Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/XA0CQqMcOPYYccV3sepNDTS0yhw.roa
File: XA0CQqMcOPYYccV3sepNDTS0yhw.roa (raw, json)
Hash identifier: 4pMf0cRKCztacYsNRlFf/QDf3VqwFTPcvQ/RQcBBA+8=
Subject key identifier: 5C:0D:02:42:A3:1C:38:F6:18:71:C5:77:B1:EA:4D:0D:34:B4:CA:1C
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 01942368F6AE883F670564EE7D30AC0E10DA
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/XA0CQqMcOPYYccV3sepNDTS0yhw.roa
Signing time: Wed 01 Jan 2025 19:47:48 +0000
ROA not before: Wed 01 Jan 2025 19:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 185.119.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f6:ae:88:3f:67:05:64:ee:7d:30:ac:0e:10:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Jan 1 19:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c0d0242a31c38f61871c577b1ea4d0d34b4ca1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:6e:ec:59:cb:50:2a:2d:8d:19:73:be:26:
49:f0:bb:ac:fa:93:9f:e0:bb:4f:36:a6:33:5f:e2:
b9:5f:86:c0:3a:00:40:7e:27:c8:99:0b:93:43:d3:
84:f2:46:b4:c3:cd:3f:72:d9:c0:5b:31:29:d8:9a:
96:c2:bc:0e:5e:29:4b:d3:36:3a:8d:f0:90:c8:82:
84:2a:be:ae:e4:39:a5:a0:a8:27:0a:57:fa:23:ae:
da:0e:e1:06:77:4d:c5:0d:5e:fc:71:15:e7:b1:fd:
6b:c8:46:ec:fb:5d:06:98:bb:e3:b1:b6:5c:21:60:
77:06:ae:96:3a:56:8d:12:6b:70:cb:b4:22:28:3d:
79:a9:be:f7:8b:14:30:20:e4:96:f8:2c:d0:ac:8a:
c7:d0:89:b9:46:41:48:73:6f:7b:39:7a:a7:f0:6f:
f8:6f:7f:99:d7:f9:4d:cd:f4:4d:c4:c1:83:21:cd:
19:f9:d5:ac:d4:76:56:01:0f:80:a6:e5:29:17:e0:
40:fb:6e:c2:cf:04:f3:6a:69:d8:00:51:fb:b2:90:
48:3f:02:1c:a5:33:3f:09:48:68:d8:5f:94:0c:21:
3a:55:30:7a:29:8f:f3:d7:be:c3:a3:66:42:1e:ec:
9d:9e:1b:47:2c:57:2c:76:54:5d:31:b6:c8:f7:b6:
36:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0D:02:42:A3:1C:38:F6:18:71:C5:77:B1:EA:4D:0D:34:B4:CA:1C
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/XA0CQqMcOPYYccV3sepNDTS0yhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.110.0/24
Signature Algorithm: sha256WithRSAEncryption
96:8b:98:f0:db:7c:b8:e8:88:c4:b9:66:a9:d0:c7:01:f9:7a:
cd:03:8b:5d:c5:5c:3d:6a:91:87:ef:2c:b2:58:da:f4:ae:b2:
c8:31:c8:f5:64:b7:51:7e:b2:29:fd:50:40:a8:84:0e:d5:c7:
8a:4c:66:54:ee:ce:7d:ef:44:a1:18:c5:b5:db:2a:2e:2b:d7:
a0:69:43:d2:8a:de:17:4a:57:69:6b:2d:4e:f7:09:27:4e:f0:
74:59:68:34:38:e9:07:1f:31:4d:b7:bd:ca:95:9b:3d:7b:d0:
a1:c6:2f:1a:f8:59:51:24:16:15:ae:3b:5b:9c:c7:da:e3:83:
c3:07:64:83:8f:59:f5:be:bd:59:e3:b1:49:17:82:c1:bd:fc:
c4:e3:2e:d9:51:15:84:8e:08:5d:24:d9:9d:b9:1e:f8:d7:95:
fb:41:b0:c9:37:8f:9e:d1:1d:26:f2:72:f7:32:67:f3:cd:15:
0a:e4:05:32:5f:63:d1:79:fe:bd:5e:0f:99:a5:3a:d0:11:f7:
7c:b4:e0:59:27:29:8e:49:0d:30:1a:13:a2:4c:ad:49:8a:11:
10:0e:ac:c9:12:24:8a:51:0b:b1:d2:9a:c2:33:77:0e:25:75:
63:c3:1c:73:4c:5a:b9:9b:f0:7f:1b:bc:55:3a:bb:a2:5b:32:
14:03:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:48 2025 by rpki-client