Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa
File: Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa (raw, json)
Hash identifier: YJd5NF7BnIFbCJZm98sSNpBsaL371EEDxMPWmL/C3GQ=
Subject key identifier: 0A:E9:36:5D:55:4D:DA:5C:30:EF:08:1C:84:3B:79:43:F2:48:88:70
Certificate issuer: /CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Certificate serial: 019423D6E06D4B8738E5C764347E577B0A7A
Authority key identifier: 97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa
Signing time: Wed 01 Jan 2025 21:47:52 +0000
ROA not before: Wed 01 Jan 2025 21:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35197
IP address blocks: 185.100.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e0:6d:4b:87:38:e5:c7:64:34:7e:57:7b:0a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a6cbb2df6e7faccc5853ba5400f1f470eab16
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ae9365d554dda5c30ef081c843b7943f2488870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:39:9d:0f:4c:b5:30:24:19:28:19:0a:d6:
33:ea:3e:e0:e0:7a:e6:2a:ca:b2:c1:61:04:33:8f:
12:33:30:6e:d4:e9:1c:b4:63:07:07:85:51:74:0b:
d8:ed:1e:5a:b7:46:0a:66:c1:f9:95:28:e5:a4:20:
99:a2:68:4b:9c:bd:5e:83:fc:d7:8e:44:2f:22:c5:
54:51:bf:53:44:86:c1:2f:e1:b9:6e:3c:04:d9:9a:
45:32:86:95:b2:04:e9:3f:79:85:30:38:8b:98:d3:
01:db:1b:5c:ba:32:ed:7b:9a:fd:4a:b1:d8:48:8d:
8b:6c:fe:a3:1b:71:0d:c5:3f:c9:e9:21:ac:aa:3e:
d3:2c:ce:dc:1c:0c:48:9b:c3:16:b4:da:d4:6d:f3:
63:92:3a:28:21:1d:43:de:4e:9f:7c:e8:e1:cc:ba:
1b:38:7b:a7:87:92:e3:91:f6:a5:1d:17:12:64:3a:
f0:2b:23:ae:9d:83:b7:69:7a:4b:9c:9d:e4:d1:aa:
3c:3f:b9:e0:d2:8a:c3:6f:90:d2:a2:9d:df:fc:8d:
33:1b:17:9e:36:f6:d2:8f:6c:91:d4:33:88:1d:35:
10:cc:59:27:55:bf:bc:16:b2:3c:01:2a:92:0c:ad:
54:3a:26:89:32:7e:ce:60:58:c9:b1:7a:5a:9e:06:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E9:36:5D:55:4D:DA:5C:30:EF:08:1C:84:3B:79:43:F2:48:88:70
X509v3 Authority Key Identifier:
keyid:97:1A:6C:BB:2D:F6:E7:FA:CC:C5:85:3B:A5:40:0F:1F:47:0E:AB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxpsuy325_rMxYU7pUAPH0cOqxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/Cuk2XVVN2lww7wgchDt5Q_JIiHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7d3f00-d48c-416f-919e-dc0389f9167d/1/lxpsuy325_rMxYU7pUAPH0cOqxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.203.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:67:b9:45:90:36:70:46:85:c5:a5:68:9f:0a:ad:7a:1f:18:
f3:35:5a:47:32:1a:1f:7e:97:c2:71:e3:d0:46:d1:a3:dd:1f:
59:e2:51:76:06:2f:dc:6e:37:af:c6:25:40:63:9b:90:83:ea:
6f:f6:d1:53:49:dc:25:95:cd:7c:a0:e4:8b:ab:f3:63:62:15:
ca:be:d5:04:e3:a5:47:16:38:b0:56:4d:64:66:27:44:94:a4:
e9:25:bf:fd:67:85:37:ef:d3:cd:45:b2:98:e6:44:eb:3a:39:
ee:16:38:27:e8:f5:52:97:cc:1e:1e:af:dd:02:6f:e1:cb:c5:
8a:8f:99:1f:1c:08:e6:0f:05:47:e6:a6:3c:95:b4:77:13:37:
41:69:9d:b3:e7:29:b2:05:5f:0a:03:e9:39:43:13:e1:06:a4:
16:66:ee:92:08:51:21:67:39:bd:d3:cb:b6:7a:c7:3a:12:9b:
e7:bb:60:14:4c:f4:1c:12:f4:f1:dd:fd:d0:87:55:7d:b9:48:
2b:79:e3:72:97:7b:90:2f:67:eb:37:0a:33:2d:53:bc:84:c9:
66:25:fc:19:c3:ea:50:0d:38:af:e3:c1:0a:d5:63:18:5a:0a:
98:89:44:90:b4:65:67:9b:68:cd:b1:c4:b7:b6:2f:2a:38:1d:
2c:07:d8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:02:38 2025 by rpki-client