Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa
File: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (raw, json)
Hash identifier: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=
Subject key identifier: 09:C3:93:5B:00:5F:86:70:CA:E2:2F:82:97:AB:E0:4D:0D:4D:7B:A4
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 0194236A28A570ABEFBAD90CFEB36E2848A4
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205544
IP address blocks: 185.236.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:28:a5:70:ab:ef:ba:d9:0c:fe:b3:6e:28:48:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09c3935b005f8670cae22f8297abe04d0d4d7ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1f:93:f3:ea:43:6a:2f:0d:87:51:91:8e:47:
1e:3d:80:ab:f7:4a:8a:63:55:d0:14:cc:8c:68:96:
f8:b0:d9:48:a2:d7:95:27:49:ec:c9:e0:89:f1:72:
e5:8c:47:18:0b:3c:69:24:c6:2e:a9:98:49:56:75:
08:22:aa:9a:ce:04:25:1d:40:21:e3:6e:07:ee:86:
5e:7c:61:2e:1a:8f:87:d8:2e:c1:36:a3:3a:52:9c:
e5:be:6a:6a:51:4d:f0:16:e3:d1:71:6b:f1:1c:65:
e4:af:52:93:89:04:36:dd:20:ca:5e:3a:81:92:67:
82:f5:43:34:01:f7:c7:ff:1d:a2:41:1f:41:78:09:
48:88:41:08:a9:c0:44:0b:be:fe:ba:ba:89:f8:b8:
9b:51:a3:14:d7:a0:82:f1:93:86:d2:cb:a6:6f:e0:
9d:53:59:d6:0d:a6:aa:3d:dd:d2:21:9c:37:3b:32:
85:00:20:6e:10:2e:4b:07:63:12:a4:a5:ec:b8:79:
dd:12:c7:80:de:fb:d0:81:d3:16:93:5f:91:bb:6e:
79:a4:84:7b:15:3c:e6:79:aa:5c:68:26:a6:70:96:
f1:cf:b2:a5:d0:4b:a9:3f:7e:51:2f:16:e3:d0:bf:
cc:1b:56:96:48:26:c8:fe:4b:c3:b6:80:ae:71:b2:
94:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C3:93:5B:00:5F:86:70:CA:E2:2F:82:97:AB:E0:4D:0D:4D:7B:A4
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:45:77:1c:0f:a4:e8:f3:99:9e:86:9c:d9:36:37:16:c4:f8:
7e:35:50:a7:2c:25:ad:c0:69:cd:36:f4:7b:81:54:f9:d1:39:
04:b2:34:9c:dc:48:0e:4f:69:a5:54:6f:52:01:e7:4c:f5:5a:
c6:e9:dd:c7:a1:b1:8c:28:e5:ff:b4:aa:56:e4:7b:3e:c9:d3:
58:cc:9d:f5:f6:e6:f0:06:27:a0:2f:9e:63:bb:22:e0:ec:e3:
58:ff:19:c8:ef:67:03:1d:69:29:75:b4:c5:ac:85:fa:73:1e:
40:fd:42:79:38:6b:f9:f6:cd:04:76:3a:e7:f3:76:dd:2b:64:
ed:9b:e3:a0:92:1c:5e:3d:58:95:ea:e9:1d:a9:dc:8d:03:9d:
de:cb:5d:66:77:7e:77:b3:c6:41:95:be:0b:62:c9:a7:8f:71:
d3:22:d8:f1:24:ae:f8:1a:d0:09:98:4a:ca:94:58:18:d8:4c:
3f:3c:43:8b:00:a8:88:42:8f:27:8f:af:af:b6:b8:b7:f1:db:
f0:60:75:b5:42:d6:38:65:a7:b0:e4:74:09:7a:66:3f:9c:c0:
b8:a6:e4:a6:54:4e:20:eb:12:0b:3a:c7:18:f1:0b:b6:e4:e5:
e5:68:98:54:fc:c1:26:ad:1a:1d:48:c9:9c:59:8e:cc:3a:d7:
8c:c4:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:51:06 2025 by rpki-client