Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/cOdMT1vBakCVhXnPerLROe0CFnU.roa
File: cOdMT1vBakCVhXnPerLROe0CFnU.roa (raw, json)
Hash identifier: CSnBhh/tdtgz5OXvaaCBm6nd3YW23jsTZHsuFLrW+tw=
Subject key identifier: 70:E7:4C:4F:5B:C1:6A:40:95:85:79:CF:7A:B2:D1:39:ED:02:16:75
Certificate issuer: /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Certificate serial: 019420D660EF30FAE049C1748C9C2FF100FE
Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/cOdMT1vBakCVhXnPerLROe0CFnU.roa
Signing time: Wed 01 Jan 2025 07:48:27 +0000
ROA not before: Wed 01 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 807
IP address blocks: 193.57.173.0/24 maxlen: 24
193.57.200.0/24 maxlen: 24
193.57.223.0/24 maxlen: 24
193.57.224.0/24 maxlen: 24
2a0f:8640::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:60:ef:30:fa:e0:49:c1:74:8c:9c:2f:f1:00:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70e74c4f5bc16a40958579cf7ab2d139ed021675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:a7:44:fe:fe:27:b2:4b:8b:6b:bc:ae:65:
b2:cc:6a:a8:8d:8b:52:ee:d6:83:1b:f2:02:f9:17:
6e:c8:1a:75:9f:b0:61:57:c2:92:20:0d:48:d3:fc:
38:df:ce:0e:1d:51:3c:cf:1f:5c:dc:10:f0:9d:c1:
b3:d1:52:25:96:7f:f9:21:80:81:f7:61:f6:40:0a:
62:55:e6:18:66:0d:6e:af:95:b6:fc:c1:e7:dc:9b:
d1:32:81:1d:07:59:02:d7:2b:16:40:fb:a2:f4:44:
33:33:a0:4b:ff:2f:5e:86:2f:a0:35:cd:e7:ad:34:
7a:5d:1a:98:95:b3:f1:91:e3:1c:74:fd:af:a7:67:
90:74:0c:c0:ac:fc:f3:66:3a:db:23:26:6f:38:40:
79:8b:23:6d:7f:3e:2b:d6:78:f6:91:9d:ea:98:06:
b4:70:79:56:64:c7:27:51:e2:26:5c:37:5b:ec:0d:
e5:80:6c:8f:e2:be:66:1d:87:a3:bc:c3:62:51:af:
b5:9b:04:55:bd:79:db:3d:d2:bf:48:76:3e:31:da:
d6:62:15:d4:2f:99:f4:c5:5e:86:1a:8e:a7:75:be:
fa:63:53:de:48:0b:13:c3:a9:76:98:fb:59:2e:90:
68:dc:25:4c:d7:62:75:a1:a4:4f:8f:62:f3:0a:f5:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E7:4C:4F:5B:C1:6A:40:95:85:79:CF:7A:B2:D1:39:ED:02:16:75
X509v3 Authority Key Identifier:
keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/cOdMT1vBakCVhXnPerLROe0CFnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.173.0/24
193.57.200.0/24
193.57.223.0-193.57.224.255
IPv6:
2a0f:8640::/29
Signature Algorithm: sha256WithRSAEncryption
c5:74:17:86:50:fc:3f:ca:f9:61:d1:72:86:8c:4b:46:7d:fd:
18:b5:7a:f2:b3:cc:03:2d:9e:cb:c2:fc:77:54:e1:30:68:65:
78:ac:44:7e:f1:41:7b:2d:e2:55:26:58:80:00:58:0e:48:c4:
5c:8a:25:f4:4e:c8:c3:34:99:14:c5:8a:9b:35:9a:58:6f:b3:
9b:38:53:0f:70:c7:47:f6:6d:5d:89:ed:6d:d4:80:0a:92:d4:
8f:5e:7e:8c:cf:53:51:14:fb:8f:b0:c5:56:58:8a:46:21:40:
4a:d1:27:f0:9d:4b:bd:2f:77:ff:6a:60:bd:7e:e9:a7:81:b7:
ce:e1:5c:eb:2d:0c:55:01:90:41:93:d8:69:a4:15:53:2c:3a:
46:75:d0:f8:5c:ad:c5:80:74:43:ca:e6:49:00:dd:14:a7:ae:
75:7b:6e:f7:95:6a:48:20:c9:f2:13:2d:fe:e6:05:e8:aa:ff:
d6:1d:73:d8:88:f9:bf:64:fc:4e:f5:e2:12:1a:35:7c:38:8a:
df:cc:a6:bb:c1:f3:fb:2d:ec:f5:f4:58:5a:95:1a:08:04:c4:
70:ec:18:80:a7:5b:11:54:3c:c5:2a:5b:b5:51:1d:69:90:cf:
94:12:ec:6e:f0:07:2e:99:aa:97:d8:4b:38:8f:cd:56:3c:5f:
68:8b:09:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:17 2025 by rpki-client