Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/IOpYUexe3NkA5nj7JqC-UiiIwnw.roa
File: IOpYUexe3NkA5nj7JqC-UiiIwnw.roa (raw, json)
Hash identifier: Z3XkrhI5GMZ7hN84mWX6NKEl1t+a6Lb/Oc4x5xaz028=
Subject key identifier: 20:EA:58:51:EC:5E:DC:D9:00:E6:78:FB:26:A0:BE:52:28:88:C2:7C
Certificate issuer: /CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
Certificate serial: 0193C64F8D38AFA07C6694EE220A35E93A86
Authority key identifier: CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/IOpYUexe3NkA5nj7JqC-UiiIwnw.roa
Signing time: Sat 14 Dec 2024 17:55:22 +0000
ROA not before: Sat 14 Dec 2024 17:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203916
IP address blocks: 185.135.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c6:4f:8d:38:af:a0:7c:66:94:ee:22:0a:35:e9:3a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
Validity
Not Before: Dec 14 17:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20ea5851ec5edcd900e678fb26a0be522888c27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:c9:a6:5f:97:fe:60:2f:29:75:6c:cf:7c:
1f:3d:b6:dd:34:73:1c:09:a6:93:31:40:b5:70:f4:
bd:8e:af:44:3c:d7:d5:46:e2:10:46:fc:9d:6e:fa:
3e:76:b6:cd:2a:5c:62:ed:c9:22:33:20:21:8e:fe:
50:62:84:dc:c7:16:c9:99:5b:60:4f:66:e8:04:a6:
66:42:10:a5:1d:4a:5d:2e:20:1b:79:4f:9e:11:30:
d1:78:3c:1e:55:92:c5:59:9d:66:cb:c0:8c:f2:5a:
35:f9:33:2e:f0:96:6a:92:a3:ff:9b:5e:78:5b:f6:
0f:7c:91:9c:51:e4:a2:56:66:97:96:e1:47:06:26:
12:33:47:c8:94:bb:3e:84:42:29:9f:bd:ab:06:c0:
7a:c4:39:c7:79:d8:6a:7e:70:bd:67:f3:ce:1a:66:
31:54:ab:7d:ba:05:69:86:61:ad:d3:c1:6b:d9:08:
0f:d6:d7:be:e7:45:6e:1b:af:dc:29:77:da:2d:9c:
c7:f5:94:2d:b8:6d:a9:e5:a4:08:5f:80:3a:43:d9:
5e:03:01:a1:d4:30:96:d8:48:a1:9b:e8:b9:09:98:
23:62:71:41:0d:f7:5d:f8:e4:ed:f3:1d:e6:b7:c0:
ac:44:c5:a8:f3:8c:11:c5:83:66:71:33:45:73:13:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EA:58:51:EC:5E:DC:D9:00:E6:78:FB:26:A0:BE:52:28:88:C2:7C
X509v3 Authority Key Identifier:
keyid:CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/IOpYUexe3NkA5nj7JqC-UiiIwnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.47.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f3:99:4e:8a:2e:10:26:dd:55:8d:59:c4:0e:b0:12:31:41:
50:bd:77:a6:32:8b:89:88:73:af:97:c3:1f:36:b2:4e:52:3a:
d9:2e:a7:53:96:c7:87:0b:9c:b5:06:5f:7b:2a:52:0d:ed:f2:
32:1c:d6:08:ce:0a:61:ad:4c:bf:d5:8a:a8:30:e1:5e:b2:ff:
a8:ec:35:92:6e:c2:88:bd:23:8f:ec:04:36:d8:8b:60:e1:40:
ca:44:bb:4f:b2:f6:3a:db:42:e7:7f:f6:dd:d6:38:94:a8:9e:
e5:a1:6f:f7:72:5c:59:f9:7e:40:cb:ee:48:54:93:1d:f5:13:
62:7f:98:53:19:4b:1f:b9:5b:58:d0:93:23:f3:85:d8:d1:cf:
99:25:15:0b:b4:11:e2:99:5e:00:49:32:1c:d0:4c:f3:47:69:
04:0b:9d:c3:e3:1a:fa:6b:32:9e:b1:26:ba:bb:7a:6f:63:bb:
cf:d5:67:ba:bb:2f:86:6c:5d:b3:ca:42:2e:d0:a4:bb:05:71:
36:46:0e:3d:2b:e4:b5:0f:ed:8a:32:03:17:d2:7c:fd:dc:d7:
ca:5b:15:15:69:55:6a:f8:cd:26:9e:20:8b:88:3e:53:17:ec:
06:77:48:a5:59:78:c0:e6:42:a0:09:cf:ab:08:fb:76:59:9b:
30:b3:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:23:20 2025 by rpki-client