Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/CYA45jvCbEO2l0W0K4Yvuhonu7I.roa
File: CYA45jvCbEO2l0W0K4Yvuhonu7I.roa (raw, json)
Hash identifier: Z5HUS2DoouZlFaN9FRCtoYgwYCuLzEGUPo5jQZ0EKqc=
Subject key identifier: 09:80:38:E6:3B:C2:6C:43:B6:97:45:B4:2B:86:2F:BA:1A:27:BB:B2
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B23B76364642E3E903F6DE44313D1E
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/CYA45jvCbEO2l0W0K4Yvuhonu7I.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201119
IP address blocks: 185.32.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3b:76:36:46:42:e3:e9:03:f6:de:44:31:3d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=098038e63bc26c43b69745b42b862fba1a27bbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:f7:5c:64:26:2e:7f:ae:81:92:b0:a0:87:
6a:99:20:25:d4:20:21:f2:58:ab:52:1a:e4:98:ac:
7e:bd:3e:a3:d9:dc:d9:a2:ae:60:ad:70:4d:3d:48:
43:0f:a7:05:01:79:ca:7b:de:76:ac:dd:9d:dc:b3:
c7:43:cd:6b:d8:79:0a:45:57:2e:1e:b3:ae:63:d7:
f3:77:6f:77:42:0e:0e:ea:6f:02:ac:cf:9b:ea:62:
f5:58:49:16:81:91:32:dd:26:d3:0d:8f:64:85:1d:
9c:22:7e:83:38:86:eb:1f:51:51:38:66:f1:50:d3:
25:56:de:08:52:2b:18:43:0a:95:b0:6e:43:55:14:
c4:d8:82:1c:fe:62:11:b6:b4:bd:50:cf:6f:2b:c4:
7f:87:7e:c3:5c:e7:6b:ff:88:e7:8b:1a:40:87:f4:
01:6b:45:c7:1a:6b:0e:3e:41:ff:e1:d8:0d:d5:81:
28:82:bb:b2:01:55:9f:54:8b:7a:b3:3a:91:69:e3:
4f:d6:0d:12:fa:5f:0d:3c:a7:55:db:f1:59:53:5a:
f8:b3:7f:da:e6:75:bf:cb:d1:6d:5f:94:46:9a:29:
56:7f:dc:b7:7e:94:1d:90:06:bf:67:79:8b:4e:4c:
6b:0b:a0:a9:8f:cb:58:8d:37:a3:bc:9b:16:77:26:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:80:38:E6:3B:C2:6C:43:B6:97:45:B4:2B:86:2F:BA:1A:27:BB:B2
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/CYA45jvCbEO2l0W0K4Yvuhonu7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d3:97:76:2b:3b:39:bd:52:57:db:ef:76:69:1a:55:1b:2a:
99:21:a1:dd:52:2d:69:30:0b:fa:a0:6b:1f:3a:b9:43:8c:0d:
85:03:92:70:40:80:18:2b:53:89:dc:16:2c:56:79:df:43:74:
f4:a3:86:f7:bf:36:75:f2:c2:58:61:5f:3e:8e:ea:e2:e3:e9:
f4:7f:b8:7c:9c:64:d3:c1:9f:55:f2:1f:28:66:bf:2c:74:15:
57:3a:b5:c7:7b:ff:d8:a3:5d:77:29:a2:ed:58:bf:75:7d:68:
2d:6d:a6:72:af:26:4c:22:19:a0:1b:83:cf:77:fe:35:76:20:
85:e6:da:dc:05:c5:84:ca:ce:0f:f1:c4:7b:ce:1d:41:3d:19:
af:d5:8c:f6:dc:8b:01:63:75:f7:90:40:0e:8a:48:53:11:2d:
b7:d8:3b:b6:6d:14:9b:c2:7f:d0:f1:13:a5:57:bb:4b:b0:39:
a9:00:f5:47:06:b1:3d:6e:79:ae:04:91:22:78:22:f4:1f:15:
05:79:28:31:61:55:a3:66:ad:fa:b4:82:bb:de:c7:4d:ea:b3:
6a:58:b3:0e:5e:59:ab:04:5a:f0:31:e4:dd:36:08:d6:7e:1a:
d3:f2:c0:4a:a5:36:7f:04:a3:e9:75:73:36:cf:9a:25:fb:f6:
24:6e:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:04:23 2025 by rpki-client