Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3925db-5b3c-40a2-a3a1-233db82cad9c/1/C0Cd5pCH4-baYJksihb5clfeYyk.roa
File: C0Cd5pCH4-baYJksihb5clfeYyk.roa (raw, json)
Hash identifier: xwBeGi8OE1Z9+NS+vJY10ZBfEUin68WZ2auRueFTX2o=
Subject key identifier: 0B:40:9D:E6:90:87:E3:E6:DA:60:99:2C:8A:16:F9:72:57:DE:63:29
Certificate issuer: /CN=5780c0c438cc5dcb7a869d26b4ab83da447de28d
Certificate serial: 018709FED53D84327FDC44C70777EC901287
Authority key identifier: 57:80:C0:C4:38:CC:5D:CB:7A:86:9D:26:B4:AB:83:DA:44:7D:E2:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4DAxDjMXct6hp0mtKuD2kR94o0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3925db-5b3c-40a2-a3a1-233db82cad9c/1/C0Cd5pCH4-baYJksihb5clfeYyk.roa
Signing time: Wed 22 Mar 2023 15:45:08 +0000
ROA not before: Wed 22 Mar 2023 15:45:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57935
IP address blocks: 185.104.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:fe:d5:3d:84:32:7f:dc:44:c7:07:77:ec:90:12:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5780c0c438cc5dcb7a869d26b4ab83da447de28d
Validity
Not Before: Mar 22 15:45:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b409de69087e3e6da60992c8a16f97257de6329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ed:00:aa:b5:04:80:6f:fc:c3:ac:06:74:10:
00:4c:bc:e6:06:e2:32:72:74:97:07:20:e8:81:81:
44:51:5e:ab:60:df:ba:1f:6c:c0:44:18:1c:0e:ff:
d3:95:d0:29:a9:25:30:4d:17:a6:96:ab:ba:c0:40:
57:d7:8e:31:55:39:fd:a9:c6:68:52:21:02:2c:b6:
3f:a3:a9:3c:39:7d:e9:6d:35:1b:e1:ba:65:1f:b1:
d6:d8:26:09:e9:1e:69:62:89:f1:50:ab:c3:f2:56:
41:12:4e:39:bf:e9:66:86:80:4e:49:9e:2f:a0:b1:
7d:70:79:6a:9d:fc:d3:c3:12:82:5c:ad:8f:2f:cc:
80:79:2a:ca:8f:e3:63:87:0f:23:97:c4:73:af:25:
eb:24:fb:ff:69:ed:d4:f0:72:d3:86:87:e0:25:22:
e6:d1:c0:85:1c:b9:1c:8c:d9:23:69:fa:a4:7d:ca:
9c:ea:86:06:e7:36:0d:64:c7:cf:bd:a7:97:fb:5a:
3a:2a:db:1f:64:80:83:28:94:e9:5f:67:0f:71:4c:
22:a8:78:74:79:95:2a:57:7b:0f:1e:33:55:22:cb:
28:cc:3f:f6:fe:64:e3:ed:c4:23:a5:2c:61:1b:5c:
0a:d3:d5:21:d8:ca:24:6c:6c:e5:1a:5e:e1:53:bf:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:40:9D:E6:90:87:E3:E6:DA:60:99:2C:8A:16:F9:72:57:DE:63:29
X509v3 Authority Key Identifier:
keyid:57:80:C0:C4:38:CC:5D:CB:7A:86:9D:26:B4:AB:83:DA:44:7D:E2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DAxDjMXct6hp0mtKuD2kR94o0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3925db-5b3c-40a2-a3a1-233db82cad9c/1/C0Cd5pCH4-baYJksihb5clfeYyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3925db-5b3c-40a2-a3a1-233db82cad9c/1/V4DAxDjMXct6hp0mtKuD2kR94o0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.189.0/24
Signature Algorithm: sha256WithRSAEncryption
07:69:14:e4:96:3c:4a:c1:84:74:b0:04:97:32:b6:45:02:a8:
29:91:cf:d7:f2:50:35:af:88:7c:17:ad:7e:3f:eb:36:29:c7:
a3:25:05:13:a5:ef:c7:a5:44:44:ca:b5:2f:b2:1b:fd:8d:d9:
6b:c4:0d:c1:c0:70:56:0c:ca:96:2e:0a:af:4e:71:05:ac:a7:
4a:ca:ba:cf:4e:5f:7a:3f:dc:58:2b:ce:c0:e7:6c:0d:26:0a:
b4:27:da:4e:9e:22:24:3e:f1:09:2a:92:23:2d:65:11:f7:4a:
20:d3:89:11:fc:3e:e6:f5:09:dc:2f:ac:c7:c2:9a:ce:4f:89:
0b:a4:33:a3:48:85:c2:34:b7:41:e3:90:52:c5:40:34:e4:76:
f0:ec:3d:26:f8:43:6a:d5:c0:61:69:a6:fd:10:fd:fd:bd:0e:
b7:0f:e6:6c:2b:44:c3:fa:4d:1d:f5:3f:b9:3d:0d:30:3f:72:
1f:1f:96:5a:8b:32:e4:ca:1f:27:aa:eb:ef:80:29:7b:8b:9c:
32:86:9d:78:0f:aa:35:91:0c:c8:96:4f:14:76:f9:17:bb:97:
29:ac:28:13:cf:e4:77:34:f2:5c:a8:6e:09:54:c5:30:79:f9:
96:dd:56:c2:11:ea:5a:01:db:24:fd:74:1a:03:64:42:7d:29:
51:c4:93:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:22 2025 by rpki-client