Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CuKrt9A1rXq_gybqszBrNH4WPBk.roa
File: CuKrt9A1rXq_gybqszBrNH4WPBk.roa (raw, json)
Hash identifier: R+xN9w3btguMVRDthq0sYSwVKqPaoyLE28/wg/9YoLU=
Subject key identifier: 0A:E2:AB:B7:D0:35:AD:7A:BF:83:26:EA:B3:30:6B:34:7E:16:3C:19
Certificate issuer: /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial: 0185328E0306FA654882CCD5A666F87EB334
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CuKrt9A1rXq_gybqszBrNH4WPBk.roa
Signing time: Wed 21 Dec 2022 02:40:45 +0000
ROA not before: Wed 21 Dec 2022 02:40:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 213.139.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:32:8e:03:06:fa:65:48:82:cc:d5:a6:66:f8:7e:b3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
Validity
Not Before: Dec 21 02:40:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ae2abb7d035ad7abf8326eab3306b347e163c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:f7:23:3b:c8:f7:a0:3f:51:2d:b6:74:a8:
6b:a6:87:a9:bb:f9:ed:9f:6b:91:03:df:9e:63:c8:
af:ba:fb:c5:02:d0:58:f1:82:5b:00:11:17:fb:30:
1b:45:bb:74:eb:85:d7:6e:ec:eb:29:15:63:6c:4a:
62:99:7e:f9:d8:61:ee:4e:8a:57:6a:93:3f:cd:ae:
5a:57:e3:05:22:ad:f0:2f:02:9a:07:22:70:9c:43:
68:4b:27:fd:72:23:9b:d8:18:ef:ee:a8:14:33:cf:
2a:8b:1d:c7:33:33:c8:70:80:a6:3f:be:20:b4:3c:
27:20:75:6e:74:bd:0e:67:12:85:14:cd:af:e0:29:
a7:9e:73:80:e6:d3:54:e4:fa:9a:c4:12:fd:2f:7d:
28:05:85:ae:15:8b:e2:4a:71:2c:f8:d1:00:51:33:
30:ef:6d:4d:0b:73:f6:83:34:f7:22:5c:a5:96:6f:
5b:59:e1:14:46:3c:81:5b:2d:3d:8e:35:e4:cc:f1:
3f:a5:13:a0:23:c1:6c:16:64:00:da:49:08:75:15:
92:cc:8e:ab:c3:ea:d0:1b:71:04:de:0b:87:49:27:
67:ff:b2:3c:e7:63:2b:e9:fc:52:29:2f:2a:35:86:
cf:f7:e1:41:fe:8d:2d:6a:b4:8b:5d:41:3c:9b:6f:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E2:AB:B7:D0:35:AD:7A:BF:83:26:EA:B3:30:6B:34:7E:16:3C:19
X509v3 Authority Key Identifier:
keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CuKrt9A1rXq_gybqszBrNH4WPBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.80.0/24
Signature Algorithm: sha256WithRSAEncryption
21:fd:7d:87:fb:41:43:f5:03:45:40:aa:55:39:18:94:ed:20:
b9:5a:bc:ab:2f:d7:20:fb:3d:f6:f6:5b:85:fa:be:b4:31:f3:
ab:12:b6:9f:89:3b:3f:73:c4:3f:61:0a:81:f0:c6:8e:8e:98:
bb:95:2b:d1:49:ec:fc:c8:31:6f:26:79:1e:b9:bc:48:9c:dd:
0a:30:2f:ca:b6:28:c2:68:4d:aa:44:cf:8b:da:6b:f4:a6:28:
29:c6:42:90:04:4c:fe:5e:e9:47:3e:50:fc:54:59:d7:20:36:
74:24:f2:68:e1:c9:6d:04:0d:5d:04:0f:91:c3:4f:35:b3:60:
ab:b5:da:21:61:d6:26:d1:06:f8:fd:8b:35:a8:bf:48:51:c1:
9d:6e:71:af:7b:aa:cf:23:28:14:d6:dd:a0:dd:26:29:79:a2:
4f:d9:04:5d:6d:f1:53:d8:13:40:65:08:01:9a:07:25:ae:29:
f1:3f:15:8e:da:2c:99:7c:6c:39:d3:e3:cb:ce:0f:a2:0c:9e:
6b:68:cc:41:cd:e2:aa:b7:ca:32:7f:77:19:cb:a7:d0:b3:d8:
19:cc:1f:9c:13:e5:0b:34:65:55:1d:59:91:f4:ce:37:7e:e2:
78:ff:79:57:fa:0b:4c:25:67:87:a0:12:9c:51:82:67:13:0e:
07:49:a9:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUyjgMG+mVIgszVpmb4frM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDg3NWY0MDY3OTVkYjQyYTAxNzlkZjFmYmZjNWQ2OWFl
NzEyZWUwHhcNMjIxMjIxMDI0MDQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWUyYWJiN2QwMzVhZDdhYmY4MzI2ZWFiMzMwNmIzNDdlMTYzYzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHz3IzvI96A/US22dKhrpoepu/nt
n2uRA9+eY8ivuvvFAtBY8YJbABEX+zAbRbt064XXbuzrKRVjbEpimX752GHuTopX
apM/za5aV+MFIq3wLwKaByJwnENoSyf9ciOb2Bjv7qgUM88qix3HMzPIcICmP74g
tDwnIHVudL0OZxKFFM2v4CmnnnOA5tNU5PqaxBL9L30oBYWuFYviSnEs+NEAUTMw
721NC3P2gzT3Ilyllm9bWeEURjyBWy09jjXkzPE/pROgI8FsFmQA2kkIdRWSzI6r
w+rQG3EE3guHSSdn/7I852Mr6fxSKS8qNYbP9+FB/o0tarSLXUE8m2+6QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAriq7fQNa16v4Mm6rMwazR+FjwZMB8GA1UdIwQY
MBaAFAlIdfQGeV20KgF53x+/xdaa5xLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VoMTlBWjVYYlFxQVhuZkg3X0YxcHJuRXU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zMzZhYWItNGU4Ny00ZDI3LWI0NzUt
ODY0NTgwZDAyZjgxLzEvQ3VLcnQ5QTFyWHFfZ3licXN6QnJOSDRXUEJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zMzZhYWItNGU4Ny00ZDI3LWI0NzUtODY0NTgwZDAyZjgx
LzEvQ1VoMTlBWjVYYlFxQVhuZkg3X0YxcHJuRXU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YtQMA0G
CSqGSIb3DQEBCwUAA4IBAQAh/X2H+0FD9QNFQKpVORiU7SC5WryrL9cg+z329luF
+r60MfOrErafiTs/c8Q/YQqB8MaOjpi7lSvRSez8yDFvJnkeubxInN0KMC/KtijC
aE2qRM+L2mv0pigpxkKQBEz+XulHPlD8VFnXIDZ0JPJo4cltBA1dBA+Rw081s2Cr
tdohYdYm0Qb4/Ys1qL9IUcGdbnGve6rPIygU1t2g3SYpeaJP2QRdbfFT2BNAZQgB
mgclrinxPxWO2iyZfGw50+PLzg+iDJ5raMxBzeKqt8oyf3cZy6fQs9gZzB+cE+UL
NGVVHVmR9M43fuJ4/3lX+gtMJWeHoBKcUYJnEw4HSanJ
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:58 2025 by rpki-client