d:7d:46:a3:a0:af:54:f6:23:42:
9d:13:ed:1d:c5:2d:c0:ac:24:52:9e:ca:b9:6f:65:68:35:f8:
9a:cc:b2:b4:e2:a7:5a:17:35:6b:c4:83:d9:47:15:81:7e:30:
b2:44:61:4e:50:af:36:76:59:a2:20:90:f5:fd:2a:68:78:75:
66:4b:f1:cf:9b:e4:89:51:12:49:bb:57:07:5c:97:11:4e:ba:
fb:aa:24:f0:e9:a8:f9:69:c7:a8:b7:d1:a3:fb:92:95:50:27:
3c:ce:2a:f6:c8:f4:68:7b:cb:fc:aa:a4:a7:e3:f4:34:73:a7:
ca:77:9b:cc:42:69:ff:0a:10:a4:31:9d:95:51:40:fc:45:c5:
e9:f0:f5:bc:cc:61:45:08:db:74:4d:43:ca:12:b8:9b:b4:92:
ce:2c:04:30:66:d6:07:59:c5:81:21:ab:ba:33:a0:d9:4b:9d:
02:a3:68:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:23:06 2025 by rpki-client