Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CDCGh_4nDdlYF4JkwawknevA2bA.roa
File: CDCGh_4nDdlYF4JkwawknevA2bA.roa (raw, json)
Hash identifier: pPOt92oDGaIivwln/wUHKowEHwhob9anT4pa1EwgvVc=
Subject key identifier: 08:30:86:87:FE:27:0D:D9:58:17:82:64:C1:AC:24:9D:EB:C0:D9:B0
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A56E3901979F5D235B4BFC57F74B6
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CDCGh_4nDdlYF4JkwawknevA2bA.roa
Signing time: Wed 01 Jan 2025 19:49:19 +0000
ROA not before: Wed 01 Jan 2025 19:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212757
IP address blocks: 94.199.103.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:56:e3:90:19:79:f5:d2:35:b4:bf:c5:7f:74:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08308687fe270dd958178264c1ac249debc0d9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a4:72:87:f5:40:f2:9b:3d:39:53:1c:b2:1e:
8e:db:ef:00:5f:ce:cc:b9:4e:41:f1:c6:05:61:cb:
7e:c6:ed:df:e8:f1:33:61:ab:15:ec:d6:fa:b2:58:
cd:83:f5:1f:4c:a1:a9:ac:a6:b7:de:c8:2d:36:28:
a9:87:88:cc:41:0e:f9:a5:06:03:d5:7a:aa:cf:e1:
ee:9e:f3:b2:6b:02:59:c6:12:e9:f4:b7:89:6f:9f:
b6:1d:bb:a6:f7:ad:84:30:ed:77:f5:51:14:e3:4b:
3e:ae:40:c8:9e:54:ad:20:f1:23:ea:92:e9:96:ac:
a7:5a:4d:24:68:0d:b2:de:04:cf:f7:48:ad:ef:4b:
ff:96:25:0a:49:a8:a7:d0:28:7b:d9:9f:8a:81:e7:
15:29:39:d7:b1:46:c5:a9:a6:80:5b:74:b3:c4:ad:
30:1f:19:1c:4e:9e:6c:d3:0c:30:8a:2c:ed:56:4f:
d8:31:2e:65:d6:ac:e1:a8:74:9a:af:25:dc:40:ec:
9c:6c:0a:a5:e8:ef:da:91:63:77:95:ee:43:5e:17:
b8:66:5a:bf:3f:05:3a:37:e4:58:17:b3:6c:b7:c4:
e8:60:31:70:c8:3e:d9:34:f7:5c:82:0a:5e:19:a1:
fc:58:5f:86:ff:a6:38:95:4e:d2:f9:eb:73:8c:0f:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:30:86:87:FE:27:0D:D9:58:17:82:64:C1:AC:24:9D:EB:C0:D9:B0
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CDCGh_4nDdlYF4JkwawknevA2bA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.103.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:92:50:92:4e:9c:97:12:38:99:a8:36:9f:fc:f8:0c:3e:84:
22:ba:2b:54:c5:32:6b:16:24:2d:1e:e9:f1:ab:a9:5b:5e:f4:
60:2a:a3:eb:f1:02:7b:df:d2:d8:cd:3c:bd:57:73:16:dd:2f:
07:97:80:b0:71:4b:29:88:08:b8:96:7a:92:db:7c:90:39:f0:
07:4a:4a:24:41:f9:39:a1:0d:e1:0e:60:b8:90:86:24:8d:2d:
7f:72:8f:a5:90:2a:2d:67:5f:ee:d5:eb:4a:50:d4:1c:09:7f:
97:0c:34:73:1c:e6:1a:7f:91:83:9f:86:91:b9:0f:fb:96:ba:
84:eb:ff:83:ea:a5:65:aa:be:5a:73:70:03:28:b9:34:26:b8:
c9:fd:15:7b:cd:c9:55:45:59:92:a3:20:c9:f2:be:50:ca:3f:
29:06:71:2b:48:cb:4e:09:97:c6:20:34:e6:9a:f4:7a:bf:cd:
b6:66:48:7c:e7:fe:ae:d7:e4:c3:31:7c:7c:cf:c1:a4:cb:e3:
b9:07:4d:50:3a:4c:4c:9f:91:65:83:40:2c:24:c5:8c:ad:0a:
ff:0c:a0:3c:e2:e8:de:8e:09:be:13:2c:58:0b:f0:81:45:b1:
64:8b:79:e0:90:8d:14:69:6f:69:14:6e:05:35:00:08:6f:32:
17:f3:ca:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:19 2025 by rpki-client