Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/CoN_cVEv7e9K0df7Q4rij00d3AY.roa
File: CoN_cVEv7e9K0df7Q4rij00d3AY.roa (raw, json)
Hash identifier: nLUV7SiGSf9BwhbLu5qkObc6oFZ0OGhfHHMGs29yiPg=
Subject key identifier: 0A:83:7F:71:51:2F:ED:EF:4A:D1:D7:FB:43:8A:E2:8F:4D:1D:DC:06
Certificate issuer: /CN=bb376d0c9bef6b098fa63140bcc40d83d76bd549
Certificate serial: 0185714C3B25F1C8D691B666CF4A8020DF36
Authority key identifier: BB:37:6D:0C:9B:EF:6B:09:8F:A6:31:40:BC:C4:0D:83:D7:6B:D5:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzdtDJvvawmPpjFAvMQNg9dr1Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/CoN_cVEv7e9K0df7Q4rij00d3AY.roa
Signing time: Mon 02 Jan 2023 07:04:59 +0000
ROA not before: Mon 02 Jan 2023 07:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211114
IP address blocks: 194.169.120.0/24 maxlen: 24
185.235.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:3b:25:f1:c8:d6:91:b6:66:cf:4a:80:20:df:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb376d0c9bef6b098fa63140bcc40d83d76bd549
Validity
Not Before: Jan 2 07:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a837f71512fedef4ad1d7fb438ae28f4d1ddc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:43:a4:76:66:c1:e5:fe:f6:0c:f3:7c:e0:
27:b7:29:4f:1f:2c:91:db:de:b8:7f:46:c6:28:ff:
0c:8b:e4:1f:9c:12:5d:6d:10:72:68:0a:30:be:21:
dd:9c:14:99:8e:36:5c:da:2c:e9:ae:65:98:e6:1f:
77:a8:cd:dd:b1:13:38:e5:6b:ed:00:96:f0:d3:e7:
5f:b5:5e:ca:b5:8e:f4:36:e9:45:c0:e2:0f:15:db:
63:c3:11:a4:16:e3:5f:f0:1c:ee:3b:f8:99:a6:a6:
72:cc:df:25:c1:e2:81:10:6e:8e:fd:de:6f:30:5b:
f1:d7:24:39:a0:0c:43:6f:7f:78:01:50:78:d6:b9:
37:08:2c:ef:0d:f3:b5:78:98:e9:5a:4b:ad:c6:90:
d5:5a:d3:24:98:d4:ce:9e:a8:45:5b:4e:96:ee:a1:
ac:97:53:e5:d6:9f:da:84:c8:39:e2:6d:aa:a9:10:
4f:d5:47:26:5a:c6:65:02:dd:07:4d:76:fb:b8:80:
da:9e:68:a9:e8:f4:4c:14:3e:6f:27:5c:91:3e:30:
cc:8e:c4:2d:00:4b:d3:a9:da:b8:b0:1a:b5:ae:fd:
6a:4f:60:ef:7c:73:48:66:47:c7:3a:06:7e:92:cc:
12:ea:52:d4:bc:4e:78:cd:30:87:00:ba:12:74:dd:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:83:7F:71:51:2F:ED:EF:4A:D1:D7:FB:43:8A:E2:8F:4D:1D:DC:06
X509v3 Authority Key Identifier:
keyid:BB:37:6D:0C:9B:EF:6B:09:8F:A6:31:40:BC:C4:0D:83:D7:6B:D5:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzdtDJvvawmPpjFAvMQNg9dr1Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/CoN_cVEv7e9K0df7Q4rij00d3AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/uzdtDJvvawmPpjFAvMQNg9dr1Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.77.0/24
194.169.120.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:ef:8b:bb:d9:55:32:ea:05:bd:40:e3:f8:cb:7e:bd:11:1c:
6b:7d:20:ae:eb:3e:4e:6d:3c:45:b8:22:ab:62:16:db:1e:eb:
35:ba:ea:4d:50:27:37:52:bf:63:0a:c3:f1:77:09:55:78:ee:
f7:77:ca:d1:ae:dd:ed:4a:99:02:01:6f:2d:9e:e5:24:47:15:
3b:06:1c:80:1c:ca:2c:04:9b:b0:3c:b0:1b:fb:58:4d:d2:fd:
98:96:5e:36:b5:37:05:7d:1c:58:62:88:6b:0e:d1:80:1c:fb:
ee:cb:20:c5:4e:56:a2:36:f8:c3:b7:22:16:43:04:49:42:75:
9d:ff:d1:aa:a2:de:a9:93:09:a6:7f:23:f1:16:61:d5:8d:f4:
6e:a3:55:3c:05:24:9c:ae:6c:e9:55:7a:48:9c:47:22:dc:6e:
fb:25:f1:56:95:b4:f6:80:88:01:20:c1:50:38:83:c9:fe:b9:
5b:8c:2f:f0:d6:0b:18:cf:04:f2:94:7e:91:9b:db:a0:2c:fa:
00:0a:e2:7f:10:e0:ce:09:79:0e:a6:ca:78:6a:64:07:bd:44:
a7:b4:22:f8:02:c5:e0:4d:f3:72:74:63:c7:72:21:fc:07:e7:
c4:12:57:a9:75:ee:e5:27:eb:22:e2:d1:7d:0a:32:b6:2c:94:
3c:0c:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:32 2025 by rpki-client