Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/CFOZr5K4u7x_YX6_U6hIA8IRmOY.roa
File: CFOZr5K4u7x_YX6_U6hIA8IRmOY.roa (raw, json)
Hash identifier: HqOhk6I2Vf/rg/kDQla8OLlJAtDWtBfcBuCSfoM+fac=
Subject key identifier: 08:53:99:AF:92:B8:BB:BC:7F:61:7E:BF:53:A8:48:03:C2:11:98:E6
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018DE5D528E35451949BE534543FA33EA05E
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/CFOZr5K4u7x_YX6_U6hIA8IRmOY.roa
Signing time: Mon 26 Feb 2024 14:32:48 +0000
ROA not before: Mon 26 Feb 2024 14:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 212.42.192.0/20 maxlen: 24
212.42.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:d5:28:e3:54:51:94:9b:e5:34:54:3f:a3:3e:a0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Feb 26 14:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=085399af92b8bbbc7f617ebf53a84803c21198e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:bf:fb:a8:34:60:fc:b9:37:fc:04:5a:0a:
9b:3c:55:58:aa:17:d5:6c:7e:21:e7:97:b6:c4:f2:
dd:cb:15:ca:93:36:42:27:72:cf:5f:91:fb:8b:3b:
ff:ca:2b:1f:b9:3e:7f:ff:47:d7:df:07:5a:aa:f1:
30:68:0b:6a:1c:06:a3:d5:70:17:82:f8:25:89:7f:
a8:62:18:74:10:b1:47:5e:5d:97:1a:c1:56:62:53:
61:38:12:62:bf:98:5f:d5:c2:c1:42:1a:2e:14:a2:
7e:5f:4b:6b:b9:4d:dc:a4:89:4c:f2:68:72:70:01:
46:1e:fc:14:28:0c:28:64:55:cf:20:27:66:06:05:
64:ce:8a:57:68:ce:81:35:8d:91:c6:aa:06:12:a4:
52:fb:2b:6e:8d:4f:3c:8c:bf:83:55:d3:bd:d0:f0:
10:93:33:4e:2f:6b:9f:a9:50:ed:10:e7:2a:d4:ec:
c7:79:e8:6b:25:4b:c4:dc:d3:b7:a9:a1:ed:4d:97:
d1:a3:b2:a6:57:69:d6:9a:11:5b:5b:dd:8a:48:9e:
13:6a:d1:f7:8c:84:5b:83:f2:44:03:40:72:c3:5c:
74:62:28:78:a2:be:6d:51:fb:5f:59:73:40:13:97:
e6:21:ad:c1:87:22:f2:dc:33:f1:0e:ca:b5:fc:18:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:53:99:AF:92:B8:BB:BC:7F:61:7E:BF:53:A8:48:03:C2:11:98:E6
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/CFOZr5K4u7x_YX6_U6hIA8IRmOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.42.192.0/19
Signature Algorithm: sha256WithRSAEncryption
c9:69:f1:40:de:a3:ce:be:78:dc:da:99:b5:d9:45:72:2f:5d:
9e:4c:af:c7:45:08:31:c7:59:ac:85:ea:69:70:9f:e0:2e:5c:
76:48:8e:db:73:84:25:d6:ee:3c:14:4a:bb:78:ab:d1:9d:71:
48:80:d9:3d:64:f7:d0:b5:09:72:e4:a4:42:76:cb:d8:c2:53:
6e:3a:0b:8e:47:f8:05:81:5e:2e:18:05:eb:56:df:9a:7f:5d:
13:e6:a6:91:2c:db:57:b2:f2:3b:06:5a:0e:54:2f:27:f7:2f:
19:b8:f5:de:6e:f9:a1:d5:cc:e9:29:54:ff:ed:f4:0f:ca:73:
eb:7d:0d:03:13:a8:b6:80:a5:31:b2:b0:c3:b3:55:99:3e:20:
d8:dc:09:8d:d9:65:df:39:68:03:9e:76:20:4c:85:3e:55:b6:
b2:55:eb:6f:9a:cd:fa:a5:ad:b6:36:4d:88:7d:6f:c6:56:f1:
b7:1f:f7:01:e8:bc:de:71:4b:7c:63:89:56:d9:34:4c:47:e8:
18:68:a0:84:0a:5b:cb:21:2c:cf:ec:0f:27:2a:fc:e1:53:a3:
ee:f7:be:17:16:50:7d:31:7f:98:05:6c:1e:92:ae:c9:3d:90:
e7:48:bb:89:b6:af:91:7b:00:29:51:81:c9:35:78:08:d1:3e:
c8:9b:9c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:21 2025 by rpki-client