Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa
File: CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa (raw, json)
Hash identifier: Mao9DXRYIqUFuxbornXbA6rVKtSpnt+StLb+Ok2TVFY=
Subject key identifier: 08:3A:68:0C:24:6A:46:EE:66:62:76:42:FA:F3:56:6F:E6:78:71:86
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 019422FB46C2A0E1A8D1274BB22C47FD1B60
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa
Signing time: Wed 01 Jan 2025 17:48:00 +0000
ROA not before: Wed 01 Jan 2025 17:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207992
IP address blocks: 193.160.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:46:c2:a0:e1:a8:d1:27:4b:b2:2c:47:fd:1b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 1 17:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=083a680c246a46ee66627642faf3566fe6787186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:93:25:26:3b:0b:9d:e5:c6:07:e6:7e:51:
f2:29:eb:e5:5b:d4:0d:27:a8:40:20:2d:e2:2c:b1:
80:0d:93:67:a9:cd:c6:90:9f:9b:e8:5b:93:24:18:
74:ce:81:d7:33:82:5f:48:12:07:42:8c:53:49:59:
a9:91:b2:9c:98:b6:c6:fd:91:10:2d:ba:78:1a:c2:
4e:96:67:7a:25:c5:df:74:0e:98:d7:b2:a1:76:61:
ed:f7:3c:44:71:d5:95:df:ac:93:9d:e2:56:0d:7f:
2e:55:45:6a:bb:d7:d5:e8:b5:0e:c6:a4:6f:d0:34:
30:f5:60:47:f4:2d:8e:78:cf:bd:89:ca:fd:cd:57:
51:d4:34:f0:c1:09:13:5b:f5:69:88:42:b5:8d:22:
00:13:11:0b:49:5a:27:ff:a2:9e:b5:07:74:21:d1:
03:81:5c:db:20:c3:b3:a4:81:bb:8f:91:fb:c1:5f:
3a:53:00:fe:58:1a:62:26:dc:d3:78:0a:75:e6:8b:
ce:83:25:32:81:e0:0c:47:33:d6:6d:40:f1:99:c4:
34:d7:16:df:b3:57:59:70:3e:eb:36:00:bb:0d:d8:
fc:f8:4d:fb:6f:c3:c3:ea:3e:16:d5:5d:0e:54:a8:
f1:a5:20:8d:6e:47:d0:41:21:22:5a:2e:52:71:90:
9c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3A:68:0C:24:6A:46:EE:66:62:76:42:FA:F3:56:6F:E6:78:71:86
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.130.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d6:e6:3b:03:f0:29:00:e7:7a:35:08:df:87:72:da:d5:b3:
59:a1:52:c5:56:89:48:30:4d:18:09:08:90:e5:41:d8:92:91:
e2:f2:ef:56:c2:0b:9d:49:c6:67:c4:02:f0:21:12:ab:c0:d0:
2b:06:ac:68:1f:3c:0b:63:e1:35:82:d3:35:58:69:b5:c8:b6:
cf:75:01:91:64:fa:b9:87:32:16:82:02:17:5d:aa:fd:f7:40:
ca:c3:f3:11:69:91:3f:19:4c:26:83:53:25:01:2c:39:2f:82:
f1:b8:c3:5d:de:9c:7d:1c:ee:18:58:f1:e1:f7:78:ac:5d:86:
2b:aa:12:1b:95:92:9e:c1:20:9a:4e:63:ef:b4:a4:e7:88:49:
ce:e5:91:2f:a0:e8:ff:11:d7:27:ff:82:f5:92:a1:1e:0c:d4:
85:29:0a:80:0d:ee:43:1f:e1:78:4a:96:a1:a1:36:36:c8:9b:
55:ec:1b:42:ef:c5:cf:66:bd:03:7d:46:7a:fd:c1:00:5b:bb:
85:83:2f:e5:87:9e:f3:44:39:0d:f1:2c:00:fa:92:41:f8:ee:
e5:66:81:a0:db:3e:40:d4:c1:73:56:b3:f4:51:2a:45:bf:f6:
05:a5:c2:28:b4:cc:28:8f:c2:53:c4:1e:2d:4a:35:d0:bb:2e:
8a:7b:88:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:49:52 2025 by rpki-client