Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/yCCs4shbMfXFkRbB-dbVm3aK1dE.roa
File: yCCs4shbMfXFkRbB-dbVm3aK1dE.roa (raw, json)
Hash identifier: ERGKfWwqWpDoNIV4hNRq6bDPGoH2AztZvrPKQ4MnRxU=
Subject key identifier: C8:20:AC:E2:C8:5B:31:F5:C5:91:16:C1:F9:D6:D5:9B:76:8A:D5:D1
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 019425FDC8A53F9C2427600F7926E4190067
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/yCCs4shbMfXFkRbB-dbVm3aK1dE.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210669
IP address blocks: 176.126.121.0/24 maxlen: 24
193.107.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c8:a5:3f:9c:24:27:60:0f:79:26:e4:19:00:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c820ace2c85b31f5c59116c1f9d6d59b768ad5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:56:42:e0:3d:8c:b8:0d:86:41:3f:b2:02:
90:ca:a2:74:83:3b:47:33:2e:f7:8d:04:98:f1:20:
31:db:35:61:44:9b:9b:1d:1a:54:32:19:c9:87:cb:
2e:5a:5d:05:da:a9:58:58:40:6b:42:a3:88:d8:3b:
ac:2a:5a:e2:a4:05:00:c4:50:7b:a8:ba:9f:6d:d4:
e8:d7:a0:7f:a2:a0:71:b8:29:2d:48:a4:8c:1a:da:
1a:1e:c5:96:d4:61:e7:e4:af:d0:ce:a3:17:9f:3c:
e4:b6:f9:0d:15:14:f7:00:c4:3a:1f:f1:34:73:34:
20:c8:8e:f4:cc:fc:8e:72:fa:e3:da:57:4b:13:f9:
b8:e6:7c:66:c7:f7:23:be:d3:6c:e3:39:c9:f3:23:
2d:e0:2e:ea:65:da:4a:72:aa:15:e7:72:a6:aa:5e:
87:08:24:6d:90:2c:12:78:72:32:21:13:83:e9:38:
fd:bd:b8:8f:35:48:68:ef:11:41:c7:13:d7:ea:61:
56:68:84:ae:99:8d:24:3a:e7:7a:f9:2e:7e:da:4c:
b2:b5:58:3c:ed:86:b3:72:78:22:b3:48:b4:ac:ab:
9a:bf:24:80:22:a0:a1:ba:4a:f3:3e:e6:52:5c:2a:
c1:be:7a:c6:3a:e8:61:9a:a6:d5:e2:35:40:d3:79:
fc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:20:AC:E2:C8:5B:31:F5:C5:91:16:C1:F9:D6:D5:9B:76:8A:D5:D1
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/yCCs4shbMfXFkRbB-dbVm3aK1dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.121.0/24
193.107.81.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2e:14:2d:ee:30:a8:eb:92:ee:c4:fc:91:2b:73:2f:b9:ca:
13:34:89:91:83:20:d5:71:48:61:cf:9f:45:58:1b:06:0b:74:
f8:a2:45:f4:af:ef:bc:31:05:e2:84:0b:7e:cd:43:4e:77:d4:
e9:d1:a0:10:3e:e5:3a:a2:24:a2:19:9b:18:d8:2e:44:0e:3b:
65:52:54:b0:62:75:0c:30:d9:d2:4e:42:6a:66:d0:9e:c8:4a:
84:21:c5:62:eb:93:fa:f3:35:50:d3:56:c4:11:5f:d8:43:62:
43:49:c0:a4:06:6b:e4:d0:3e:7f:6f:9f:d8:a0:b6:79:6a:a2:
59:80:17:a5:98:86:28:8e:ac:58:21:54:69:8f:9e:b7:26:d0:
0e:f9:e6:52:f9:b4:3b:28:fc:f2:84:5c:e8:b8:70:f2:d8:2b:
40:02:ab:fb:1e:76:37:96:bb:02:83:db:62:be:6a:12:49:b4:
0a:c7:39:1f:f2:0a:8b:5d:da:3f:4c:c7:9f:02:ae:4f:09:59:
a7:65:6a:7b:b8:ec:25:81:38:a7:50:08:b5:d7:46:38:62:84:
b5:18:29:63:8f:99:e2:84:f3:27:ec:18:0a:e3:10:05:c9:52:
d9:1e:34:e8:59:c1:37:1d:12:e7:55:7e:ae:0e:b3:c9:d1:24:
e0:12:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net