Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/CoX1lhKeqnywoZzkBVdeBK0K-8E.roa
File: CoX1lhKeqnywoZzkBVdeBK0K-8E.roa (raw, json)
Hash identifier: UeFCTUO9sjJL5Z6FG4W0m09+58Inz20WQtlj2knxqFc=
Subject key identifier: 0A:85:F5:96:12:9E:AA:7C:B0:A1:9C:E4:05:57:5E:04:AD:0A:FB:C1
Certificate issuer: /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial: 01941FFAA6BDF52248577719D82935170804
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/CoX1lhKeqnywoZzkBVdeBK0K-8E.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 213.156.160.0/24 maxlen: 24
213.156.161.0/24 maxlen: 24
213.156.162.0/24 maxlen: 24
213.156.163.0/24 maxlen: 24
213.156.164.0/24 maxlen: 24
213.156.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a6:bd:f5:22:48:57:77:19:d8:29:35:17:08:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a85f596129eaa7cb0a19ce405575e04ad0afbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:2c:0f:47:1a:45:d8:68:8c:11:db:19:10:
2c:af:4b:a3:fd:ce:aa:43:be:f2:e9:02:15:c9:fb:
91:2d:e9:6b:0c:b7:d0:fe:5d:37:cb:17:55:ff:f1:
23:b4:90:d3:cf:91:7d:84:5b:a3:a6:d8:20:9f:3d:
fc:4b:b7:58:33:63:c3:b9:26:d8:24:7f:4a:73:94:
16:cb:aa:fe:22:35:9e:3d:22:ed:a3:7d:79:5f:a6:
fd:b8:d8:02:f6:20:dc:eb:69:54:25:ae:bf:f5:23:
6a:26:f1:da:6d:c4:10:8d:10:96:ed:e5:19:2a:97:
07:fe:cd:0d:67:4a:d2:01:98:1a:3b:84:ee:8a:74:
6e:df:e3:d1:fa:cb:08:42:ef:55:3c:93:ef:3b:d3:
5a:bc:11:76:55:0b:8b:82:ba:e0:ab:b5:d8:0b:50:
25:3d:fe:80:30:41:f2:a2:f0:67:b0:f7:08:28:83:
f7:d9:92:3c:08:6e:b2:3b:3e:d1:b6:0b:c8:26:aa:
06:1d:70:da:e6:81:13:13:1e:e1:bb:52:33:48:57:
9f:a2:7b:64:9d:f1:5d:4a:f9:3b:15:34:53:02:f9:
b0:57:f9:e4:10:ed:81:b2:e1:fb:7d:f9:53:37:0f:
bd:c0:bc:19:b0:a4:94:fd:5f:2f:cd:9e:f2:bf:ee:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:85:F5:96:12:9E:AA:7C:B0:A1:9C:E4:05:57:5E:04:AD:0A:FB:C1
X509v3 Authority Key Identifier:
keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/CoX1lhKeqnywoZzkBVdeBK0K-8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.156.160.0-213.156.165.255
Signature Algorithm: sha256WithRSAEncryption
92:c8:eb:c6:3b:94:28:81:13:bc:b9:d0:8d:68:0a:4d:e1:74:
5b:4b:60:a8:72:c0:27:8c:09:25:d1:76:37:35:74:03:43:33:
b1:a4:83:f2:23:e5:2f:c9:3e:df:34:e5:33:46:37:b5:cc:64:
dd:49:44:b0:e7:3b:a1:53:03:8e:95:70:6e:79:3c:7e:1e:17:
b1:7b:f5:36:95:19:88:96:d6:4b:f0:89:91:80:c7:9a:1c:4e:
01:cd:4c:c5:16:88:4f:ff:bd:4e:4c:f3:14:3d:37:77:40:12:
71:39:c6:b0:43:13:5d:33:d4:a5:3b:69:8a:94:6b:c7:a8:6e:
32:ba:17:74:c5:be:18:5f:96:4a:77:29:75:e4:ce:72:e7:d7:
36:69:a1:b9:68:ed:3a:68:67:b7:7e:b7:9f:f8:40:d5:d7:d8:
34:e2:71:cb:e7:87:f4:7d:73:ce:9b:2e:f3:65:20:47:ca:c5:
bb:f7:b2:62:7e:e0:13:04:77:e0:24:45:42:1d:16:e8:88:51:
e4:cf:7b:a9:b2:14:34:16:8f:60:3d:87:97:f5:02:22:9d:f1:
70:7b:d0:fe:03:4d:cc:ac:a6:6e:73:d3:f7:b5:13:0a:88:3f:
9f:f9:77:2c:1a:c4:1e:7e:93:da:34:ee:1b:f2:99:98:a3:90:
15:ed:8a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:28:51 2025 by rpki-client