Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0cJTt5NyhoOBS009_6NEAF5GQCA.roa
File: 0cJTt5NyhoOBS009_6NEAF5GQCA.roa (raw, json)
Hash identifier: SiyFaMeFoXRZqs5GI++Cwo7/66QHORHmob8uLX357nc=
Subject key identifier: D1:C2:53:B7:93:72:86:83:81:4B:4D:3D:FF:A3:44:00:5E:46:40:20
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428245FAB48D1555342D1195C96360B7C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0cJTt5NyhoOBS009_6NEAF5GQCA.roa
Signing time: Thu 02 Jan 2025 17:50:59 +0000
ROA not before: Thu 02 Jan 2025 17:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.216.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:5f:ab:48:d1:55:53:42:d1:19:5c:96:36:0b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1c253b793728683814b4d3dffa344005e464020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:9b:88:b1:ce:57:28:93:cd:1a:af:12:98:
5a:b3:f1:f5:ca:34:0b:a7:7d:f8:2b:cf:bd:b9:f3:
ad:8d:8b:68:38:bf:fe:47:d1:e6:72:5a:85:d9:12:
61:18:13:91:e9:d3:2e:5a:e0:41:20:4e:ca:9b:ee:
a9:6a:0c:e6:3a:21:45:11:7e:1a:d3:83:16:45:68:
3a:03:21:0e:76:d9:df:5b:12:a4:29:d1:09:40:4a:
a5:7f:78:05:c0:28:e0:e3:e5:39:3c:08:58:be:f2:
d0:f4:6f:d5:1b:2c:02:b4:9c:ff:1f:9d:47:5d:7a:
ec:ab:9d:50:41:3f:2c:82:df:c5:22:98:40:08:e7:
cf:64:c8:7f:b5:1f:9c:e8:97:92:ec:10:73:fc:3e:
8c:e5:a7:d5:6f:00:94:69:23:7d:52:39:a2:2b:ff:
c9:5c:ee:a3:57:de:6d:54:14:bd:9f:cd:b1:bb:b1:
75:e8:2d:e1:44:73:e4:a4:7a:bd:d9:28:7b:28:8a:
99:3e:c7:76:22:6c:d4:92:21:74:33:2a:6b:d9:7f:
e3:30:6d:d2:e0:9d:5f:66:12:27:7f:18:ff:56:1c:
6c:e1:39:5a:47:a1:87:50:aa:b9:bc:4b:ae:73:79:
d8:ca:21:ae:21:b1:88:fb:c0:bd:b8:5c:6b:d8:a5:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C2:53:B7:93:72:86:83:81:4B:4D:3D:FF:A3:44:00:5E:46:40:20
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0cJTt5NyhoOBS009_6NEAF5GQCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.70.0/24
Signature Algorithm: sha256WithRSAEncryption
25:07:13:e1:92:ab:b9:bb:7a:9c:0e:34:cf:5f:34:b5:0e:a4:
0d:fa:0f:1d:5e:f9:95:4e:fd:47:0d:57:da:eb:12:b3:71:4c:
8a:b3:9a:79:ba:73:c2:ef:a5:bd:32:c5:35:77:52:66:50:9d:
3b:c1:d8:dc:af:16:50:f9:f3:c5:8f:19:be:76:6b:e8:55:19:
5b:9a:a9:3f:9b:dc:b8:39:e4:2d:b8:d6:b1:20:00:73:dc:f3:
f4:2b:37:7b:aa:c3:76:1d:61:42:40:ad:f7:46:b0:bf:d4:b7:
7f:70:89:ab:d5:2d:6b:5e:12:a5:93:fa:db:b2:66:12:a2:b7:
f2:c1:68:ca:97:d7:ac:11:fe:1a:45:9e:94:c4:1e:08:47:86:
ac:f6:75:f6:00:58:0a:64:fa:95:6e:c6:dd:c2:d1:37:16:75:
92:c5:97:d6:09:e3:ad:60:0c:b9:d2:86:72:91:4c:52:44:12:
52:dc:cc:ce:4a:15:10:f0:5c:f8:0b:3a:08:74:78:29:7a:c7:
a8:82:bb:ef:f2:55:c9:30:91:cc:47:61:16:20:43:94:d7:22:
87:1a:05:91:2b:6e:c1:b9:4b:49:d5:ef:99:aa:28:84:58:11:
3c:00:63:27:b1:58:ff:80:dc:40:12:6f:4e:91:16:07:e5:74:
2e:a2:7d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:10 2025 by rpki-client