Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/CBCjLUswRko0Cnzo-CX-QWC1Fp4.roa
File: CBCjLUswRko0Cnzo-CX-QWC1Fp4.roa (raw, json)
Hash identifier: f53uE7Cw7Q6eToEXvkRDQBQ+A2NwoovXPtUufkDoIoE=
Subject key identifier: 08:10:A3:2D:4B:30:46:4A:34:0A:7C:E8:F8:25:FE:41:60:B5:16:9E
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0195AE14BE9720B2E6FB6610ABA9392290DA
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/CBCjLUswRko0Cnzo-CX-QWC1Fp4.roa
Signing time: Wed 19 Mar 2025 11:05:49 +0000
ROA not before: Wed 19 Mar 2025 11:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211955
IP address blocks: 81.29.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:14:be:97:20:b2:e6:fb:66:10:ab:a9:39:22:90:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Mar 19 11:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0810a32d4b30464a340a7ce8f825fe4160b5169e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:32:63:00:36:94:c8:2d:a6:6a:e2:a8:15:
6b:77:50:8d:13:bf:73:a7:97:68:8c:47:ca:1b:4c:
28:ef:93:a3:e5:2e:cf:ad:4d:db:49:fb:5c:a1:02:
b1:f6:d8:a4:c0:60:d0:77:f2:ad:4f:48:b3:d6:c5:
9d:73:34:8f:74:f8:69:e6:35:3a:cb:0f:59:1d:99:
fb:5c:e8:4f:15:fe:61:aa:3b:3b:b1:c3:6f:de:a7:
fc:8a:55:c7:56:44:4f:46:74:23:7d:7c:6d:f4:6b:
86:ff:38:45:ca:98:2a:a8:46:ce:15:9b:74:85:d6:
f1:5a:1a:e6:78:0e:31:bd:d9:14:ad:a8:98:7e:c1:
70:f6:62:37:a6:cb:29:c6:01:df:3d:45:c0:88:90:
1d:98:2d:f3:b2:67:55:c8:16:a8:d2:ec:11:f2:18:
cd:bf:f7:41:bb:e2:56:2d:02:2e:fc:13:ef:6a:6f:
44:90:1e:f6:c6:36:1a:9d:19:60:8d:89:fd:6a:86:
bb:ac:40:31:0a:34:e1:5d:25:3a:36:e2:f0:5d:87:
1c:e3:61:76:8c:1a:04:5a:aa:dc:ee:e4:3d:4c:0c:
58:90:1d:66:c7:6d:71:1c:52:37:1d:61:ea:fa:16:
7a:b8:0a:9b:c6:0c:70:0e:88:27:93:7e:63:1a:8f:
ab:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:10:A3:2D:4B:30:46:4A:34:0A:7C:E8:F8:25:FE:41:60:B5:16:9E
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/CBCjLUswRko0Cnzo-CX-QWC1Fp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.146.0/24
Signature Algorithm: sha256WithRSAEncryption
00:85:73:4a:d2:7e:b2:16:40:85:15:c8:3c:9e:c3:36:c2:4a:
71:3f:1c:79:e1:fb:06:16:ee:10:5a:f3:e8:b3:f5:a1:92:3f:
ee:ba:22:46:2f:28:e2:79:75:73:a6:ce:1c:91:82:a5:2d:48:
13:4f:cd:4d:53:d7:20:fe:c1:fe:54:1d:38:9e:d0:52:77:05:
38:05:a9:8a:79:1d:f7:d9:04:81:91:88:2d:58:61:81:ba:cb:
d1:70:ab:b7:16:61:7a:2c:6a:fe:d2:fb:8b:38:6d:2a:e6:a1:
48:2e:25:bc:8c:bb:5e:ec:8f:94:57:2d:66:13:d1:fe:35:2f:
b1:61:5d:e6:8a:95:81:e1:ec:c3:b9:58:78:bd:2d:bf:a2:55:
70:93:66:44:cb:9c:b0:2b:17:70:fc:5b:f6:15:34:4c:1e:63:
32:2b:d0:d6:56:67:84:6e:b6:41:c6:7c:95:1d:94:6b:49:9e:
42:11:0f:cb:24:19:08:7f:ab:e7:0f:a0:fb:cb:51:96:e1:71:
af:cb:d3:a4:12:bc:50:5d:fd:93:7d:1f:93:40:bc:f4:99:24:
95:92:01:62:88:a5:68:7e:81:43:1a:17:5b:0d:85:c9:e2:2c:
ba:b0:ba:34:96:3c:ce:ed:cd:a2:00:fe:77:1f:28:00:a4:54:
61:2d:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:07:53 2025 by rpki-client