Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/cXoMl3h-VkR1RZL5L9dG__x60lI.roa
File: cXoMl3h-VkR1RZL5L9dG__x60lI.roa (raw, json)
Hash identifier: yhbHE/DG8Vm5/MH05TukfdNIz60oJwR93PUKtDxAmrc=
Subject key identifier: 71:7A:0C:97:78:7E:56:44:75:45:92:F9:2F:D7:46:FF:FC:7A:D2:52
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 01941F8C01D519398ADC0B4710A36D184836
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/cXoMl3h-VkR1RZL5L9dG__x60lI.roa
Signing time: Wed 01 Jan 2025 01:47:36 +0000
ROA not before: Wed 01 Jan 2025 01:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35830
IP address blocks: 79.110.28.0/24 maxlen: 24
79.110.31.0/24 maxlen: 24
91.204.14.0/23 maxlen: 23
185.14.194.0/24 maxlen: 24
185.89.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:01:d5:19:39:8a:dc:0b:47:10:a3:6d:18:48:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=717a0c97787e5644754592f92fd746fffc7ad252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:62:8a:77:b0:93:21:0a:62:9d:ea:07:ad:
11:23:12:59:38:ff:4a:e9:af:60:be:72:7e:ee:4c:
94:34:01:8e:ba:bc:ba:24:cb:a3:6f:2b:84:17:a8:
42:d1:59:2f:02:22:ca:f3:96:7e:e0:ed:6f:35:20:
e8:57:c0:2e:59:c7:83:9e:89:4a:d8:62:e0:7b:01:
2d:48:e2:a8:c7:c4:85:64:fb:0d:42:bb:80:ee:37:
0f:cf:2a:9e:a1:ca:9e:c2:65:2c:32:03:68:2c:68:
1f:b3:f2:fe:68:1a:90:31:fb:76:7b:7a:df:21:86:
ba:50:65:50:66:f3:3d:9c:8c:c2:a7:5b:dc:a4:6d:
e1:53:c6:78:9a:6d:b3:48:c2:24:08:ac:8a:2a:b1:
ad:e7:62:16:55:db:f2:8e:f7:9a:91:d1:e0:77:09:
19:8d:02:92:2f:ad:d8:37:fa:a7:b0:a7:62:b5:95:
af:c4:f2:57:c6:85:83:db:5e:50:25:8c:32:f1:84:
59:09:ec:35:1f:5a:32:dd:cb:2f:ad:ff:f8:fb:1f:
b3:97:a3:c8:19:fa:27:76:67:d5:b7:e5:bd:4a:62:
c1:ba:bf:91:3f:66:71:fe:17:02:58:b0:0b:45:12:
b4:e8:ff:22:d6:47:a1:72:8d:64:35:0d:df:d8:09:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7A:0C:97:78:7E:56:44:75:45:92:F9:2F:D7:46:FF:FC:7A:D2:52
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/cXoMl3h-VkR1RZL5L9dG__x60lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.28.0/24
79.110.31.0/24
91.204.14.0/23
185.14.194.0/24
185.89.100.0/23
Signature Algorithm: sha256WithRSAEncryption
15:27:c6:79:88:9e:9f:50:32:21:27:88:b3:3f:a1:79:a8:2d:
a6:ef:3d:b5:70:3b:0f:90:f6:74:19:3b:fd:54:5b:04:9a:93:
4a:32:e6:ac:42:73:7d:5f:9d:c0:92:fa:21:51:96:63:5a:72:
c5:bf:9a:30:e1:46:d0:75:00:ce:f7:57:82:93:b8:ce:ec:11:
51:3c:25:a3:e0:6f:3b:d1:5c:9e:71:66:43:2d:4b:c2:39:17:
f1:8a:38:1e:31:60:74:c4:d4:05:e3:17:47:fc:aa:31:bc:a5:
5b:b2:c8:42:7a:c0:67:6f:2c:11:f1:e6:37:71:bf:3a:1e:5f:
d5:5f:d1:39:ad:9d:cc:44:70:08:5d:a5:fe:f4:94:c8:36:31:
35:59:95:61:70:7a:4f:10:f0:92:a3:7e:94:ca:c3:02:f9:66:
ec:31:1c:64:8d:a6:27:43:cf:8f:76:ce:7d:46:f5:6d:19:cf:
3b:f2:cb:73:b4:49:5b:e2:76:2e:28:66:d7:07:be:4b:b5:b0:
3d:45:c0:51:58:5d:a9:93:b6:e2:b1:ae:49:1c:30:3d:eb:ba:
46:6e:68:ad:fe:c9:d8:aa:e9:ed:f6:78:9b:65:49:3a:b3:ed:
e0:cf:0e:97:86:f3:a7:33:2b:33:a4:9c:30:e2:32:b9:fb:57:
70:7b:0c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:30:15 2025 by rpki-client