Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/CLgBj6oYt6sGJ5ZpJJTL8C3Fnrs.roa
File: CLgBj6oYt6sGJ5ZpJJTL8C3Fnrs.roa (raw, json)
Hash identifier: aUOM41Nf+BqbKmy9YjUFL+mBeBI8749PsIPj/loME94=
Subject key identifier: 08:B8:01:8F:AA:18:B7:AB:06:27:96:69:24:94:CB:F0:2D:C5:9E:BB
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3E75564F3DF19A2A98183049050DE
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/CLgBj6oYt6sGJ5ZpJJTL8C3Fnrs.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198690
IP address blocks: 5.181.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e7:55:64:f3:df:19:a2:a9:81:83:04:90:50:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08b8018faa18b7ab062796692494cbf02dc59ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:aa:33:92:c1:f7:68:98:f9:a9:14:6f:e5:
ac:b6:9a:2f:c9:2d:36:46:dc:14:22:32:64:cc:d1:
09:66:ae:bc:58:31:92:27:4f:83:a6:56:fa:b9:f7:
69:22:33:52:64:78:d7:13:15:4b:2c:f4:18:d8:1d:
e5:34:5e:0b:3f:61:71:31:fb:07:62:bf:db:1d:e8:
53:ed:61:5a:87:c8:04:c2:7d:de:40:de:cc:df:5a:
64:a5:4e:f1:fb:2f:4c:23:c4:1e:14:5b:1f:43:03:
57:74:5b:86:5a:0b:86:64:a9:f4:fb:42:01:9b:b4:
e1:5e:e9:fe:c9:66:8e:ba:e8:83:2e:ad:7f:61:06:
0d:fe:3a:20:17:2e:a1:3b:8f:ea:ac:d8:f1:5e:65:
b8:2b:bf:fe:92:b4:7c:f5:5b:80:6e:a7:42:27:8a:
a6:1b:3c:60:fc:b7:ab:ea:e5:0d:92:a3:4a:06:29:
fe:cf:9d:d4:f1:07:17:3c:c2:c9:34:0b:60:3e:27:
1b:63:d0:4a:bf:d8:31:c3:44:85:5a:f4:1b:3c:38:
88:fa:d6:fb:22:7f:2f:2e:67:ec:e5:c0:bf:33:ff:
d9:3c:12:26:39:b0:28:71:b2:e0:3d:d0:fd:bd:b6:
e7:a6:cb:42:e5:a2:59:28:70:0f:cb:d6:3b:63:87:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B8:01:8F:AA:18:B7:AB:06:27:96:69:24:94:CB:F0:2D:C5:9E:BB
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/CLgBj6oYt6sGJ5ZpJJTL8C3Fnrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.244.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:1d:46:b5:17:e5:45:b6:28:54:67:11:4b:af:98:0d:c7:23:
c0:63:64:b2:50:ea:c4:e8:66:e6:34:9f:66:78:8b:36:f0:97:
96:d1:f1:f4:33:40:b4:3e:2d:5a:7b:c5:40:b1:58:bf:d6:ef:
24:b7:47:11:0e:54:c0:8f:dc:3e:f6:c2:aa:c9:9d:60:ec:ac:
9a:83:12:82:b0:56:2a:17:83:c2:4e:34:b6:77:dc:a1:dd:90:
13:e4:57:35:1b:8b:61:b7:d3:80:ec:2d:f6:54:bd:b4:18:9d:
7a:cf:27:4b:32:70:56:98:e2:bd:6d:b5:3b:64:ba:21:d3:c6:
95:3c:83:61:f1:f7:69:cc:ef:59:1e:a4:38:e5:45:21:28:da:
00:3e:6c:79:1e:c3:62:b9:1a:a2:d4:55:55:02:a8:22:31:ae:
32:c2:f4:e4:50:30:de:30:bd:c4:de:54:5d:9a:52:7c:6a:35:
21:a1:f1:df:72:da:b8:fb:07:08:fd:a4:08:7d:61:62:ba:08:
09:b8:9a:59:2f:e0:dd:41:cb:29:b3:50:7c:6d:da:8c:64:da:
03:96:39:bd:ad:a0:df:86:12:30:29:17:1a:09:9a:ba:f7:00:
71:05:b6:b8:8a:ae:00:ed:f8:6f:9d:bc:22:58:1a:0b:ad:8a:
cc:58:bf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:44 2025 by rpki-client