Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/0ee391-d53a-41aa-a682-d098c54e29b5/1/CXOWv1HwHuHSnGhnhCS_WaLa3D4.roa
File: CXOWv1HwHuHSnGhnhCS_WaLa3D4.roa (raw, json)
Hash identifier: oExuClIq/vfi37JaFGlYZarvRGRv2322np0tpLe2fHM=
Subject key identifier: 09:73:96:BF:51:F0:1E:E1:D2:9C:68:67:84:24:BF:59:A2:DA:DC:3E
Certificate issuer: /CN=c3bf1659a7483e246031b475746191b5df0c42b6
Certificate serial: 01AA2A7E
Authority key identifier: C3:BF:16:59:A7:48:3E:24:60:31:B4:75:74:61:91:B5:DF:0C:42:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w78WWadIPiRgMbR1dGGRtd8MQrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/0ee391-d53a-41aa-a682-d098c54e29b5/1/CXOWv1HwHuHSnGhnhCS_WaLa3D4.roa
Signing time: Sat 01 Jan 2022 10:00:02 +0000
ROA not before: Sat 01 Jan 2022 10:00:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201352
IP address blocks: 185.71.246.0/24 maxlen: 24
185.71.245.0/24 maxlen: 24
185.71.244.0/24 maxlen: 24
185.71.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27929214 (0x1aa2a7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bf1659a7483e246031b475746191b5df0c42b6
Validity
Not Before: Jan 1 10:00:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=097396bf51f01ee1d29c68678424bf59a2dadc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:56:3c:67:b3:39:1f:06:c9:19:67:ba:96:
a1:95:62:f0:bc:16:e6:24:97:3f:8b:2d:a9:98:97:
78:3b:8d:e8:49:28:6c:7c:ad:ec:ba:a1:87:42:6d:
15:49:c6:31:39:9b:51:cd:f8:bf:d4:e5:2e:20:c3:
4e:7a:b2:0f:44:28:dd:bd:3b:8e:a8:74:dd:9c:53:
66:17:53:aa:cd:e6:96:fe:22:03:12:6f:2e:eb:2e:
73:66:98:65:00:5e:8c:ad:fc:41:ff:f3:7b:17:63:
69:f2:ff:88:98:76:31:de:31:bb:56:f9:62:cd:02:
0e:86:e2:2b:33:6c:3f:c7:44:3c:fa:af:a2:98:f1:
ad:7b:41:78:d3:3b:31:b1:b5:66:e3:a5:48:d4:ef:
2a:c1:18:1f:a4:ff:cb:0c:20:08:7d:bd:3f:86:ab:
f0:32:bd:31:ab:5d:64:18:39:ec:f6:3e:f6:a4:96:
3e:44:60:58:f4:0c:3d:41:95:3f:d0:c9:f5:8b:08:
39:96:85:be:f9:f6:f8:f4:6e:ac:65:75:4f:99:f6:
f2:ed:57:5e:f9:b9:97:11:a5:d8:4c:91:67:7a:67:
06:04:c9:5c:15:b6:1a:31:e7:19:f0:38:0f:63:ca:
67:ec:28:6a:5a:72:61:3e:9f:99:35:11:ce:bc:5b:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:73:96:BF:51:F0:1E:E1:D2:9C:68:67:84:24:BF:59:A2:DA:DC:3E
X509v3 Authority Key Identifier:
keyid:C3:BF:16:59:A7:48:3E:24:60:31:B4:75:74:61:91:B5:DF:0C:42:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w78WWadIPiRgMbR1dGGRtd8MQrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/0ee391-d53a-41aa-a682-d098c54e29b5/1/CXOWv1HwHuHSnGhnhCS_WaLa3D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/0ee391-d53a-41aa-a682-d098c54e29b5/1/w78WWadIPiRgMbR1dGGRtd8MQrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.244.0/22
Signature Algorithm: sha256WithRSAEncryption
14:d5:98:7f:97:bb:98:d9:95:a7:a0:6d:4d:01:74:6e:d9:37:
72:56:63:de:1c:86:32:9d:29:0c:ee:da:35:f7:a1:57:fe:91:
9c:d6:2f:e2:a8:ab:9c:a0:73:d4:1a:f2:88:78:4d:fb:0f:d2:
84:8e:92:88:83:5f:08:32:a6:bf:6b:03:14:d3:05:59:33:4d:
19:2b:17:6a:90:5c:dd:33:01:15:97:d5:78:12:b4:3f:44:09:
2b:56:44:ce:09:9e:9f:85:c6:c9:45:ff:cd:df:a2:15:ba:da:
22:24:25:82:57:d0:77:10:f2:0f:e1:bd:77:6c:e3:c1:93:22:
85:dc:96:44:dd:e9:e8:81:90:f0:ed:ff:8f:16:03:f0:35:66:
73:6a:f8:3d:73:04:c2:bf:27:fd:ac:c9:57:60:84:e7:eb:a6:
4d:ce:eb:88:02:de:e9:26:2e:22:d6:f3:c9:0e:08:39:a8:cd:
55:bf:cc:24:3e:f0:7e:1d:db:39:a2:8f:07:99:97:d1:bd:3b:
7f:f7:65:36:dd:ac:e4:1a:1f:8b:aa:dd:43:c7:90:13:a9:42:
18:0d:a6:ba:f7:fb:f1:dd:9f:df:56:4f:3b:41:15:ef:c2:7b:
b7:2d:59:b2:0a:6e:08:81:f4:37:cc:1f:52:48:04:82:05:69:
86:d9:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:16:32 2025 by rpki-client