Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/CL-hnZLAW32dB0McMUvKXumHbjc.roa
File: CL-hnZLAW32dB0McMUvKXumHbjc.roa (raw, json)
Hash identifier: /6abOSVtqiSm907QP0eqatEoUJFnqFDpeoJMvvSk4WA=
Subject key identifier: 08:BF:A1:9D:92:C0:5B:7D:9D:07:43:1C:31:4B:CA:5E:E9:87:6E:37
Certificate issuer: /CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Certificate serial: 019428233F558A26A8D140FAC79A54571499
Authority key identifier: C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/CL-hnZLAW32dB0McMUvKXumHbjc.roa
Signing time: Thu 02 Jan 2025 17:49:46 +0000
ROA not before: Thu 02 Jan 2025 17:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51529
IP address blocks: 194.0.238.0/24 maxlen: 24
194.165.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:3f:55:8a:26:a8:d1:40:fa:c7:9a:54:57:14:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Validity
Not Before: Jan 2 17:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08bfa19d92c05b7d9d07431c314bca5ee9876e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:14:39:e0:77:76:bc:c1:a3:25:18:0c:2a:
6c:3c:ff:d8:3c:d4:2e:cd:57:2c:7d:58:ac:83:fc:
72:5b:47:00:38:9d:7c:9b:c7:d7:88:38:f9:e1:52:
00:a8:89:86:f3:f0:34:8a:2c:fd:95:0d:e7:69:66:
d1:49:36:30:7b:00:b9:da:e7:fd:0e:ba:d9:b6:d7:
19:64:9f:55:ca:75:ca:8f:86:1e:0b:a5:bc:f2:fa:
43:29:3a:a0:b2:ac:f2:a4:bb:61:75:00:67:84:ab:
4b:dc:c9:41:7e:24:dd:5d:33:32:ac:73:e0:aa:86:
34:09:39:3f:12:d0:17:d3:8b:c6:d7:a9:dc:52:45:
80:d8:69:3c:40:d8:68:94:8e:05:75:d5:d3:33:36:
db:bb:64:1b:8e:5a:fd:01:b1:28:3f:9a:76:be:54:
ae:33:6a:24:d1:d2:fb:8f:7f:5c:97:4d:ee:99:ba:
40:b3:f1:44:4e:08:a0:7e:32:25:e5:9b:4f:37:d8:
c5:b9:40:d7:fc:88:1b:79:a7:6c:20:07:3c:55:57:
13:9c:7f:dc:6d:63:22:ff:7e:1b:9f:b9:00:34:66:
67:8c:92:d2:71:2e:f0:b2:14:09:f5:5c:8e:1a:ed:
c8:45:47:66:1b:b5:b2:d5:f4:a4:9f:d3:f1:e9:82:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BF:A1:9D:92:C0:5B:7D:9D:07:43:1C:31:4B:CA:5E:E9:87:6E:37
X509v3 Authority Key Identifier:
keyid:C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/CL-hnZLAW32dB0McMUvKXumHbjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.238.0/24
194.165.44.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:0c:89:52:84:30:6c:3f:92:c5:b7:3d:f6:51:e9:3e:cc:fe:
a2:d6:52:02:de:62:24:6c:f9:d0:e5:a7:48:1c:59:16:d7:00:
71:71:5c:7f:96:af:01:ca:da:4d:5a:34:c3:5a:b4:e5:94:26:
0f:05:e2:21:e7:db:ea:82:7a:4c:23:18:4b:b5:76:64:70:85:
cb:29:63:c8:00:d1:10:66:09:0e:71:27:48:6c:8b:05:03:9a:
c6:79:4f:01:32:82:3d:d3:a1:4e:47:42:72:26:a9:45:15:b1:
cc:48:f8:d1:a9:cd:59:26:03:c6:9b:dd:24:ad:41:6b:97:b6:
8a:e7:fd:b0:e8:d3:a2:7a:70:40:e4:99:27:b4:aa:6d:c6:ab:
cb:74:1a:14:e0:de:33:d5:4d:68:b8:77:79:62:78:6d:cb:cb:
ed:04:30:81:f9:32:b9:35:58:4c:b9:c4:a7:0b:7a:0f:d6:3b:
f6:54:a1:3a:90:43:b2:b1:ae:b5:09:2b:cb:65:8b:9b:c8:de:
ec:61:e8:12:3b:68:35:4b:2d:d2:b1:9d:1d:7d:8f:a0:1d:67:
e1:a3:9f:41:d1:9a:2c:27:e0:50:4d:b6:a5:d9:7c:36:db:c8:
16:7f:38:de:53:b7:d7:41:ca:a6:68:08:c1:5a:1e:b2:1e:1e:
8d:09:e9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:00 2025 by rpki-client