Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/J9SzMyryAFC_OzFKYPqywnd5Br0.roa
File: J9SzMyryAFC_OzFKYPqywnd5Br0.roa (raw, json)
Hash identifier: tz0cLWrM/Dq2R1F5tThXDJ646Az4nk2pJtl3x3+rukE=
Subject key identifier: 27:D4:B3:33:2A:F2:00:50:BF:3B:31:4A:60:FA:B2:C2:77:79:06:BD
Certificate issuer: /CN=6ec946cb4f9f8fb43a6d8feecfc27c1c213b1905
Certificate serial: 01856FF0300D187FD8DDDA06C469C2ACEAC8
Authority key identifier: 6E:C9:46:CB:4F:9F:8F:B4:3A:6D:8F:EE:CF:C2:7C:1C:21:3B:19:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bslGy0-fj7Q6bY_uz8J8HCE7GQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/J9SzMyryAFC_OzFKYPqywnd5Br0.roa
Signing time: Mon 02 Jan 2023 00:44:49 +0000
ROA not before: Mon 02 Jan 2023 00:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198668
IP address blocks: 176.119.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:30:0d:18:7f:d8:dd:da:06:c4:69:c2:ac:ea:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec946cb4f9f8fb43a6d8feecfc27c1c213b1905
Validity
Not Before: Jan 2 00:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27d4b3332af20050bf3b314a60fab2c2777906bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1b:c9:31:ff:8d:3f:30:0b:f4:63:de:23:34:
6f:be:3b:fa:c6:fc:ae:8f:4c:74:71:f6:bf:2d:f4:
49:d5:46:05:30:d9:a7:a9:9d:2e:21:7b:00:db:94:
5f:a2:19:52:24:54:fa:68:ef:b3:3c:01:4c:ef:9d:
df:64:86:d8:33:bf:29:d4:d4:5a:ee:ad:b8:ef:28:
dd:89:97:ab:d7:8d:4b:2c:32:fa:51:4b:07:74:e4:
a7:89:31:3a:6c:83:27:86:bc:9f:72:64:e1:ba:9f:
bb:68:dc:b2:a7:53:72:18:4d:9c:24:bf:16:dc:98:
4e:8b:82:70:73:92:99:06:05:f6:e1:e7:cc:28:27:
4c:09:0e:68:eb:8b:1e:d0:2e:36:fe:c3:ad:05:bf:
8b:53:15:17:09:f9:1d:36:07:aa:13:be:b7:f6:70:
73:61:cc:b7:70:7c:7d:d6:b6:66:56:34:4f:16:52:
b2:05:0d:ca:e0:fb:80:ca:93:39:2d:aa:c6:f3:25:
72:33:8b:39:6c:57:06:03:1c:c5:3c:e2:40:12:c7:
06:85:8b:11:47:bc:74:00:12:a7:46:51:4b:21:7e:
61:4f:9a:e0:0e:e8:d6:41:bc:fe:83:1f:87:09:ad:
27:5b:3c:5f:58:8c:b1:75:cf:f4:45:92:aa:99:12:
06:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D4:B3:33:2A:F2:00:50:BF:3B:31:4A:60:FA:B2:C2:77:79:06:BD
X509v3 Authority Key Identifier:
keyid:6E:C9:46:CB:4F:9F:8F:B4:3A:6D:8F:EE:CF:C2:7C:1C:21:3B:19:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bslGy0-fj7Q6bY_uz8J8HCE7GQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/J9SzMyryAFC_OzFKYPqywnd5Br0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/bslGy0-fj7Q6bY_uz8J8HCE7GQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.192.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f8:f7:b1:61:f8:1d:a1:37:9a:a9:88:93:c9:96:a5:ba:de:
19:7a:4a:ed:20:df:41:76:96:a4:12:fe:ea:c1:6f:12:7a:25:
e4:71:1c:e1:4b:3a:40:6f:4e:2a:ed:e1:10:6f:8e:b8:50:75:
26:7b:03:df:e1:66:14:fe:c3:75:6d:80:ca:86:fe:53:2f:93:
78:7f:e4:04:85:00:0e:8c:5f:9b:08:aa:0d:70:93:14:aa:99:
c9:6f:36:55:1c:6f:3a:ec:ac:e3:f1:31:c2:f5:9b:4b:a5:1f:
37:3f:e1:1a:20:7a:e6:16:d5:f4:59:18:9a:8c:43:35:83:8b:
22:05:93:86:b3:1c:fb:58:33:5a:9a:92:96:2e:4b:d7:0e:ae:
57:39:f7:90:9c:71:66:6d:a9:fb:b7:27:ce:26:63:02:c2:7f:
2f:42:72:d4:3a:24:8f:91:97:9c:28:7e:bf:c9:80:06:35:bd:
e6:90:11:94:71:b8:07:d4:2f:12:7c:58:d9:81:c3:43:0e:9e:
c7:22:29:fc:1d:f3:45:08:b4:c4:3d:da:e2:5a:67:3c:c4:cd:
62:0f:59:bd:4a:7c:82:62:b7:e4:27:fe:33:50:15:78:b0:f6:
d3:74:8e:94:db:87:16:8b:1f:40:69:0d:61:95:89:01:6c:7e:
f6:67:f5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:02:29 2025 by rpki-client