Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/CB9ROrHi0SmgTFo1HGdkP2qVYvw.roa
File: CB9ROrHi0SmgTFo1HGdkP2qVYvw.roa (raw, json)
Hash identifier: 5PW7Y2QJsD9xZvGASqZNpKAYc9eg+fZGpAzLuRp9uw0=
Subject key identifier: 08:1F:51:3A:B1:E2:D1:29:A0:4C:5A:35:1C:67:64:3F:6A:95:62:FC
Certificate issuer: /CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Certificate serial: 0107A1C8
Authority key identifier: 46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/CB9ROrHi0SmgTFo1HGdkP2qVYvw.roa
Signing time: Thu 12 May 2022 09:56:02 +0000
ROA not before: Thu 12 May 2022 09:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28721
IP address blocks: 185.88.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17277384 (0x107a1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb3b3b579c90b4b996a7fe40f20503913a25cf
Validity
Not Before: May 12 09:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=081f513ab1e2d129a04c5a351c67643f6a9562fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:cc:3c:7d:9d:35:45:40:a3:f5:03:ee:11:
63:6b:4f:79:00:d5:6e:7f:09:f2:47:5c:d7:49:92:
ea:b5:c4:1a:1a:eb:2d:4c:a5:e9:96:4e:ac:52:55:
b9:49:ed:bb:18:bd:26:05:21:9e:92:44:85:61:7c:
c4:ac:5e:19:08:bd:92:63:7f:ec:2d:78:64:2a:6e:
8b:fb:a0:3b:db:c0:d1:01:52:bb:b7:4c:4e:b4:39:
68:b6:77:70:a9:b8:9e:d1:b1:ec:51:bd:04:4c:74:
5c:71:9f:c7:b8:4a:bf:17:5c:10:4d:26:e3:55:39:
78:ec:b2:22:3b:47:d3:f1:27:54:a2:09:25:02:ea:
54:19:2c:8d:aa:85:a5:54:46:1e:f1:2b:90:68:1e:
ba:37:e1:9e:ad:49:88:e2:c6:5c:4a:5e:eb:b8:18:
02:0f:d6:a2:39:ca:b2:44:e6:e4:c7:3d:d0:af:71:
46:e3:14:62:ca:6e:7c:d7:d8:9f:da:b7:8a:68:3f:
28:23:13:aa:b6:81:c8:78:f0:df:3b:73:3c:e2:b0:
94:e6:94:76:47:37:d3:c2:74:4f:83:bb:0e:ba:f4:
e3:49:a6:d4:0f:f8:54:bf:64:cb:a3:c1:27:20:26:
bd:e6:b8:48:ef:86:35:d9:47:5f:13:29:74:71:8a:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1F:51:3A:B1:E2:D1:29:A0:4C:5A:35:1C:67:64:3F:6A:95:62:FC
X509v3 Authority Key Identifier:
keyid:46:EB:3B:3B:57:9C:90:B4:B9:96:A7:FE:40:F2:05:03:91:3A:25:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rus7O1eckLS5lqf-QPIFA5E6Jc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/CB9ROrHi0SmgTFo1HGdkP2qVYvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a6ad9f-8d69-46ea-bd7c-32b150f8e61f/1/Rus7O1eckLS5lqf-QPIFA5E6Jc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.130.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1b:70:8a:c3:dd:f2:45:7f:51:38:f6:c3:33:07:3e:6b:fc:
5c:36:2c:d8:b1:2f:7e:7c:f7:bd:07:99:e4:02:45:cf:4a:53:
0c:2e:b3:a6:6d:51:d3:3f:05:16:6e:c7:43:e9:ba:67:2d:52:
62:61:ba:cd:3c:bb:ee:99:72:39:40:c0:1a:3b:3d:1c:7e:1e:
c1:6c:9f:28:b8:76:a1:f3:c6:4f:42:f8:31:20:02:d0:ce:28:
03:84:47:c7:43:cb:70:50:0a:53:5d:d9:9d:b5:5f:14:a2:37:
5b:d9:9e:37:a2:07:22:c7:21:d2:7c:7f:89:12:a4:51:64:71:
1e:1d:b9:c6:be:52:af:52:fd:04:7b:83:3f:ca:14:5b:68:a2:
12:3c:85:01:72:6a:52:81:56:cc:2b:12:ed:2b:bd:8c:59:be:
67:ed:85:29:92:fc:12:3d:93:01:f6:41:31:3e:a5:1c:c9:16:
f4:f7:e7:7e:12:65:cf:ac:de:8b:be:26:b3:b9:ca:f9:ce:d6:
a7:90:b2:2b:0a:9b:87:21:13:73:d1:83:73:d2:09:0d:ad:d2:
df:20:f3:a6:d7:25:52:07:80:30:90:1f:cc:cb:9e:b4:24:48:
f5:7f:8c:b9:79:93:36:92:a1:36:d2:a1:b1:e0:f3:c5:0a:f4:
a8:0b:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:47 2025 by rpki-client