Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/cSOrBn1PeQq1eOyPXkpRWc_7oxw.roa
File: cSOrBn1PeQq1eOyPXkpRWc_7oxw.roa (raw, json)
Hash identifier: ZZgceVbRrMY+srdGpsdchj8l93+aLooLJefNaVmiZtc=
Subject key identifier: 71:23:AB:06:7D:4F:79:0A:B5:78:EC:8F:5E:4A:51:59:CF:FB:A3:1C
Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial: 0194258F943E90796EFA9908FFE079168A08
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/cSOrBn1PeQq1eOyPXkpRWc_7oxw.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214415
IP address blocks: 185.175.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:94:3e:90:79:6e:fa:99:08:ff:e0:79:16:8a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7123ab067d4f790ab578ec8f5e4a5159cffba31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:04:c4:8c:db:45:14:33:ed:a9:9b:5c:d5:
3a:55:23:c5:3b:ac:ac:72:48:40:c0:eb:42:b8:aa:
c0:60:86:98:a2:f5:b1:83:5d:92:be:e5:08:e8:31:
9d:24:68:a5:ab:76:4e:2b:2b:a3:29:f7:34:a0:44:
7d:9d:1a:85:4c:0c:c9:e5:d8:b8:b6:90:78:10:3d:
ca:f8:15:fe:9a:0e:2c:e9:b5:16:61:19:41:82:06:
e0:d0:6e:6e:5a:31:75:5b:a3:bd:eb:29:52:3c:83:
16:6a:7a:f1:a5:09:3e:fe:c6:16:c4:b4:f9:49:04:
6a:58:3b:a7:c3:13:77:43:7d:18:16:19:9e:4d:a6:
4d:d5:90:45:ed:03:54:bd:b5:80:59:d7:47:3e:b8:
34:fc:d4:8e:10:67:ee:0b:36:47:59:08:d2:83:20:
73:ff:a4:e6:ef:25:02:d2:cf:c5:b6:66:a3:00:30:
b1:88:40:3c:7c:e7:5a:87:2d:d2:9b:f8:d9:f8:cc:
0d:88:f7:1f:aa:32:e8:54:98:82:ad:b2:3b:b1:4c:
48:aa:8d:85:02:ba:43:44:5f:5f:2c:be:37:91:35:
61:06:a5:54:04:be:0d:37:57:b2:b0:f6:d4:60:fe:
c6:31:aa:af:44:6b:ab:23:17:45:8a:3e:40:5e:81:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:23:AB:06:7D:4F:79:0A:B5:78:EC:8F:5E:4A:51:59:CF:FB:A3:1C
X509v3 Authority Key Identifier:
keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/cSOrBn1PeQq1eOyPXkpRWc_7oxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.108.0/24
Signature Algorithm: sha256WithRSAEncryption
88:64:34:18:c9:0e:4c:56:37:67:c1:88:7b:a0:19:df:3e:64:
99:ab:a3:34:cb:13:14:c4:fc:cf:fc:68:eb:35:c5:22:57:ac:
39:bd:b1:42:9a:6a:6a:40:18:aa:50:71:5e:af:45:d9:de:08:
f0:72:84:34:9e:9f:2b:9e:a3:14:e7:25:16:68:3d:2c:ae:0f:
b6:a6:e9:b4:94:03:95:fa:db:fa:11:62:7f:36:5c:7f:d4:fc:
6a:a1:5f:81:7b:1c:2e:06:7d:e5:af:70:b9:5f:80:33:bf:ba:
5d:d2:da:34:22:a2:8c:3e:d1:2a:14:c6:5c:9f:48:2b:55:da:
12:25:b5:39:c0:4c:33:09:45:f5:f2:54:62:c4:ef:27:0d:6d:
38:91:3e:62:83:ae:6e:9c:44:e0:f6:68:ea:cc:1b:cc:90:10:
f1:fe:40:dd:34:aa:4b:8f:e4:27:3e:c9:12:b2:49:45:78:cb:
ed:0e:78:ea:0d:1b:ed:c0:33:b6:07:92:90:36:10:5b:82:c6:
f6:6f:71:4d:bf:fc:1c:dd:f7:33:01:42:4e:01:7a:6f:41:68:
69:a8:f1:ab:27:ea:06:89:75:c7:bf:80:3f:f1:ff:ec:0f:e9:
00:32:40:02:c1:b4:b2:4b:ff:ca:49:2e:ac:a0:90:52:56:47:
da:4e:2a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:14 2025 by rpki-client