Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/ClRVvDa8nK5Oymz5ABrMGUAL4vw.roa
File: ClRVvDa8nK5Oymz5ABrMGUAL4vw.roa (raw, json)
Hash identifier: QxwL9qQWUkG7rQhqigwQ2WkaB0iL9vpkKXJ84BUzw8c=
Subject key identifier: 0A:54:55:BC:36:BC:9C:AE:4E:CA:6C:F9:00:1A:CC:19:40:0B:E2:FC
Certificate issuer: /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial: 01856D1CCEECCBE7AF210EA0C841B5A29613
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/ClRVvDa8nK5Oymz5ABrMGUAL4vw.roa
Signing time: Sun 01 Jan 2023 11:34:42 +0000
ROA not before: Sun 01 Jan 2023 11:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 213.139.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1c:ce:ec:cb:e7:af:21:0e:a0:c8:41:b5:a2:96:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
Validity
Not Before: Jan 1 11:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a5455bc36bc9cae4eca6cf9001acc19400be2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:a2:6f:c1:ec:58:0f:f1:33:aa:9c:d4:36:
b3:0e:be:f2:30:b6:e1:56:4f:1e:7a:f8:98:12:05:
bc:54:10:4b:7f:a4:bd:67:bc:40:56:fa:22:07:60:
89:45:89:ff:f8:b2:c6:92:80:e5:bf:c6:f9:73:9e:
a5:df:42:2b:b0:35:1c:bf:b7:d8:80:16:db:31:01:
ef:66:fd:e9:d3:a8:fc:30:20:18:98:bb:42:8b:71:
14:35:de:42:ee:74:d8:92:f5:b7:7f:d1:1a:85:b9:
6e:a4:48:cf:ef:ee:db:8c:9f:b2:1c:19:27:2b:22:
3a:4f:0a:a4:36:59:f5:5c:06:cc:61:f7:a7:21:80:
d1:48:7c:d1:0e:47:4e:a6:b8:a0:64:41:e1:f6:46:
e9:87:1a:9a:7e:ef:16:f7:a9:26:2c:18:63:08:18:
b1:8f:f1:f5:7b:40:17:98:88:64:bb:9c:b2:16:d4:
2c:70:33:38:60:5a:d0:c5:35:e0:b1:34:ee:9b:ad:
11:cf:40:23:91:49:6e:10:84:f9:ae:0e:e9:9f:07:
29:83:d4:53:ea:56:2d:52:9f:ae:96:12:59:47:c2:
72:13:3c:91:03:b6:71:2e:d0:d5:4a:cd:ef:39:4c:
74:dc:15:0f:bc:f2:00:bd:ac:6b:70:04:f3:1b:4f:
bf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:54:55:BC:36:BC:9C:AE:4E:CA:6C:F9:00:1A:CC:19:40:0B:E2:FC
X509v3 Authority Key Identifier:
keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/ClRVvDa8nK5Oymz5ABrMGUAL4vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.80.0/24
Signature Algorithm: sha256WithRSAEncryption
59:6b:42:4f:3b:36:91:2c:dc:34:3b:ee:94:81:12:e1:82:c4:
7a:2d:ca:97:31:7d:c3:c7:87:3d:0d:8e:ef:9d:80:72:eb:3e:
2c:2a:5b:8b:73:2e:23:dd:09:9b:bf:a7:9a:b7:95:81:c8:96:
4d:23:db:39:ca:a4:b6:1f:e9:75:74:73:5d:a5:f2:f6:10:f0:
0f:f5:45:c1:02:1b:69:98:cf:46:5c:0b:21:f7:f7:4c:ec:ba:
58:e1:d2:df:67:89:40:fa:13:ec:54:9e:90:a4:d1:ac:18:59:
25:9b:96:ed:1f:ea:fe:0e:02:2c:e4:07:a8:2e:2e:41:8f:77:
b4:20:d7:7f:a7:bc:cc:5b:0c:2b:7e:a4:63:c1:22:00:6a:90:
26:a8:a4:58:d3:85:ed:33:79:3c:ac:0f:77:86:5d:41:a8:c7:
bc:b7:8a:be:01:23:b9:63:5d:3b:8f:03:f9:80:d2:db:bd:53:
f9:01:ff:ad:f9:82:40:30:ea:59:f8:77:2b:51:67:94:d8:a6:
00:2e:07:f2:19:c1:d1:dc:45:62:72:09:9d:9a:e3:7d:84:6f:
2b:34:e8:8a:46:f8:ec:b2:33:99:8d:dd:fe:55:f6:d2:c1:27:
a5:dc:50:a3:ae:b1:cc:fd:85:38:69:6e:c6:99:e9:8d:09:d7:
12:ae:51:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:41 2025 by rpki-client