Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/0bSnoMCDjomKjH9l20xWi3AzK8U.roa
File: 0bSnoMCDjomKjH9l20xWi3AzK8U.roa (raw, json)
Hash identifier: w7ylFdvDoXCXnQ/NKrVCZ3HeQ1sG0SNLXLUNJWq26Aw=
Subject key identifier: D1:B4:A7:A0:C0:83:8E:89:8A:8C:7F:65:DB:4C:56:8B:70:33:2B:C5
Certificate issuer: /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial: 019420D666217814B2C8CA243D1E061D095E
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/0bSnoMCDjomKjH9l20xWi3AzK8U.roa
Signing time: Wed 01 Jan 2025 07:48:29 +0000
ROA not before: Wed 01 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44651
IP address blocks: 85.159.48.0/21 maxlen: 21
93.92.56.0/21 maxlen: 21
178.21.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:66:21:78:14:b2:c8:ca:24:3d:1e:06:1d:09:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Validity
Not Before: Jan 1 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1b4a7a0c0838e898a8c7f65db4c568b70332bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:95:e7:ae:9f:7c:d0:99:ba:70:b8:87:21:
6e:9e:50:26:89:6b:79:96:b0:5e:13:11:d0:a5:db:
09:a3:28:01:8c:dd:f2:72:6a:d8:53:0a:a4:ef:b1:
66:c1:8a:91:6b:4f:81:51:6e:c5:52:a4:35:bf:27:
ce:7a:b9:4e:04:bd:38:49:84:de:c7:8f:4f:0b:6e:
06:a5:34:f6:cd:5d:6c:59:f5:a4:c1:d7:c3:2e:7b:
ac:61:24:d8:71:4f:22:9e:ce:05:27:d0:34:7a:1c:
4c:cb:35:11:63:fc:7a:07:8d:62:b8:03:d7:b9:dc:
4d:8a:87:7a:a0:61:c1:59:d8:f9:7a:77:81:17:bf:
6b:26:1c:52:38:37:db:7b:fd:3b:9f:a0:15:64:a7:
4b:c7:8c:79:0a:a5:d0:dc:f1:52:cd:c6:f3:42:80:
dc:f1:7a:4c:3f:f3:b9:5e:6b:f1:e7:c7:ad:a2:2d:
dc:a2:67:c4:e1:d2:90:a8:c1:81:52:37:46:53:04:
12:d6:bd:87:2d:e2:82:7e:ea:98:b6:7b:57:01:3d:
7b:c1:68:26:be:90:56:8b:0b:56:3f:c1:86:0d:77:
db:c3:30:07:8a:fa:05:dd:0c:cb:e4:e1:75:f1:95:
08:0a:ab:51:c6:c5:5f:77:56:78:b6:85:f7:69:ae:
3d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B4:A7:A0:C0:83:8E:89:8A:8C:7F:65:DB:4C:56:8B:70:33:2B:C5
X509v3 Authority Key Identifier:
keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/0bSnoMCDjomKjH9l20xWi3AzK8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.48.0/21
93.92.56.0/21
178.21.48.0/21
Signature Algorithm: sha256WithRSAEncryption
33:1a:60:34:de:fe:cb:51:7b:20:2d:86:25:f6:0b:4f:c3:6d:
0c:dd:ce:b5:d8:e4:ac:c9:c1:c5:11:8b:db:d3:25:18:71:16:
95:e0:68:fc:30:e8:c2:e9:76:94:4d:95:73:8d:44:4a:53:82:
55:5d:ff:88:a8:0c:c6:43:11:36:00:77:58:83:02:19:28:a4:
e8:72:68:60:41:41:5c:23:ec:e0:df:4c:d1:62:13:b8:ce:f4:
32:bb:38:61:73:c6:d5:15:3b:b6:a6:05:86:fd:4f:4a:8b:59:
ea:7e:77:32:22:34:1e:fe:4f:15:65:b2:78:a0:a4:11:33:4f:
aa:03:5b:34:be:c7:5b:fd:50:2a:76:27:18:f4:70:c2:d1:5e:
c9:57:c2:20:a8:cc:4f:d9:a6:f7:50:c5:32:c6:5e:61:88:8a:
c3:fb:e9:67:0a:ac:3b:4f:20:63:d1:40:8c:cd:9b:61:2e:cb:
67:51:7e:db:de:28:37:5e:4d:9a:5f:e8:32:91:ac:14:a1:34:
57:e9:43:a7:d8:81:ff:89:12:0d:a0:c2:60:d2:8a:f7:2b:56:
c4:86:c7:51:35:00:bb:ac:42:cc:72:2d:a9:80:a6:dc:31:34:
4f:3a:17:2a:91:c9:5a:c5:11:b6:77:79:b8:3e:e4:93:a3:43:
ba:e6:92:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:45 2025 by rpki-client