Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/cenM2SOYtL4Vv7v2G3Ad_6WsEsA.roa
File: cenM2SOYtL4Vv7v2G3Ad_6WsEsA.roa (raw, json)
Hash identifier: Jj/hkh5SZ+EGaHLoyTLTKngboEIJovlG2XQQpgs8svk=
Subject key identifier: 71:E9:CC:D9:23:98:B4:BE:15:BF:BB:F6:1B:70:1D:FF:A5:AC:12:C0
Certificate issuer: /CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Certificate serial: 019427B4188BE9664F29EC303DA43F424201
Authority key identifier: 01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/cenM2SOYtL4Vv7v2G3Ad_6WsEsA.roa
Signing time: Thu 02 Jan 2025 15:48:21 +0000
ROA not before: Thu 02 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56911
IP address blocks: 185.159.48.0/22 maxlen: 24
2a07:b2c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:18:8b:e9:66:4f:29:ec:30:3d:a4:3f:42:42:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0199bfbb331f270932ef3f82f03add0c0b2f1572
Validity
Not Before: Jan 2 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71e9ccd92398b4be15bfbbf61b701dffa5ac12c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:d5:4d:67:3a:b6:60:c2:32:65:d1:de:d5:
45:26:bc:da:ad:ba:b5:18:06:23:7b:9b:93:09:49:
7d:18:f7:74:66:eb:cd:06:b1:c7:92:de:19:b5:30:
c2:cc:e6:77:3f:4b:6a:c7:ff:1d:73:de:b0:7b:22:
eb:12:e8:60:17:3e:18:ef:b3:ec:99:f8:8a:00:0c:
e2:d1:c1:1c:eb:1a:49:4f:6a:9b:75:74:8b:f6:8b:
24:4c:ca:9d:79:f2:5c:30:b2:2c:8c:8b:66:93:90:
ec:f3:3c:b7:bb:cf:81:91:2e:30:54:48:07:dc:02:
4c:75:1f:9c:5f:6d:97:02:06:57:fb:20:75:55:ff:
59:5a:f1:bb:a8:a1:92:a1:b9:65:b9:cd:a5:8e:68:
93:66:dd:45:a1:bd:bc:a4:f6:bf:9d:41:68:1d:88:
62:7c:f4:2f:a7:67:74:09:47:b0:48:5e:b7:82:21:
32:a9:cc:7c:8e:ae:71:ff:d8:72:78:64:4f:1f:bd:
6a:50:84:2f:05:bf:c7:82:bd:a6:9d:19:6b:29:9a:
a8:6f:5f:d2:e9:61:6c:b9:2d:dd:3f:8e:f7:5b:79:
69:67:1d:6b:61:94:a4:20:df:af:d7:95:50:25:3c:
dc:0d:d9:b0:b8:ff:08:83:95:61:fe:14:b7:f5:15:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E9:CC:D9:23:98:B4:BE:15:BF:BB:F6:1B:70:1D:FF:A5:AC:12:C0
X509v3 Authority Key Identifier:
keyid:01:99:BF:BB:33:1F:27:09:32:EF:3F:82:F0:3A:DD:0C:0B:2F:15:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZm_uzMfJwky7z-C8DrdDAsvFXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/cenM2SOYtL4Vv7v2G3Ad_6WsEsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b75de2-b997-4bd3-b1ef-c7571ee1d99b/1/AZm_uzMfJwky7z-C8DrdDAsvFXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.48.0/22
IPv6:
2a07:b2c0::/32
Signature Algorithm: sha256WithRSAEncryption
85:81:ea:62:f2:e9:32:e0:e4:8f:0a:3b:d4:dc:66:c0:1b:65:
99:ab:bd:64:f5:2a:f0:1d:51:92:41:41:17:69:fa:c9:75:3e:
2d:d5:73:1a:9e:0c:3e:a1:c1:a9:a1:d1:88:f4:16:94:cf:01:
f4:1f:11:a2:f7:21:94:ef:66:6a:81:c3:4e:ff:0d:83:07:fd:
7a:11:17:ca:84:27:eb:a5:23:e0:a7:91:df:73:aa:40:53:29:
e8:03:39:b9:eb:76:76:a6:dd:b7:13:46:94:f8:32:65:68:0a:
14:1c:45:ac:14:de:95:b5:9f:ed:2a:f6:0e:b1:6f:15:a9:9d:
ee:61:a2:43:ae:42:f3:4c:be:2c:33:f8:31:d5:5c:4b:85:96:
b0:1a:5b:76:e7:6e:f8:34:d2:b2:57:6b:bb:cc:d8:87:05:6a:
46:17:5f:55:67:07:d9:d6:2d:55:6b:81:1c:ad:df:f9:92:99:
60:ff:1d:e4:bc:ee:5c:8d:34:42:af:fd:78:24:81:77:4c:2c:
3d:71:e9:36:c6:c7:99:14:a4:36:3a:59:a2:0f:27:ba:11:e8:
b7:32:53:2f:86:1a:05:de:fe:d9:41:a8:0d:f0:2c:1e:e8:f0:
cb:ef:64:f6:25:7a:f4:b9:65:82:5d:44:73:56:53:4b:0f:20:
64:f6:dd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:40:00 2025 by rpki-client