Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/CBGdvmHeO_3COX6cplZCZhwngZs.roa
File: CBGdvmHeO_3COX6cplZCZhwngZs.roa (raw, json)
Hash identifier: O3OMFYB/8GvLwR3QPrNtR+z+RH+vF2NDnwWyjo3F710=
Subject key identifier: 08:11:9D:BE:61:DE:3B:FD:C2:39:7E:9C:A6:56:42:66:1C:27:81:9B
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019427472EFD78E717175DEB967381E9DD3F
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/CBGdvmHeO_3COX6cplZCZhwngZs.roa
Signing time: Thu 02 Jan 2025 13:49:23 +0000
ROA not before: Thu 02 Jan 2025 13:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209371
IP address blocks: 91.194.55.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
185.184.24.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
185.249.200.0/24 maxlen: 24
185.249.201.0/24 maxlen: 24
185.249.203.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.223.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2e:fd:78:e7:17:17:5d:eb:96:73:81:e9:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08119dbe61de3bfdc2397e9ca65642661c27819b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:71:e3:ba:66:a0:32:45:3e:31:99:84:6f:fe:
d2:32:61:7b:0f:44:9d:b9:00:4a:35:7b:74:bf:67:
7d:fe:30:57:1c:a4:c8:2e:61:00:d7:a9:ef:68:b7:
b1:f7:55:b2:f2:68:35:90:c3:63:26:a7:ed:1b:fb:
58:94:06:17:1d:ec:be:d9:89:34:1e:32:8b:9a:61:
1c:81:af:b9:d3:5a:98:fb:6f:21:f2:55:65:56:33:
81:cb:48:ac:41:f1:e3:ec:a2:f3:1e:94:30:c5:c7:
fa:09:b3:93:b3:9c:24:68:a0:06:84:26:3b:5a:bd:
10:f5:b7:88:b8:a3:8b:fd:b4:b8:21:cb:6f:50:9d:
9e:1d:3e:99:d7:c2:6a:46:12:f7:22:d8:e1:3c:21:
c0:14:68:2f:c2:36:fc:82:10:4c:16:7b:b7:00:7b:
8e:05:21:54:26:b0:88:c0:04:4b:03:e4:81:33:e0:
e2:ce:0a:d4:7a:7c:4b:d0:a1:df:d2:72:97:0e:58:
a6:0c:49:4d:67:e5:9d:fb:91:05:b9:a2:9b:d1:f6:
5c:6a:5c:19:e7:be:cd:c3:70:09:cd:21:68:75:c5:
46:f2:fb:a8:86:0b:bb:2c:9a:f9:44:74:15:86:15:
e4:ae:9b:70:e4:68:e1:a7:e1:3a:47:9d:51:3b:f3:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:11:9D:BE:61:DE:3B:FD:C2:39:7E:9C:A6:56:42:66:1C:27:81:9B
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/CBGdvmHeO_3COX6cplZCZhwngZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.55.0/24
185.88.175.0/24
185.184.24.0/24
185.243.181.0/24
185.249.200.0/23
185.249.203.0/24
193.160.140.0/24
193.223.106.0/24
Signature Algorithm: sha256WithRSAEncryption
27:7c:e6:dd:b2:d1:22:25:93:e0:70:c6:87:eb:78:8a:51:f5:
7c:83:c4:eb:a3:09:95:8c:14:dc:f5:82:00:6d:98:3f:61:73:
8c:67:5b:35:75:61:0a:3f:e3:d7:19:a7:17:8d:4b:11:8f:01:
f2:fc:5e:5d:ed:bf:8f:c3:1d:23:fc:50:09:7e:42:cc:10:cb:
99:49:dc:e6:38:7c:0b:0f:f7:d4:c7:f9:5e:d5:e7:5d:d9:b1:
35:a3:e4:cb:c6:c6:f1:44:a5:56:79:93:aa:39:ba:0b:41:9e:
4d:d6:b4:03:7d:71:a4:c8:c9:b6:98:79:eb:5e:9b:93:03:7a:
57:1b:b6:f2:ed:6f:36:dd:ca:06:59:d0:e9:2b:47:6a:e4:07:
eb:89:02:b7:15:19:d7:1b:9c:42:bc:82:3e:f2:6a:be:56:9a:
1e:ae:be:b8:02:70:d0:88:81:ab:8a:6d:72:20:e7:ed:fd:36:
b7:d6:ee:7d:28:04:4e:2d:17:55:82:a3:32:bf:d6:26:33:5c:
73:49:fc:3a:7f:7a:6e:df:bb:49:58:0b:0b:b7:96:61:ba:90:
77:51:b1:7a:31:46:bc:79:cc:90:66:d9:f3:bb:32:bc:14:cb:
a5:71:48:9f:f3:09:19:7b:78:54:ae:2c:a9:ec:ae:0c:6e:17:
76:f4:60:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:57 2025 by rpki-client