Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/clUZ9tkwzTPFBOCCgBP0tWmdD6Y.roa
File: clUZ9tkwzTPFBOCCgBP0tWmdD6Y.roa (raw, json)
Hash identifier: ktCrfxHwdTYWWRNHW6EVRJ1LRb007Q4WWLnqBBbhwns=
Subject key identifier: 72:55:19:F6:D9:30:CD:33:C5:04:E0:82:80:13:F4:B5:69:9D:0F:A6
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 018CC94DDF949FC7FAFAB20635E04772EB4E
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/clUZ9tkwzTPFBOCCgBP0tWmdD6Y.roa
Signing time: Tue 02 Jan 2024 08:32:52 +0000
ROA not before: Tue 02 Jan 2024 08:32:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43050
IP address blocks: 176.119.232.0/21 maxlen: 21
91.215.124.0/22 maxlen: 22
91.194.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:df:94:9f:c7:fa:fa:b2:06:35:e0:47:72:eb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: Jan 2 08:32:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=725519f6d930cd33c504e0828013f4b5699d0fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:d4:85:94:98:c5:1d:87:97:12:1b:4c:1e:
54:a1:19:11:a8:27:a3:59:13:ef:8d:6b:2a:16:de:
dd:4e:d6:3d:95:b3:18:f4:ef:ce:4d:7d:76:cf:95:
02:04:8e:3f:2e:7b:17:d3:01:e8:21:5c:fd:eb:03:
15:6f:24:83:3b:85:6d:58:de:c6:2c:d6:b2:86:64:
bf:9e:42:c3:a0:39:79:00:c2:c0:03:f4:e1:da:fe:
c6:fe:22:1a:43:9a:c7:a9:24:88:fb:57:e8:d7:22:
80:26:40:0e:a5:eb:c2:c3:62:c1:a9:dc:20:c4:3b:
5c:2d:00:e7:a4:5a:36:b7:c5:55:e6:7e:cc:2d:7b:
16:c1:75:cc:23:3b:0a:a3:08:72:d4:06:ff:bc:7d:
63:af:48:1d:68:6e:df:44:d1:4e:ad:d1:28:58:13:
fa:f0:b4:b3:a3:28:34:ad:72:cf:94:d2:60:b2:4a:
73:dc:a8:f2:c5:3b:72:a6:40:4a:4d:4a:7f:4a:da:
e0:0e:cb:e3:a9:89:73:f5:36:e5:f7:64:27:a9:ae:
96:25:64:e1:b2:9d:1c:1f:c0:b6:78:63:10:71:c7:
a0:91:9b:67:a5:cf:d1:ff:3d:61:36:27:53:9e:9e:
33:ec:d1:7d:78:c5:57:f9:70:18:50:fb:42:92:1e:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:55:19:F6:D9:30:CD:33:C5:04:E0:82:80:13:F4:B5:69:9D:0F:A6
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/clUZ9tkwzTPFBOCCgBP0tWmdD6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.50.0/23
91.215.124.0/22
176.119.232.0/21
Signature Algorithm: sha256WithRSAEncryption
15:aa:96:96:26:15:b0:56:64:63:4c:c2:52:0d:99:59:18:b2:
f7:09:ce:43:0a:c8:e7:5d:47:24:41:59:60:63:28:4a:59:b5:
e7:b7:79:54:37:f4:02:b8:8c:63:1a:04:23:70:dd:54:33:87:
3d:20:b0:42:5e:fb:9c:22:a3:0c:47:3f:e3:2f:8e:91:69:86:
6c:f6:0b:6e:61:0b:d4:e9:1b:2a:dc:30:5a:1c:fd:ac:66:71:
e8:4a:3e:6a:25:00:45:62:26:3b:8a:5e:71:e7:7e:73:d3:e0:
cf:f5:4d:c1:88:3d:a3:34:18:ce:23:9b:5f:c0:b2:3e:36:b3:
95:43:f1:51:e1:19:fa:42:2b:d3:df:11:5a:16:89:b9:27:05:
0c:84:1c:93:dc:b6:6f:c4:e9:88:ca:f6:83:c4:0d:1e:9e:f6:
63:ae:6e:71:1e:c5:13:79:77:9b:a3:26:b9:dc:c2:a4:91:ac:
2a:4b:1a:a8:f1:67:8c:da:57:d9:8d:62:9c:6c:e6:b6:3e:a8:
a3:e4:52:06:b5:94:4a:3b:07:28:42:2e:be:11:53:00:79:44:
c6:02:f2:a6:08:f8:c0:cc:ea:83:db:06:d9:1b:11:31:68:18:
f7:9c:52:d5:e9:68:aa:77:8d:1c:cd:ed:6d:32:0a:6c:1a:55:
5a:7c:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:41:10 2025 by rpki-client