Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/Cj_iWDZ0D1TK46uScrNJsyJfZ60.roa
File: Cj_iWDZ0D1TK46uScrNJsyJfZ60.roa (raw, json)
Hash identifier: 2EItGET7KN5xYUnaftxX5tZU9l5ZOP9oj5BYiCLbSjk=
Subject key identifier: 0A:3F:E2:58:36:74:0F:54:CA:E3:AB:92:72:B3:49:B3:22:5F:67:AD
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 0194228DCEED456E7E7552F4CAAFF5B8199D
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/Cj_iWDZ0D1TK46uScrNJsyJfZ60.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205547
IP address blocks: 91.209.225.0/24 maxlen: 24
185.40.35.0/24 maxlen: 24
2a12:d1c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ce:ed:45:6e:7e:75:52:f4:ca:af:f5:b8:19:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a3fe25836740f54cae3ab9272b349b3225f67ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:12:01:77:57:0e:2d:ce:8a:75:6a:3f:21:
af:f7:76:9a:98:99:bb:77:7c:96:a7:27:fd:f3:8b:
92:4b:9d:c2:3d:4b:76:0a:c2:48:a9:e4:57:38:bc:
66:03:09:8d:35:ea:2d:da:df:b6:2b:a2:45:43:a5:
6b:c5:d2:5f:7f:ba:8d:56:81:c9:e2:d3:bd:e5:93:
9d:21:c9:7f:79:a9:4b:14:9e:a8:7b:e2:a8:6a:bc:
57:62:8a:aa:4b:85:80:2f:07:34:9a:fc:17:86:a5:
c4:2b:ff:1b:cf:0c:1d:4f:ed:f6:25:c5:61:33:8f:
fd:a3:b9:44:0e:27:e1:ea:52:92:2a:ce:44:32:d6:
45:8a:3f:28:07:3e:e2:1a:66:d3:74:45:f4:1f:ca:
8f:de:0e:3a:7b:f8:da:64:73:b5:d4:7b:23:05:3d:
2e:9e:93:34:1f:fc:df:4f:ed:a9:b5:9f:b0:54:cb:
13:79:e3:a1:95:72:9d:0a:6e:f5:23:2f:f2:42:b9:
85:74:26:77:fb:09:35:4a:ba:da:80:d5:3e:2b:3a:
86:07:dc:58:a5:33:76:49:c5:ee:2a:a8:59:1b:cb:
b4:33:94:48:d8:a8:86:55:0c:ba:5a:2a:89:ef:60:
9d:46:61:de:8d:5e:15:17:cd:04:f5:a2:a3:0e:23:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3F:E2:58:36:74:0F:54:CA:E3:AB:92:72:B3:49:B3:22:5F:67:AD
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/Cj_iWDZ0D1TK46uScrNJsyJfZ60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.225.0/24
185.40.35.0/24
IPv6:
2a12:d1c0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:59:da:e4:cd:7f:5e:e5:9b:f3:46:59:73:f5:1f:56:7a:cd:
89:87:f2:f8:76:0e:8a:e5:53:ab:bc:c2:84:5e:e0:c6:9f:56:
5b:37:df:c9:49:e5:4f:3b:21:1b:18:3b:38:b1:64:d2:26:8c:
de:12:bd:3d:87:40:1b:5a:ba:77:b6:b9:15:7c:2c:31:2d:8c:
4f:52:21:ed:f6:46:b1:0a:df:79:d0:43:7d:17:37:b9:c5:cf:
86:f2:98:bb:33:4d:a0:4e:db:e6:ba:de:11:2c:10:72:ba:c3:
0d:c0:66:f8:38:5b:3c:59:10:25:63:73:5e:4c:3a:fa:36:63:
a2:51:e3:cf:60:28:77:f3:e6:80:eb:37:a1:74:b1:68:bd:d9:
8e:c6:1a:e0:95:0f:ca:e5:51:88:85:e8:ba:28:6f:c9:fb:40:
0b:20:f0:ba:16:6b:d6:05:aa:54:9e:cf:75:9f:c5:a4:81:21:
d3:aa:a0:9e:d8:8d:9c:2b:9a:8b:54:d6:fa:b3:8e:36:51:ed:
eb:8c:ff:a6:86:53:b9:b8:50:a3:5e:6b:95:46:46:f6:31:c5:
43:be:d6:9b:38:f4:ec:d3:40:28:3c:f3:63:99:71:d3:60:04:
62:db:36:87:28:a8:08:c7:81:67:4c:a2:56:6f:0f:0a:40:70:
13:a3:9c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:50 2025 by rpki-client