Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Cujb_JMNRpBWUMNsYDzUM07sX9g.roa
File: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (raw, json)
Hash identifier: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=
Subject key identifier: 0A:E8:DB:FC:93:0D:46:90:56:50:C3:6C:60:3C:D4:33:4E:EC:5F:D8
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 01942143B1C618E18F2668F7D02D1CF75929
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Cujb_JMNRpBWUMNsYDzUM07sX9g.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 213.209.176.0/20 maxlen: 24
213.209.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b1:c6:18:e1:8f:26:68:f7:d0:2d:1c:f7:59:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ae8dbfc930d46905650c36c603cd4334eec5fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:ac:c3:4d:f2:db:28:e3:6f:c0:ee:80:58:
cf:94:fa:9b:9e:60:74:40:c7:28:a5:5f:a8:bd:58:
95:c1:f1:eb:bd:11:72:27:90:a3:44:18:c0:ee:68:
72:3d:6b:b4:46:a3:01:15:c8:ac:c6:40:5d:8d:51:
11:28:6f:b6:c3:e7:15:84:30:45:1e:3a:26:69:79:
96:fe:d3:84:54:93:22:5e:23:b7:0e:55:99:8e:ac:
d4:f0:f3:93:59:9e:15:3e:23:e2:ec:cc:da:36:a5:
6b:8c:43:b7:e9:01:ba:ce:6d:4a:f8:ad:57:91:70:
74:d6:f1:1f:33:36:fb:62:92:85:a1:86:3c:89:32:
46:9c:b2:78:bd:98:a3:29:e0:ae:b3:fc:78:29:c5:
fe:93:3f:b2:05:96:ef:6a:64:aa:9e:b1:10:60:eb:
37:96:08:5f:de:12:0d:7f:4d:ee:8c:63:f0:fb:5f:
fa:96:bb:0c:0c:e7:24:71:e2:c9:c6:c6:d6:db:b3:
70:0e:c1:1d:4d:45:9a:b9:7a:87:31:fe:ee:f8:55:
d3:a9:31:15:fa:33:1d:77:d7:3b:1c:ef:ab:cd:92:
b9:07:73:4f:2b:01:b1:8e:a4:eb:28:c5:1f:61:14:
19:85:71:9f:6a:9a:6a:17:51:88:49:8e:9c:1c:dd:
70:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E8:DB:FC:93:0D:46:90:56:50:C3:6C:60:3C:D4:33:4E:EC:5F:D8
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Cujb_JMNRpBWUMNsYDzUM07sX9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.176.0/20
Signature Algorithm: sha256WithRSAEncryption
23:d7:a2:48:4e:3c:ef:06:42:ae:61:25:6f:61:5d:01:f2:d2:
40:7a:90:30:7a:25:7c:aa:1d:eb:64:3f:99:4f:76:aa:f0:60:
67:d4:f0:08:5e:6a:57:90:0a:45:88:15:aa:c1:a5:43:07:72:
16:df:d8:89:31:21:d8:7f:10:6e:ed:6a:1e:62:23:53:7f:66:
b2:34:3a:10:7a:11:59:6f:0c:22:af:0d:76:64:a1:34:64:7d:
77:65:2f:79:17:7f:12:16:98:1d:87:57:1a:73:5a:5d:c2:9e:
57:fa:f8:3e:2a:d2:42:1a:6a:e8:09:90:03:6f:6e:8b:c1:02:
5d:dc:0f:d3:41:17:8d:2e:76:d9:b4:46:43:4e:ce:e3:ca:67:
57:48:2b:91:57:a8:de:0d:eb:f7:77:3e:65:46:9c:c0:ae:c6:
84:f2:19:71:d8:af:dd:bb:80:6c:d7:00:66:5c:de:1f:60:ac:
0a:bd:8c:2d:06:b6:85:18:50:80:a1:45:b1:b3:6b:bd:83:ca:
4f:11:3d:e8:eb:d1:2f:df:b0:4a:64:a6:3d:29:26:a0:62:61:
76:05:35:03:f4:91:70:9e:3e:7b:62:74:af:51:30:de:dd:18:
9d:5c:c5:af:d9:d2:ad:0d:ce:3f:f7:96:c3:fd:99:c3:62:1e:
44:b5:7d:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ7HGGOGPJmj30C0c91kpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi
NDE1M2UwHhcNMjUwMTAxMDk0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWU4ZGJmYzkzMGQ0NjkwNTY1MGMzNmM2MDNjZDQzMzRlZWM1ZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgusw03y2yjjb8DugFjPlPqbnmB0
QMcopV+ovViVwfHrvRFyJ5CjRBjA7mhyPWu0RqMBFcisxkBdjVERKG+2w+cVhDBF
HjomaXmW/tOEVJMiXiO3DlWZjqzU8POTWZ4VPiPi7MzaNqVrjEO36QG6zm1K+K1X
kXB01vEfMzb7YpKFoYY8iTJGnLJ4vZijKeCus/x4KcX+kz+yBZbvamSqnrEQYOs3
lghf3hINf03ujGPw+1/6lrsMDOckceLJxsbW27NwDsEdTUWauXqHMf7u+FXTqTEV
+jMdd9c7HO+rzZK5B3NPKwGxjqTrKMUfYRQZhXGfappqF1GISY6cHN1wdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAro2/yTDUaQVlDDbGA81DNO7F/YMB8GA1UdIwQY
MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt
MWQzNzM0OTk5MjRlLzEvQ3VqYl9KTU5ScEJXVU1Oc1lEelVNMDdzWDlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl
LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1dGwMA0G
CSqGSIb3DQEBCwUAA4IBAQAj16JITjzvBkKuYSVvYV0B8tJAepAweiV8qh3rZD+Z
T3aq8GBn1PAIXmpXkApFiBWqwaVDB3IW39iJMSHYfxBu7WoeYiNTf2ayNDoQehFZ
bwwirw12ZKE0ZH13ZS95F38SFpgdh1cac1pdwp5X+vg+KtJCGmroCZADb26LwQJd
3A/TQReNLnbZtEZDTs7jymdXSCuRV6jeDev3dz5lRpzArsaE8hlx2K/du4Bs1wBm
XN4fYKwKvYwtBraFGFCAoUWxs2u9g8pPET3o69Ev37BKZKY9KSagYmF2BTUD9JFw
nj57YnSvUTDe3RidXMWv2dKtDc4/95bD/ZnDYh5EtX1k
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:41:43 2025 by rpki-client