Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/c_zOfM7vLQJCIH9ZtTubpG60GUI.roa
File: c_zOfM7vLQJCIH9ZtTubpG60GUI.roa (raw, json)
Hash identifier: PR+2Ofr0AqtJDndUiUP4vY2xuU8uzBfHcV/JcyjNBZU=
Subject key identifier: 73:FC:CE:7C:CE:EF:2D:02:42:20:7F:59:B5:3B:9B:A4:6E:B4:19:42
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 019425FCC2E7139733E4E6C734416055F45B
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/c_zOfM7vLQJCIH9ZtTubpG60GUI.roa
Signing time: Thu 02 Jan 2025 07:48:29 +0000
ROA not before: Thu 02 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 193.36.179.0/24 maxlen: 24
193.36.185.0/24 maxlen: 24
193.36.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:c2:e7:13:97:33:e4:e6:c7:34:41:60:55:f4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Jan 2 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73fcce7cceef2d0242207f59b53b9ba46eb41942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:56:57:af:dc:f1:7e:98:b9:ff:45:9d:b4:
61:a1:81:79:af:eb:ad:f1:77:4c:a8:3c:4f:ed:fd:
30:7a:66:3e:79:37:e0:5a:6c:3a:00:9f:aa:e6:d2:
83:86:36:45:eb:09:12:03:f9:54:67:aa:a7:42:ed:
0e:bc:e7:e9:b1:a1:76:f6:68:19:1a:e9:9f:09:60:
98:fa:fe:0c:4e:91:c2:a2:29:a9:b8:f7:86:8e:9a:
24:71:6d:36:9c:55:85:cc:13:8f:4b:0e:6d:ba:06:
86:90:9f:ba:52:ca:ef:41:75:1f:a2:00:9b:1a:6d:
0f:8b:1d:25:4f:7c:cb:e1:7b:cb:c2:49:ac:9a:29:
8e:9b:3d:61:83:c7:64:5f:45:02:5b:58:ae:76:f2:
c6:53:58:cb:8c:22:77:91:6c:da:22:a4:2c:30:cf:
3f:e6:07:77:bb:15:c6:8e:94:ad:2a:98:3d:3d:da:
b8:cf:16:77:7d:5d:00:81:45:ea:ae:c8:2c:c7:c8:
29:b3:16:ec:c8:d1:db:5e:4e:bd:c5:7c:8d:b8:d0:
99:76:43:87:c3:8c:9a:f3:e4:c3:63:e3:7a:e1:f8:
99:1f:96:83:2c:1a:9d:e5:20:2b:5e:69:15:2e:19:
76:25:fa:dd:1d:b9:55:9b:6a:1a:68:3c:d2:86:85:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FC:CE:7C:CE:EF:2D:02:42:20:7F:59:B5:3B:9B:A4:6E:B4:19:42
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/c_zOfM7vLQJCIH9ZtTubpG60GUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.179.0/24
193.36.185.0/24
193.36.187.0/24
Signature Algorithm: sha256WithRSAEncryption
56:12:b3:8f:8f:b1:d8:57:a3:f8:66:da:4e:eb:d2:1e:68:0d:
f2:3a:31:67:7f:74:90:52:63:d1:4a:62:0a:6a:ce:71:0e:d6:
75:4d:d0:4e:33:55:76:23:37:8d:a8:60:ec:92:28:32:0d:46:
7f:ac:4c:e3:8c:6b:d5:6d:fa:25:9f:2a:01:ea:3f:fe:4a:e5:
09:10:bd:10:0d:bf:92:06:c7:85:7c:2f:e9:58:f3:6b:5d:c3:
05:03:e4:7c:b8:8a:14:15:84:b6:a4:25:ea:b0:c4:24:4d:2f:
02:c3:59:91:5f:fd:5e:21:da:9e:38:3e:64:54:07:d8:9d:1d:
6c:52:5a:59:68:bf:71:6f:b7:3c:b8:35:2e:ce:91:83:c9:42:
bf:99:08:7f:f6:26:88:20:1a:b8:88:35:79:83:ba:d2:6f:7d:
15:11:bb:b0:15:a8:85:70:4e:68:1e:ee:82:80:69:7c:e8:d3:
ac:a1:e8:71:54:b6:c7:87:e2:9c:18:c8:3a:50:55:a7:96:1d:
f2:c2:fd:ee:e9:ac:b0:63:b6:27:a9:58:5e:cc:c5:fa:27:6d:
16:2f:f8:5f:66:79:12:3e:f6:dd:e8:57:59:34:53:1d:cb:04:
9f:6d:7d:02:28:f1:e8:e3:ba:06:2b:d2:2a:4a:3b:e2:07:80:
db:a9:76:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:15 2025 by rpki-client