Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/CDnIoSevN6swN9HsWKv0I-mMJac.roa
File: CDnIoSevN6swN9HsWKv0I-mMJac.roa (raw, json)
Hash identifier: cTWxWgB/gooDNOEqmvXFugP4OxDjOl8USbxYFFTjOQE=
Subject key identifier: 08:39:C8:A1:27:AF:37:AB:30:37:D1:EC:58:AB:F4:23:E9:8C:25:A7
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424452C5744737EFB4F0AFBBA8C9EE891
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/CDnIoSevN6swN9HsWKv0I-mMJac.roa
Signing time: Wed 01 Jan 2025 23:48:20 +0000
ROA not before: Wed 01 Jan 2025 23:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64494
IP address blocks: 185.46.175.0/24 maxlen: 24
185.161.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2c:57:44:73:7e:fb:4f:0a:fb:ba:8c:9e:e8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0839c8a127af37ab3037d1ec58abf423e98c25a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:4f:97:ef:2c:9f:93:f5:b2:89:ee:cd:28:
61:47:8d:2b:84:f5:a5:ec:e6:6f:c3:59:47:a7:17:
ca:0e:b8:76:0d:73:b2:45:de:de:d6:92:f9:8e:f8:
03:68:2b:a8:85:e7:4b:80:5b:33:1c:b5:a9:a1:f4:
97:10:97:e6:1e:63:41:32:d9:8f:2c:bf:fa:7d:4b:
9c:64:91:a9:fd:11:fb:03:81:7c:27:d5:92:3d:eb:
0d:7c:1a:06:07:f9:69:97:47:92:95:26:9e:b5:00:
be:ae:b3:bb:62:28:ee:58:32:4f:7b:8a:d7:37:53:
6a:a2:01:5c:74:6e:17:06:6f:97:d7:5f:43:05:6c:
dd:02:94:bf:fc:af:68:22:ef:56:e9:69:75:73:18:
34:f6:4f:61:ef:f3:f0:ce:e9:83:42:d4:a7:9c:8c:
a8:91:e4:f0:72:4a:a8:c4:67:a8:ea:8c:71:5b:3b:
22:39:99:d2:9f:4f:ae:a6:b3:9e:b2:48:15:47:2c:
23:02:67:71:73:05:aa:ed:63:e5:24:a5:b4:20:7b:
7f:d8:66:6c:b9:f1:69:c3:a6:48:fe:0e:e5:34:e1:
6d:86:be:39:1c:c7:fb:e4:21:01:ab:ac:57:86:79:
59:f3:aa:1a:38:9e:c4:5e:cc:1a:ed:6d:81:05:7a:
c5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:39:C8:A1:27:AF:37:AB:30:37:D1:EC:58:AB:F4:23:E9:8C:25:A7
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/CDnIoSevN6swN9HsWKv0I-mMJac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.175.0/24
185.161.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e1:7f:60:57:78:5d:b0:30:44:0b:4a:1f:2c:25:25:cd:15:
71:78:23:b4:52:9c:ee:4a:7e:77:3f:1b:ca:43:80:4d:d6:65:
7f:b4:01:56:ef:80:ec:a9:3e:37:28:77:47:05:31:fe:6d:93:
6a:0a:8a:9d:af:6d:e7:92:9c:e5:46:17:47:a8:46:7a:4f:dd:
68:f5:0c:77:4d:56:81:a1:5b:1a:d4:97:aa:4b:29:54:55:5d:
b1:05:35:c9:92:47:43:b1:c1:4d:80:02:7e:2d:99:59:0f:3c:
58:f5:79:00:c9:7a:e0:7b:b3:0c:23:f1:6e:0c:84:21:f1:92:
3b:59:0a:1d:29:04:d2:9a:e3:2d:0a:0b:8f:b9:c2:25:6d:2c:
27:c4:d3:e4:95:c1:b1:09:18:26:5a:7a:19:73:cb:67:83:2f:
81:3f:aa:58:20:bf:a7:a7:6a:4e:98:21:b7:6b:f7:2a:bf:29:
e1:c8:a9:b0:e4:26:59:db:5b:52:46:a3:45:8a:ff:25:a7:2b:
c0:ae:45:f3:16:c0:5f:2b:47:7b:bb:a7:ac:d0:b8:b4:1a:57:
4f:41:51:89:18:3d:5b:a6:d0:40:ff:b7:4a:78:49:68:38:35:
ee:82:38:e8:9f:48:26:9d:7b:b2:e0:ea:f3:4e:91:06:a9:00:
45:79:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:33:46 2025 by rpki-client