Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/C_DsObwRzL_7p5V-pE1TobSBHSw.roa
File: C_DsObwRzL_7p5V-pE1TobSBHSw.roa (raw, json)
Hash identifier: 009GmomoyKJc06Ompmt2Pjgu3hY1yjyrBn4I/oTpdQs=
Subject key identifier: 0B:F0:EC:39:BC:11:CC:BF:FB:A7:95:7E:A4:4D:53:A1:B4:81:1D:2C
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0194244494969F84E4B1F896DE374D93B269
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/C_DsObwRzL_7p5V-pE1TobSBHSw.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 188.95.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:94:96:9f:84:e4:b1:f8:96:de:37:4d:93:b2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bf0ec39bc11ccbffba7957ea44d53a1b4811d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:4f:f7:ba:cf:2b:24:45:6b:f8:ba:a0:f1:
31:50:11:9c:9a:d0:b1:6a:5d:09:ee:02:d8:01:22:
b3:1b:94:07:bd:1c:a4:e9:d9:52:12:c3:a6:96:31:
20:24:b7:7c:5d:37:de:6d:36:39:ca:4b:66:47:f9:
50:3d:19:3f:6a:a3:ee:ca:0c:5a:b8:a9:17:de:5e:
84:60:ef:9f:29:8a:64:84:ca:d8:82:81:e0:82:f7:
1e:fc:9c:c2:43:d8:c7:1d:0a:c9:bc:1f:6a:74:f2:
76:79:3f:cc:c7:8a:ef:8b:96:c6:46:b8:ef:65:8d:
28:a1:04:28:14:fa:20:bf:4b:ee:05:82:a8:6d:4a:
e6:c7:c4:a8:7b:f2:b8:3e:0a:a0:cc:91:a1:dd:df:
63:46:8b:41:8e:55:dd:88:5a:b7:7c:0d:ed:a3:9b:
5e:dd:64:19:6a:73:3f:0e:83:ea:e4:eb:ac:3c:6e:
bd:a3:16:24:92:5c:a5:1d:42:53:cb:ad:68:d0:ee:
9e:c1:b2:f0:83:b2:2d:63:6f:01:9b:36:80:83:a3:
d2:43:2b:17:a4:81:17:b3:95:32:68:be:0a:9a:51:
10:af:4c:4c:ce:b3:fc:90:df:8f:7d:c9:3a:e7:a2:
b0:60:bc:37:2b:cc:c0:02:c5:77:c3:07:bd:22:66:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F0:EC:39:BC:11:CC:BF:FB:A7:95:7E:A4:4D:53:A1:B4:81:1D:2C
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/C_DsObwRzL_7p5V-pE1TobSBHSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.70.0/24
Signature Algorithm: sha256WithRSAEncryption
14:3d:df:d7:f6:86:a1:82:a1:b6:0a:24:a9:36:9d:7c:aa:03:
c2:0d:a8:73:6f:46:85:74:7f:b4:1f:fc:16:eb:04:01:15:6c:
98:53:55:ac:a1:83:88:f9:eb:13:dc:7d:a2:77:36:d6:d5:b8:
14:66:17:11:cb:ef:7d:b9:3e:af:00:ca:d1:09:c2:6f:53:ff:
73:eb:a4:7f:61:c2:15:01:ed:5c:bf:8f:6e:5a:d5:1e:30:bb:
0c:3f:5c:62:1c:71:d0:99:57:f9:5e:8a:e1:93:78:5d:88:98:
8e:cb:0e:c0:4c:9a:6b:59:51:e9:83:08:66:ef:d1:94:fd:2e:
e4:e9:33:52:dd:c4:14:e0:d8:f0:ae:4c:11:8d:46:88:85:a2:
76:cb:ac:59:e8:91:20:bd:62:14:aa:73:52:de:42:c4:15:35:
73:d3:30:25:95:e3:fc:83:bc:fb:86:2f:37:05:d6:05:2c:3d:
98:69:6e:75:c6:ac:06:66:c9:63:21:6c:af:74:67:01:4f:60:
3f:2e:42:dd:97:8a:85:99:8f:9a:6f:99:e8:e3:3f:57:04:54:
55:79:5c:52:0e:53:e9:f8:2e:56:ee:73:c1:f4:2f:c1:4f:7c:
79:6a:f6:46:7f:bc:bd:4d:f5:39:bb:2f:e3:0b:ac:64:06:88:
19:c6:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:51 2025 by rpki-client