Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/CWdhvbnp5hrvQedsBuUUhhrREwo.roa
File: CWdhvbnp5hrvQedsBuUUhhrREwo.roa (raw, json)
Hash identifier: rZ53amNtUujU94HisBZHCRyoGLm/z76fVasRMZFNabs=
Subject key identifier: 09:67:61:BD:B9:E9:E6:1A:EF:41:E7:6C:06:E5:14:86:1A:D1:13:0A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC242FFA8C2C4009547F0E974990D4
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/CWdhvbnp5hrvQedsBuUUhhrREwo.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213400
IP address blocks: 194.180.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:24:2f:fa:8c:2c:40:09:54:7f:0e:97:49:90:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=096761bdb9e9e61aef41e76c06e514861ad1130a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:be:99:75:4f:a6:c4:db:fd:ad:9b:78:fc:
98:3b:17:16:fe:37:78:9d:24:46:bf:c0:47:db:5c:
4f:cc:c5:66:2b:75:77:12:47:b9:b3:e1:1d:84:ed:
6b:5f:d1:92:bb:5d:06:1a:6f:66:60:7c:f2:37:15:
2c:de:7b:fd:fe:a4:0f:27:21:78:0f:28:4d:28:21:
00:14:d8:ab:04:71:66:27:19:cd:ba:22:ea:c4:0a:
46:5d:c9:3f:a2:fd:87:37:a3:e8:a5:74:8e:4b:8e:
f7:69:7c:ff:87:79:2d:98:94:bb:c9:cc:2d:c9:1e:
8e:6c:83:5f:63:16:e1:e9:c4:0d:82:23:4a:55:6d:
16:c4:92:e0:3a:ef:87:81:9b:47:2b:b3:2f:8f:3b:
b0:83:65:14:77:80:bc:39:96:87:b9:97:15:63:15:
c2:93:46:07:95:c2:e6:ce:eb:d4:a0:cc:4c:72:cf:
4c:f3:b5:ec:a9:0a:63:62:93:79:f1:fb:dc:41:c7:
a0:e9:0e:52:d0:77:12:b2:2e:49:00:c3:a3:ad:55:
95:ea:b7:96:a8:82:c4:0a:c3:ca:2a:82:52:14:d2:
1f:a6:7b:b8:28:27:47:17:fd:d4:20:62:73:2a:fc:
55:dd:88:02:3c:bf:90:18:3f:dc:1e:05:50:3e:7b:
e2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:67:61:BD:B9:E9:E6:1A:EF:41:E7:6C:06:E5:14:86:1A:D1:13:0A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/CWdhvbnp5hrvQedsBuUUhhrREwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.251.0/24
Signature Algorithm: sha256WithRSAEncryption
32:2b:1b:af:e9:1a:82:24:34:8e:9c:31:9b:ea:62:fe:bd:b5:
4f:af:99:e4:7e:1f:98:74:33:37:27:59:cd:6e:0a:93:eb:c0:
1d:32:c8:27:70:21:a0:f8:47:b2:1d:76:eb:fd:dd:a2:8c:bb:
0a:ae:aa:83:e6:e7:1a:9d:1f:51:e7:ab:4b:72:40:b4:e8:e3:
70:69:51:59:4d:c7:d8:d7:e2:e7:c7:50:f7:9e:83:3b:f3:86:
65:13:8c:4d:81:a9:9c:c5:ad:c6:cb:cd:ce:f9:c5:df:48:67:
07:e2:d9:2a:02:68:a5:e4:82:ec:8d:fe:6e:19:3f:19:7a:59:
cd:a4:96:b3:ba:d8:9a:83:e2:45:bd:eb:01:b6:bc:16:20:91:
01:86:9c:cb:ae:b7:62:41:8a:bf:d1:27:c2:d2:30:6f:46:9b:
b3:a5:e9:55:8d:88:9d:8a:5f:42:5a:85:b6:0e:79:ab:75:cc:
da:3c:ea:13:70:78:a2:f4:81:59:60:dd:04:7e:85:b0:9d:a8:
c9:a9:a5:53:b6:12:ea:f3:96:ab:51:5c:cd:20:fe:fc:75:2e:
f1:4e:30:1f:dd:12:a7:28:9e:17:29:eb:30:c7:c1:09:26:75:
7e:f6:b3:87:8e:59:71:30:ba:c5:52:0f:2e:32:c7:c4:cf:a9:
7e:25:b8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:31:02 2025 by rpki-client