Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Cubzd7YccnPLiUsw7GOeQhw4Ll0.roa
File: Cubzd7YccnPLiUsw7GOeQhw4Ll0.roa (raw, json)
Hash identifier: QZhTYj8yMOqIbUYt/ZEU9/gi07eeapZAOFh6JREw2XU=
Subject key identifier: 0A:E6:F3:77:B6:1C:72:73:CB:89:4B:30:EC:63:9E:42:1C:38:2E:5D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748734B9807B7EFD82D63E1BE8A45C9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Cubzd7YccnPLiUsw7GOeQhw4Ll0.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205078
IP address blocks: 193.180.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:73:4b:98:07:b7:ef:d8:2d:63:e1:be:8a:45:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ae6f377b61c7273cb894b30ec639e421c382e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:66:28:c7:5b:81:67:46:37:00:07:d1:d9:
39:c1:fa:a2:e8:f8:ac:92:59:ea:86:f2:19:4c:22:
46:8f:69:7c:30:5f:3d:33:49:22:b3:9f:c7:67:8f:
00:4e:3d:08:43:a0:d4:30:2d:9c:3e:ad:d1:ae:93:
b0:6f:c6:4f:cd:4a:a1:a1:de:60:85:5d:6e:38:6a:
09:ba:a1:a4:89:77:1a:b6:10:f2:7f:99:6c:47:a0:
a2:8c:7d:bd:a3:2f:0c:d0:00:92:a1:a9:c3:af:dd:
bb:22:9c:e3:79:dc:b2:0d:69:ea:88:6f:bd:6b:f9:
39:f4:cb:64:73:df:33:e5:29:a4:c4:89:2d:9e:67:
cb:62:95:7c:5d:1b:70:34:1d:bd:c6:5a:f8:e3:62:
08:21:73:ee:4e:d0:9f:63:bd:48:5e:aa:3e:3f:d6:
f9:a1:bf:f2:1f:80:ca:13:25:f5:c7:5c:0b:f7:de:
ff:78:05:31:de:3e:df:ec:76:fa:49:4c:e6:ac:b5:
6d:1d:d8:82:ba:d2:9c:c7:83:b1:d6:ac:2c:38:ca:
f8:69:10:31:27:78:27:6e:e7:69:78:4b:e9:a1:25:
72:4f:78:63:f9:4c:fe:56:5a:b0:b6:0e:1e:05:69:
c6:dd:fb:0c:b1:46:2f:3a:04:17:7d:ac:cb:c6:e4:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E6:F3:77:B6:1C:72:73:CB:89:4B:30:EC:63:9E:42:1C:38:2E:5D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Cubzd7YccnPLiUsw7GOeQhw4Ll0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.63.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a6:4f:93:fa:48:35:36:1c:53:79:0d:6e:da:b0:d6:8f:c4:
17:f2:f9:6c:3c:48:4a:ff:d7:6b:70:f3:08:96:0f:2a:19:57:
10:85:3d:fc:03:86:8a:2d:e9:6c:c4:3b:a8:4a:f2:f3:08:60:
11:b5:bc:c0:4c:10:dc:5e:8a:e4:87:2f:57:f0:08:df:35:13:
3c:14:dc:e6:1e:52:79:f6:9f:23:0c:d4:d4:ac:5a:8c:17:44:
88:85:c3:9a:5a:aa:a0:09:3e:b9:c6:97:3a:15:9a:b7:40:16:
9d:9e:ee:49:f8:87:4e:c0:61:2e:b7:35:bd:48:34:af:bf:b2:
04:b7:8f:66:ba:03:be:e3:9c:58:8e:c5:95:91:14:1d:fe:87:
52:ad:28:fe:32:95:e4:03:43:82:5e:5e:c2:a6:c5:08:57:4e:
77:03:52:08:09:31:e2:e1:71:f7:b8:4b:96:a8:c8:c3:b4:f8:
6e:d2:7b:43:5d:49:dc:81:b7:d7:77:52:a5:dd:8e:f9:08:7e:
e6:8d:d7:0e:17:8f:9b:26:f9:8f:f8:c1:64:c0:99:80:f9:c1:
24:92:af:a6:a8:7b:a5:fa:36:23:80:8c:8b:62:f2:a2:84:5e:
87:a6:3e:ca:02:03:cd:68:09:03:92:7b:56:46:b9:8b:cf:af:
b3:23:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:39 2025 by rpki-client