Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/CW5XXGbSHLy5qht82EbGk600atQ.roa
File: CW5XXGbSHLy5qht82EbGk600atQ.roa (raw, json)
Hash identifier: 8xLLW0wHU24TMYAN26pfip52tQpmGJnJ6m5zJ2CIta8=
Subject key identifier: 09:6E:57:5C:66:D2:1C:BC:B9:AA:1B:7C:D8:46:C6:93:AD:34:6A:D4
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 019420D64FB97DB3EC768E6F8B756332FECB
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/CW5XXGbSHLy5qht82EbGk600atQ.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 212.46.57.0/24 maxlen: 24
2a12:fc0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4f:b9:7d:b3:ec:76:8e:6f:8b:75:63:32:fe:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=096e575c66d21cbcb9aa1b7cd846c693ad346ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:5b:4d:8a:ff:7c:4b:56:0f:bc:ef:75:66:
c3:42:36:f9:9b:ac:1f:99:b8:ad:3c:16:95:31:44:
ca:a4:c6:9a:c9:fd:45:67:f2:37:05:8b:e2:0d:73:
32:90:44:6a:5b:b1:59:59:0d:c4:f4:2d:cc:9f:dd:
ec:d1:95:18:54:09:d0:00:08:b0:14:91:da:95:4b:
23:28:95:f3:db:11:2f:1b:b5:1d:e5:17:1f:aa:5e:
21:59:7a:d9:f4:cd:5d:3a:29:80:01:ee:e8:2a:ea:
24:c3:08:53:4f:33:03:4b:ae:b2:d7:6c:d4:cd:7a:
b9:71:d0:82:04:89:30:11:87:86:9b:25:7e:81:47:
99:9b:f9:c2:15:59:6a:c2:34:e4:5a:e0:85:81:aa:
66:00:cd:df:5c:e4:5a:b6:67:f2:a0:f6:6a:38:c0:
69:42:bb:a4:0c:8f:34:3a:e2:13:ea:d8:90:c6:a9:
03:28:0d:5f:29:ed:dc:cd:08:80:3a:af:2b:c6:9a:
c0:27:d5:97:dd:1a:06:8a:37:3c:a0:87:bc:f3:3e:
ca:e0:96:14:43:9e:74:c8:eb:cc:96:8a:c0:9f:67:
56:f5:51:9b:9b:15:9d:21:6a:e9:bc:34:67:a9:4c:
4d:c6:c6:3c:29:4e:d8:3d:b4:0a:ea:72:8d:cd:e2:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6E:57:5C:66:D2:1C:BC:B9:AA:1B:7C:D8:46:C6:93:AD:34:6A:D4
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/CW5XXGbSHLy5qht82EbGk600atQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.57.0/24
IPv6:
2a12:fc0::/44
Signature Algorithm: sha256WithRSAEncryption
00:13:b9:a7:b6:46:90:e8:7e:ee:44:6c:06:49:77:9f:e6:73:
b4:aa:83:84:0a:b9:32:b1:9f:92:3d:9f:9e:1f:c7:64:b0:83:
39:28:d2:52:7f:6b:a1:dd:4e:c9:7f:3f:f3:88:10:52:12:30:
43:e4:f1:d6:d4:18:f7:3d:36:6b:da:a9:30:de:3a:b3:d5:d4:
af:e1:09:2b:13:87:3a:37:1b:3b:8b:23:74:58:0b:01:56:e3:
30:9a:51:df:84:b4:5a:07:8b:c3:70:a9:ba:62:f3:88:01:42:
2f:a9:c7:d8:40:a7:88:cf:2c:8e:76:73:d2:a9:e2:98:d1:bf:
1e:34:84:15:39:9b:e1:76:97:b2:cd:4c:db:3b:e1:06:ca:3a:
5c:de:ae:f2:1e:cb:2a:9d:c5:41:04:6c:4d:2c:2e:bd:10:60:
2b:04:7a:58:6a:d3:10:de:38:f3:96:eb:50:be:29:4d:fc:24:
7d:85:e1:b9:ac:ca:87:4c:0e:f0:e3:b4:d6:32:76:cf:48:7e:
55:f1:8b:04:ac:c5:2a:4f:08:98:4b:00:08:c3:3a:54:d5:ca:
6d:8c:67:91:2d:02:8a:9a:09:16:c3:ec:0a:4e:8e:da:a9:e9:
e6:23:46:95:74:cd:d3:f1:12:e7:c7:7a:ed:4c:f3:e5:11:c2:
ea:ae:57:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:57 2025 by rpki-client