Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/CwYygfo9jnbGuyyosVtnwcbQSLk.roa
File: CwYygfo9jnbGuyyosVtnwcbQSLk.roa (raw, json)
Hash identifier: rDCG+Vedl9KUCPHae/ViKic222skTUa8bdoX1jGnAHk=
Subject key identifier: 0B:06:32:81:FA:3D:8E:76:C6:BB:2C:A8:B1:5B:67:C1:C6:D0:48:B9
Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial: 019427B3C0ED5D74DAACD58502983CECADC2
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/CwYygfo9jnbGuyyosVtnwcbQSLk.roa
Signing time: Thu 02 Jan 2025 15:47:59 +0000
ROA not before: Thu 02 Jan 2025 15:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32475
IP address blocks: 185.225.236.0/22 maxlen: 24
2a04:f280::/40 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:c0:ed:5d:74:da:ac:d5:85:02:98:3c:ec:ad:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
Validity
Not Before: Jan 2 15:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b063281fa3d8e76c6bb2ca8b15b67c1c6d048b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7e:39:38:66:5f:c1:8c:75:23:fc:5f:ae:72:
ec:dc:02:dd:f8:49:22:c4:b2:44:7c:c6:db:48:26:
38:6f:47:89:a0:8d:50:1e:c8:c8:0f:ea:0e:93:28:
18:fd:be:83:0d:94:55:a7:0d:b5:00:c1:ed:f3:be:
a7:25:ac:b9:29:f8:18:d3:ed:35:89:de:5c:46:b1:
39:d5:6e:c0:1d:35:b2:72:e8:70:cd:8d:ad:07:92:
d1:3f:b8:20:15:06:3e:75:47:a8:67:0c:75:43:6d:
57:0a:af:a3:13:9c:56:8d:9e:14:7a:7f:2c:c2:e7:
78:3e:90:ba:d8:43:c6:31:c4:f1:0a:34:ed:8a:6f:
18:85:b1:7f:37:ab:19:a2:63:2c:d7:de:8d:68:a7:
82:a9:3f:27:b9:1f:3b:43:35:68:d6:67:c8:8f:0b:
bf:ff:92:56:e9:13:3d:f1:68:db:fd:a5:52:df:2e:
4c:da:17:ba:24:80:c9:95:28:25:d9:75:24:76:2f:
35:93:14:92:a3:8a:76:ef:c5:be:65:6b:17:d7:97:
bf:f5:b5:68:e0:28:28:cc:f4:d3:a7:35:bf:f0:cd:
40:8e:43:d9:2a:2f:56:e8:0f:d7:1a:e8:cb:2a:6a:
fa:e3:6a:58:25:8e:de:36:52:88:30:a0:c5:bc:63:
39:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:06:32:81:FA:3D:8E:76:C6:BB:2C:A8:B1:5B:67:C1:C6:D0:48:B9
X509v3 Authority Key Identifier:
keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/CwYygfo9jnbGuyyosVtnwcbQSLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.236.0/22
IPv6:
2a04:f280::/40
Signature Algorithm: sha256WithRSAEncryption
32:4b:9c:99:e6:b3:92:b7:0a:09:f2:2c:77:bc:a0:6d:04:8a:
32:bc:c2:d7:33:84:f6:f5:89:32:14:c7:bf:6f:62:b7:f6:19:
f1:88:46:56:5c:bc:12:15:c0:b0:dc:25:d7:3c:51:04:91:f1:
e5:fa:1b:40:eb:b0:36:2a:44:20:c2:7f:fb:54:ba:0d:66:15:
27:2f:40:5b:23:d9:1d:9f:04:fd:47:f0:a2:58:18:3a:3f:c1:
d7:d8:e1:54:e7:63:de:2e:09:3b:0c:0e:1f:af:8c:b7:f7:48:
a9:15:b0:9a:d8:9e:cc:7b:2d:f7:a3:50:ef:14:3e:45:f2:c0:
ba:f1:7a:8f:f0:3b:e0:96:63:97:d1:d2:8d:a2:43:af:62:4a:
cc:50:66:7e:03:0f:17:2e:bf:fa:b0:95:c3:85:76:a8:aa:cb:
05:c3:b5:89:2c:56:f8:55:c8:e2:52:e6:1f:6d:c8:65:84:47:
30:6c:ab:63:4b:e1:57:bc:11:03:1a:38:12:4a:ae:c3:20:7a:
d7:95:47:e6:fb:e3:0d:ae:51:9a:d1:67:57:15:d7:8f:9d:a4:
9b:c5:41:71:c7:ad:93:3a:7e:3b:ac:24:2a:3e:4c:08:3f:f7:
8b:c8:65:db:a0:eb:c9:4f:42:ed:ea:dd:ff:9b:cf:e3:50:e6:
db:25:77:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:54 2025 by rpki-client