Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CHPH26C4WK6Q65dvly5I0g_12uw.roa
File: CHPH26C4WK6Q65dvly5I0g_12uw.roa (raw, json)
Hash identifier: Pmra6X5cZFk1ZzmNHvjSHtTUzvO782iepsADts9O94o=
Subject key identifier: 08:73:C7:DB:A0:B8:58:AE:90:EB:97:6F:97:2E:48:D2:0F:F5:DA:EC
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C2B4E061A226C7F4BBA8A2C31F200
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CHPH26C4WK6Q65dvly5I0g_12uw.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49852
IP address blocks: 80.96.30.0/23 maxlen: 23
85.121.150.0/24 maxlen: 24
85.121.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2b:4e:06:1a:22:6c:7f:4b:ba:8a:2c:31:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0873c7dba0b858ae90eb976f972e48d20ff5daec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:76:b3:96:3e:d8:4d:54:29:6e:19:82:98:
5d:c9:06:20:d0:30:55:78:4e:3b:42:93:98:4f:0c:
a1:75:e1:2c:49:b2:f1:6b:f5:f0:c4:92:7c:95:9d:
59:8f:ad:d9:98:19:33:d7:cc:e8:07:a0:10:c3:54:
c4:15:a1:d8:77:c8:6b:b3:b4:8a:75:a2:55:e8:72:
bd:a3:9c:18:6e:50:cd:1d:48:72:7c:de:5b:4e:39:
7d:53:e4:43:d7:6d:9a:fe:e2:21:e1:6c:36:f1:42:
09:35:0a:fd:43:f9:7f:ac:96:a1:ca:b4:bb:f8:d5:
cd:77:d6:ed:88:78:dc:4c:a5:08:54:96:2a:8c:7a:
03:cf:4a:39:c0:10:0a:ed:7c:3d:49:68:33:e8:ee:
bf:43:f5:a4:af:af:d0:f7:8c:b9:89:d5:ce:6c:15:
2b:67:4e:88:cd:fe:a5:5e:8b:cf:c5:2d:97:fc:9f:
c7:77:f2:fd:66:b9:66:f2:26:24:cb:2d:6e:66:82:
55:29:f6:70:f6:eb:0d:c3:d8:28:25:b0:d4:6d:9d:
56:7e:ec:d0:0f:ad:72:71:13:55:4b:a3:c8:ea:26:
96:38:c6:0e:97:01:a3:41:8c:8e:12:26:06:20:dc:
57:67:20:24:e9:e6:08:eb:c7:c7:68:60:8d:f9:90:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:73:C7:DB:A0:B8:58:AE:90:EB:97:6F:97:2E:48:D2:0F:F5:DA:EC
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CHPH26C4WK6Q65dvly5I0g_12uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.30.0/23
85.121.150.0/24
85.121.218.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:00:13:7a:0e:b0:ca:03:26:d6:5a:d2:18:c7:d4:e3:cd:4e:
d7:18:ad:22:bb:c9:77:46:d3:7d:8b:4c:45:45:c2:62:1f:e1:
ad:a8:7f:1f:b7:1f:2f:36:76:e0:86:4c:6d:5f:c8:d4:d7:14:
1c:4d:5e:1e:0b:a1:fe:41:33:9e:8c:8a:f5:07:bd:5c:fe:aa:
d3:4a:b4:87:c4:95:02:4e:f7:8f:b5:f2:de:2a:cd:69:00:13:
87:db:32:77:a4:24:a5:f2:8d:2b:0c:1e:10:0d:aa:ff:a7:4e:
32:14:8e:8d:31:d6:d8:e9:99:92:ea:82:d3:b9:21:d4:d7:81:
ff:f7:e1:ed:66:86:1b:50:89:a1:68:6c:f6:75:cc:e3:e9:88:
9b:a1:e3:1b:09:60:f4:b6:16:18:8a:db:2d:ae:00:f4:e1:05:
4f:18:c7:91:3f:1d:7e:d2:a7:42:04:dd:c0:a9:f0:3e:3f:2c:
3a:ac:09:71:50:ac:08:78:99:f7:ad:1f:00:14:88:aa:f2:be:
99:98:cd:7d:a4:aa:15:f3:ee:f5:03:9b:e3:10:1d:47:ef:d7:
b9:ff:34:81:bd:ba:63:82:65:54:5a:5d:45:cb:b9:a7:bc:c6:
be:8d:f4:7a:8b:de:78:b2:ae:1f:46:94:df:32:39:1f:91:b2:
29:d8:9f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:52 2025 by rpki-client