Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/CCupZ2Z50lEeozRfCFyqGlk11BE.roa
File: CCupZ2Z50lEeozRfCFyqGlk11BE.roa (raw, json)
Hash identifier: u0mXYzOevuF7/VUH3KREJcVDAaOJuSJnSH+Q3fKIqwg=
Subject key identifier: 08:2B:A9:67:66:79:D2:51:1E:A3:34:5F:08:5C:AA:1A:59:35:D4:11
Certificate issuer: /CN=1c88af2f43654b3f452d5c74ed074712570d1fde
Certificate serial: 0194266B77EDA255E31F8AD5D17590FB18D8
Authority key identifier: 1C:88:AF:2F:43:65:4B:3F:45:2D:5C:74:ED:07:47:12:57:0D:1F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIivL0NlSz9FLVx07QdHElcNH94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/CCupZ2Z50lEeozRfCFyqGlk11BE.roa
Signing time: Thu 02 Jan 2025 09:49:24 +0000
ROA not before: Thu 02 Jan 2025 09:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16205
IP address blocks: 31.210.160.0/21 maxlen: 21
81.201.144.0/20 maxlen: 20
176.52.200.0/21 maxlen: 21
178.249.24.0/21 maxlen: 21
185.75.184.0/22 maxlen: 22
217.18.176.0/20 maxlen: 20
2a00:8180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:77:ed:a2:55:e3:1f:8a:d5:d1:75:90:fb:18:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c88af2f43654b3f452d5c74ed074712570d1fde
Validity
Not Before: Jan 2 09:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=082ba9676679d2511ea3345f085caa1a5935d411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:ea:4f:49:6d:2b:18:b2:bf:a6:6f:dd:f9:
f2:fa:da:68:00:af:6e:d8:8d:a7:ba:ac:06:d7:9a:
fe:cb:50:15:14:fc:86:1d:98:63:c6:e5:9c:36:f1:
39:58:ca:4a:5f:d2:10:1a:d0:3e:c8:19:1e:6b:b0:
79:04:c0:67:ab:76:bc:5e:7e:ee:b6:33:de:b4:54:
6f:f3:01:50:3f:d6:91:4e:ce:eb:3f:5a:77:b0:20:
ff:78:30:eb:f3:49:17:03:f8:de:1f:ef:b7:e6:62:
71:1f:03:47:69:cf:6d:18:7b:70:e6:0e:af:9c:fe:
a5:1c:13:f9:26:4a:e8:15:13:b8:f8:c4:ea:6c:ea:
f7:99:3b:23:54:ee:1e:6f:46:44:dc:76:eb:ac:d4:
9f:5a:ba:c6:68:35:2c:eb:3a:94:6e:22:c7:fe:2f:
e5:f5:2f:41:db:18:ad:c9:b8:f3:8b:ac:95:ed:ea:
0d:a0:70:0c:46:3c:f8:37:a8:b0:df:55:58:bb:bc:
8c:1b:28:c1:49:64:84:c1:7e:02:77:63:11:17:4c:
db:10:4d:df:3c:e6:1e:5e:f8:12:db:cb:bd:bb:e8:
49:b5:44:dd:b9:ef:d6:61:e1:dc:df:c2:1d:87:53:
a9:e2:85:c5:a2:bb:f5:c7:ea:6b:03:ed:da:c7:4f:
1b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2B:A9:67:66:79:D2:51:1E:A3:34:5F:08:5C:AA:1A:59:35:D4:11
X509v3 Authority Key Identifier:
keyid:1C:88:AF:2F:43:65:4B:3F:45:2D:5C:74:ED:07:47:12:57:0D:1F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIivL0NlSz9FLVx07QdHElcNH94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/CCupZ2Z50lEeozRfCFyqGlk11BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6cfc2b-9be8-4fe0-a424-196cc167113e/1/HIivL0NlSz9FLVx07QdHElcNH94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.160.0/21
81.201.144.0/20
176.52.200.0/21
178.249.24.0/21
185.75.184.0/22
217.18.176.0/20
IPv6:
2a00:8180::/32
Signature Algorithm: sha256WithRSAEncryption
7e:d9:31:8c:56:0a:61:4b:c4:7f:29:84:16:5d:f7:03:a2:cf:
d1:28:2c:50:b1:a3:dd:a7:31:df:b2:49:82:0c:8b:b8:ad:51:
80:c6:6a:27:46:db:fd:ff:d8:fe:40:dd:b0:43:bb:c4:b7:88:
86:68:35:df:5b:17:b1:8b:07:73:fc:37:a0:cf:0e:de:59:57:
9d:02:fa:66:6f:92:29:54:66:f0:8c:89:7d:a6:aa:88:4b:a4:
ab:ab:1a:db:3a:b3:74:86:69:04:fc:6e:ed:1b:fd:0a:d4:e1:
9f:31:43:32:60:77:01:ee:e6:01:54:78:f9:0c:f8:22:b3:be:
bc:64:ef:ba:0d:2a:a4:e3:bc:47:ac:b4:28:77:9a:89:94:9a:
33:84:3d:ee:2f:b4:d2:74:e7:be:be:ad:10:93:07:2f:0b:fd:
7d:ab:48:42:5f:57:6a:2b:28:d2:9c:95:2d:09:27:28:22:3e:
9c:3d:d9:d5:85:86:c7:72:e6:bd:f6:24:72:a2:32:4d:69:4d:
af:d5:8f:ec:47:a6:49:2a:d0:a4:f5:31:fc:7a:93:84:be:88:
a3:6d:29:f9:6b:b3:b2:ad:23:a0:82:bc:60:c1:54:d5:0b:ed:
89:ba:14:b8:d8:18:b7:31:79:f0:60:63:2b:d6:4e:75:c9:4d:
9c:7a:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:33 2025 by rpki-client