Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CsvrPWKcCC5NM8yvRnzxsUnbSCU.roa
File: CsvrPWKcCC5NM8yvRnzxsUnbSCU.roa (raw, json)
Hash identifier: wwoeH4SCvBUCWR2pgWtT5ChNSS1CLDmlSenhj4J6wXE=
Subject key identifier: 0A:CB:EB:3D:62:9C:08:2E:4D:33:CC:AF:46:7C:F1:B1:49:DB:48:25
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EF71D6AEFF5CD05999E09964BA6D1
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CsvrPWKcCC5NM8yvRnzxsUnbSCU.roa
Signing time: Thu 02 Jan 2025 05:48:33 +0000
ROA not before: Thu 02 Jan 2025 05:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35499
IP address blocks: 85.187.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f7:1d:6a:ef:f5:cd:05:99:9e:09:96:4b:a6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0acbeb3d629c082e4d33ccaf467cf1b149db4825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:f4:27:ef:f0:9d:38:72:38:4d:fe:40:86:
17:1b:f6:f0:3e:73:a5:82:7a:2c:f1:d8:6c:39:34:
d1:27:c1:1c:0f:50:35:e2:49:96:ba:f6:91:ff:9e:
72:9e:09:73:66:9a:f4:00:5f:53:9f:08:47:31:ad:
9b:bd:88:03:22:9a:03:f7:cc:3e:af:00:4e:5a:78:
b9:43:fb:76:c0:1c:21:76:7a:1c:e8:67:1e:65:b4:
47:63:b7:72:66:b5:e7:0f:22:30:b6:64:e6:e3:cf:
d9:2d:e9:31:2d:cf:4f:c6:80:40:97:9f:60:f0:39:
4c:eb:f9:f7:93:e8:9a:eb:9e:3b:0f:8a:23:01:f8:
d0:59:74:aa:07:78:3d:6c:a2:cb:67:3c:02:1b:c6:
53:6d:9d:f9:b8:9f:a5:a6:48:bf:1c:64:8f:40:12:
5e:d5:0c:37:3a:e6:62:d1:bf:16:5a:28:c0:3f:c2:
e9:23:53:3a:68:84:80:13:8e:63:c4:b8:96:cd:11:
67:ab:38:54:da:4c:17:c4:38:54:d5:2f:f8:c5:2c:
97:d2:37:fc:4f:53:f9:bc:7c:01:39:77:c9:ea:99:
db:cb:bf:d5:21:9c:1d:f2:f5:5c:1e:00:56:d7:23:
96:de:60:e4:ef:9a:ba:8c:66:72:b8:e9:11:1e:e3:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CB:EB:3D:62:9C:08:2E:4D:33:CC:AF:46:7C:F1:B1:49:DB:48:25
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CsvrPWKcCC5NM8yvRnzxsUnbSCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.21.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b8:b8:d6:76:8d:2c:6b:c2:f2:96:f6:b9:68:7e:43:d6:7c:
95:21:ee:79:d8:33:39:cf:44:7e:d0:04:73:b0:84:b7:a0:65:
98:b5:36:3d:b3:bd:95:1a:69:cc:33:ac:79:67:94:bf:09:c7:
55:b5:d3:70:52:3f:3f:50:dc:ef:7c:fc:7e:43:1a:a8:b3:76:
79:d5:f1:fa:94:d4:35:da:2a:51:89:39:6a:6a:58:07:85:c4:
fd:25:67:a4:04:1f:67:62:bd:5b:10:bd:ff:32:5b:76:d3:8f:
78:5b:3f:02:4e:3e:a7:4f:67:3f:6a:05:ae:60:93:ba:4f:2c:
4d:80:ca:c7:d8:14:e4:ab:8e:53:db:12:61:99:14:56:ea:38:
99:ae:87:c5:02:71:19:d7:69:5f:45:41:c7:14:f7:12:44:33:
f9:a6:66:64:49:18:1c:12:1a:3f:f9:c6:48:4f:10:db:ae:50:
d0:1f:2b:22:86:ad:63:18:2b:2e:f8:ca:fd:0b:c5:85:3f:65:
d4:bb:c8:10:9b:c7:27:41:2b:dd:ea:4f:ac:21:9c:40:66:84:
c0:de:9e:8b:bf:67:09:29:f0:de:ec:eb:e1:b1:a2:3f:78:c1:
39:47:eb:af:8a:97:9e:c8:f2:a9:27:c6:2d:88:fc:bb:4a:f2:
27:02:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:35 2025 by rpki-client