Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa
File: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (raw, json)
Hash identifier: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=
Subject key identifier: 08:69:F8:B3:6A:54:EC:AD:D5:78:EA:E4:60:BA:58:A6:0A:D6:9F:E2
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 01941FFAB32AF706BA4442127D98FDC9C629
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212460
IP address blocks: 188.72.0.0/24 maxlen: 24
188.72.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b3:2a:f7:06:ba:44:42:12:7d:98:fd:c9:c6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0869f8b36a54ecadd578eae460ba58a60ad69fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:27:f6:0a:61:cf:0d:c1:b8:2a:5f:89:7f:
cc:5c:70:ef:9d:99:69:da:f8:29:54:4b:42:95:c7:
5e:02:69:70:84:50:23:d3:fa:47:df:37:45:23:2c:
59:7d:01:a4:7f:4e:a0:80:d1:a0:ea:d2:91:85:28:
3e:bc:8b:ce:6a:99:b9:40:c0:10:ee:be:3f:27:e1:
f3:16:5b:cc:a3:19:16:9f:ff:8a:7b:06:ec:bc:aa:
90:b2:a8:a8:cc:ef:86:71:f2:f7:c3:8e:02:78:bd:
cb:c4:0f:7e:9f:ef:40:f7:d8:4a:93:02:e1:31:e8:
ae:54:ed:c8:6b:bd:6a:dd:69:a9:e0:63:c9:f1:7c:
35:33:7f:de:a2:d8:2c:54:0c:d7:ed:2e:2f:53:fd:
e0:84:02:58:d5:f0:f3:f9:64:28:19:8c:19:53:3a:
a8:ec:bb:b8:54:e9:a1:25:4b:7b:b1:4a:c1:d8:aa:
4c:77:91:53:f1:ae:17:49:79:51:d7:41:13:3a:5c:
af:7e:14:af:a5:07:84:99:56:9e:e8:9c:b9:dc:8e:
51:05:8b:ba:d4:49:d2:0d:37:db:e5:f1:5f:23:b6:
4e:43:d0:1c:f2:8d:79:50:e5:32:8a:93:4c:8e:a1:
1a:86:44:0a:a6:93:c8:89:7d:bb:1d:2f:64:71:3f:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:69:F8:B3:6A:54:EC:AD:D5:78:EA:E4:60:BA:58:A6:0A:D6:9F:E2
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.0.0/24
188.72.51.0/24
Signature Algorithm: sha256WithRSAEncryption
18:0d:5c:10:9c:36:67:b4:1a:c7:10:03:c2:3d:39:00:33:6c:
00:16:9e:e1:7c:a7:c2:cb:c8:8b:e6:22:2e:56:a0:43:b6:87:
63:e8:ae:fd:c8:dd:45:33:5d:10:b0:99:ff:c0:89:63:9c:3a:
d8:1d:ba:1e:6d:f9:92:df:fe:ca:dc:53:34:d7:20:8b:29:9d:
1e:1b:65:d5:d5:41:88:bb:38:b5:6d:2a:03:44:3a:99:92:0c:
91:f5:ef:a5:43:b6:c8:27:8b:30:82:7e:da:60:93:d3:4e:a3:
00:b3:33:75:67:de:8b:a6:36:ae:17:56:65:97:20:94:b8:5d:
1f:ee:00:13:49:c5:04:ea:24:c1:df:cb:ec:ff:d2:d1:5d:2f:
4f:fc:1c:a5:5e:68:df:de:02:35:8b:68:89:ad:3b:3a:f6:df:
34:e1:a8:cc:50:2f:8e:40:8c:bc:01:c1:59:2c:0e:09:7f:6c:
89:41:e2:1e:81:03:05:dd:35:9c:e3:56:98:51:99:a1:0f:16:
b5:51:7d:29:07:1a:bc:b5:4c:b1:0e:0d:1c:35:1d:ad:99:86:
43:27:01:26:9f:a5:64:ef:75:38:1b:06:e3:13:a3:71:21:b0:
9a:14:90:d3:69:94:44:54:8e:0e:c6:29:69:19:d7:99:b2:1c:
88:ba:bf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:47 2025 by rpki-client