Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/6-79eBIbULMVbHrPcNGj9dmUiu4.roa
File: 6-79eBIbULMVbHrPcNGj9dmUiu4.roa (raw, json)
Hash identifier: FrlQTe8kEWeXtyHj+b1yz3lKR+V9ndVE2LULVktlI9A=
Subject key identifier: EB:EE:FD:78:12:1B:50:B3:15:6C:7A:CF:70:D1:A3:F5:D9:94:8A:EE
Certificate issuer: /CN=7565008df899598c7a2c0f98b70f234bf6178011
Certificate serial: 01856F9DE451F9FBFBFD00D69BB8D39FF2FC
Authority key identifier: 75:65:00:8D:F8:99:59:8C:7A:2C:0F:98:B7:0F:23:4B:F6:17:80:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/6-79eBIbULMVbHrPcNGj9dmUiu4.roa
Signing time: Sun 01 Jan 2023 23:14:56 +0000
ROA not before: Sun 01 Jan 2023 23:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 176.126.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:e4:51:f9:fb:fb:fd:00:d6:9b:b8:d3:9f:f2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7565008df899598c7a2c0f98b70f234bf6178011
Validity
Not Before: Jan 1 23:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebeefd78121b50b3156c7acf70d1a3f5d9948aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:af:33:a2:ed:80:22:d7:6e:f1:0b:bc:5f:c3:
31:dc:b2:98:48:c3:30:3a:dc:f0:6b:37:c7:5b:e2:
ad:3f:6c:bf:19:4a:e7:e7:ef:17:8f:26:4f:9a:7f:
ca:0a:44:83:de:e5:aa:42:fe:4f:1c:75:14:8c:b1:
64:34:29:d9:04:6d:f3:a1:91:57:de:c4:a0:b0:7b:
db:d9:06:5d:63:a0:1d:0e:8f:ea:60:88:d0:27:bf:
6d:d6:91:58:14:9b:cb:c8:c8:7b:4f:1b:26:18:05:
67:54:ba:6d:26:b1:9a:a0:8f:9a:23:0f:58:a4:5b:
d1:f8:fb:e2:0e:b2:35:33:16:de:32:a9:47:b9:ec:
a3:5c:4d:5d:e7:24:ce:16:da:44:95:6d:bb:dd:23:
94:e9:a5:be:6f:9b:c6:da:3a:b0:16:21:88:ff:50:
f5:84:a4:fa:0b:41:30:ba:41:ed:7b:63:63:da:6f:
2d:c4:3a:74:3d:b1:6a:9c:ae:e4:d4:8d:94:92:03:
07:71:46:25:04:6c:65:0f:fd:e6:d7:a7:fd:7e:89:
6d:06:ab:6c:be:ee:c1:5e:42:ca:ea:5e:9e:b9:ab:
0a:4f:77:7f:b4:38:04:21:01:5d:36:c6:3a:5f:e2:
ff:c2:bb:a3:64:bb:93:f2:87:98:80:60:df:cc:a0:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EE:FD:78:12:1B:50:B3:15:6C:7A:CF:70:D1:A3:F5:D9:94:8A:EE
X509v3 Authority Key Identifier:
keyid:75:65:00:8D:F8:99:59:8C:7A:2C:0F:98:B7:0F:23:4B:F6:17:80:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/6-79eBIbULMVbHrPcNGj9dmUiu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.111.0/24
Signature Algorithm: sha256WithRSAEncryption
21:66:39:a7:54:22:68:9c:15:cd:e6:f3:25:68:c0:95:d4:a5:
f5:5b:d7:bd:a2:6b:c0:05:d8:ea:fd:f5:6c:6d:5e:9b:1a:bf:
dd:f8:51:2d:f4:76:99:a2:2f:91:e4:29:93:8a:c0:8e:9e:50:
f0:6f:48:4d:be:1d:99:81:59:a2:72:d2:27:21:ec:f7:d8:97:
2b:68:73:82:29:6b:ad:71:62:8c:23:8d:2f:81:d2:a0:5f:72:
68:d7:9f:41:a8:21:62:f3:3e:3f:eb:68:a8:e9:cb:2f:69:2b:
19:2a:8b:82:a7:a5:e3:0f:6f:60:59:bb:ee:6f:27:c5:39:be:
36:86:12:74:4d:9e:94:5a:3d:99:f3:a9:a6:d0:da:78:12:72:
9f:ec:77:d4:2a:a3:3f:e2:92:06:26:ee:8a:5e:6f:2d:8c:85:
7d:9b:79:01:a7:85:81:ed:04:91:06:ce:6c:88:90:38:2e:ce:
33:94:99:03:c6:60:87:4e:1e:28:01:13:f8:2f:fa:40:9d:a0:
3c:5e:94:9b:cb:1d:6c:c5:3d:b0:6d:4f:54:50:da:a2:26:f6:
ea:2f:98:b2:6c:7e:bd:d2:e0:09:9e:f9:c0:6f:48:34:b1:41:
25:6a:7b:87:67:cf:cc:83:c3:88:aa:23:5e:23:03:e3:c3:c1:
f2:cb:ea:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:33 2025 by rpki-client