Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/CLXmnDFSTo8gYOSfsi36Eul40PU.roa
File: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (raw, json)
Hash identifier: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=
Subject key identifier: 08:B5:E6:9C:31:52:4E:8F:20:60:E4:9F:B2:2D:FA:12:E9:78:D0:F5
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 0194221F6A6D53255B18B60F3FB64102EA9B
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/CLXmnDFSTo8gYOSfsi36Eul40PU.roa
Signing time: Wed 01 Jan 2025 13:47:51 +0000
ROA not before: Wed 01 Jan 2025 13:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.134.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6a:6d:53:25:5b:18:b6:0f:3f:b6:41:02:ea:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Jan 1 13:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08b5e69c31524e8f2060e49fb22dfa12e978d0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:99:97:86:16:fe:83:af:95:6f:94:cb:b3:
fb:6b:03:35:0d:76:16:83:af:8a:0f:dc:5a:88:15:
cd:30:54:43:a1:41:89:1f:1a:09:a8:88:13:4e:cb:
e2:76:09:be:17:50:6a:8f:4c:8f:b9:0e:17:85:35:
05:58:6a:de:bb:29:74:ff:d7:ca:0f:15:aa:ec:e2:
84:5a:aa:57:4f:cb:6d:23:ae:94:b1:f1:5b:b1:04:
22:a2:be:94:26:fc:60:d0:2e:5b:02:fb:f2:d0:92:
88:9e:5a:d6:01:87:f9:fa:0b:4a:b9:10:43:18:bc:
2e:76:5d:89:54:5e:4b:3a:e6:77:06:02:21:77:cf:
23:6e:76:48:56:b3:cf:03:f7:f4:f8:7c:d9:4d:5a:
91:b9:fa:72:eb:29:81:5f:f7:10:23:9b:5b:e2:2c:
17:7a:c9:08:09:72:04:ff:20:68:cf:65:f1:f3:27:
18:60:d0:40:1e:1d:4f:ac:1c:fd:9b:6a:6d:ed:a0:
f0:a9:2e:7e:22:08:4f:f3:22:8f:0f:ae:b0:0f:e4:
c5:16:84:33:74:4a:85:45:bf:4f:6f:3c:b0:23:e0:
45:07:5a:09:aa:ec:65:36:cb:f3:0a:bb:af:85:8d:
71:de:7f:c5:09:7f:72:00:23:8e:d8:c1:b4:cb:49:
f7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B5:E6:9C:31:52:4E:8F:20:60:E4:9F:B2:2D:FA:12:E9:78:D0:F5
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/CLXmnDFSTo8gYOSfsi36Eul40PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.79.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c9:46:4c:53:c2:cd:3a:66:03:75:39:a9:2a:20:eb:2a:12:
d0:a1:f6:cf:1a:67:e9:12:79:a3:01:11:a0:8f:6e:14:0a:c8:
c4:7a:f1:e6:fa:78:f2:33:e1:b1:6c:c1:7e:f4:a2:15:16:78:
4f:f1:24:ab:a3:d1:57:17:28:34:78:64:ad:0c:3d:b6:f5:54:
69:20:4b:23:99:0f:e9:16:7a:d2:03:bd:f5:28:cb:5b:09:b2:
c4:51:5a:f0:74:ff:69:cd:5f:f2:f1:6a:c5:50:81:5a:d6:25:
39:e8:9c:99:93:5d:94:e3:ac:51:2b:68:99:96:ba:2e:9c:23:
93:0a:1e:3a:b3:be:d7:cb:c1:1d:af:df:b0:02:a8:4f:ef:af:
2a:8e:88:71:87:1b:9c:be:d4:10:eb:12:e9:58:79:f6:14:cb:
cb:c0:6b:1e:31:cb:2b:68:b9:e6:ca:fd:19:39:76:c9:8e:bd:
99:22:c3:8b:f4:54:c0:5b:54:96:e1:4b:01:6e:3e:de:55:67:
97:d4:ae:ff:0f:fe:96:44:22:1e:00:ac:4c:fd:9a:22:22:c2:
5a:9e:6c:cc:77:1a:9e:a9:66:13:81:b3:b5:29:e2:51:cb:af:
82:e5:b7:56:8d:0a:8f:2a:85:84:58:4d:b5:50:97:f7:02:fa:
0e:e0:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:06 2025 by rpki-client