Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/C8on01Bgko2Wx9jKjMpn7FCShCI.roa
File: C8on01Bgko2Wx9jKjMpn7FCShCI.roa (raw, json)
Hash identifier: NvYVpYNTacJm9Dvti1H+p4nGJK6g8JeQhPdSMYmd5BQ=
Subject key identifier: 0B:CA:27:D3:50:60:92:8D:96:C7:D8:CA:8C:CA:67:EC:50:92:84:22
Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial: 01942521A5101CAF9446D30435C82F4E5F7A
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/C8on01Bgko2Wx9jKjMpn7FCShCI.roa
Signing time: Thu 02 Jan 2025 03:49:09 +0000
ROA not before: Thu 02 Jan 2025 03:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205451
IP address blocks: 185.117.112.0/22 maxlen: 22
195.47.232.0/24 maxlen: 24
2a0c:3180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a5:10:1c:af:94:46:d3:04:35:c8:2f:4e:5f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Validity
Not Before: Jan 2 03:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bca27d35060928d96c7d8ca8cca67ec50928422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:73:2f:8a:40:80:89:44:d5:58:5d:e8:c9:
77:2c:c1:2b:54:ab:c1:4c:65:ce:45:6e:34:36:11:
5b:2d:aa:8f:b8:a7:c4:0d:a1:ac:a9:a7:64:27:ee:
05:ec:47:fa:14:2b:ec:58:cb:da:d8:52:21:be:b1:
ca:eb:cf:4b:7f:50:c3:8f:92:73:8c:fb:4b:f5:a3:
70:d6:05:18:d4:92:7c:7a:08:06:1f:be:1a:9b:7a:
ce:61:31:10:2d:29:19:c6:0f:06:09:31:10:94:1d:
c9:99:80:f9:b5:63:07:60:3b:bf:d5:70:6a:0f:58:
b3:96:66:04:ed:41:0e:97:3d:d5:c4:2f:93:33:c1:
bc:b2:ad:72:87:3e:9e:45:3b:40:06:aa:32:0c:88:
21:8a:99:19:ec:3a:0e:be:54:ac:61:42:27:c1:28:
dd:b7:b6:4d:60:1b:77:8c:03:c2:a7:9c:ab:da:b3:
ac:a0:56:90:b2:04:ab:1b:8e:95:ef:6c:b2:27:08:
de:69:9c:b9:df:56:b7:11:f1:4a:1b:14:c9:d1:3b:
28:63:5a:ab:db:f4:9b:a3:ab:4f:74:cc:cf:48:b4:
b4:43:90:2f:9d:6e:48:f7:8c:c2:61:4f:25:56:1f:
81:a8:6f:39:40:57:7e:b6:aa:a9:67:87:c2:e8:c7:
21:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CA:27:D3:50:60:92:8D:96:C7:D8:CA:8C:CA:67:EC:50:92:84:22
X509v3 Authority Key Identifier:
keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/C8on01Bgko2Wx9jKjMpn7FCShCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.112.0/22
195.47.232.0/24
IPv6:
2a0c:3180::/32
Signature Algorithm: sha256WithRSAEncryption
17:45:dd:4c:b0:47:d1:b5:ba:96:dd:33:9f:5e:20:3a:66:75:
db:6d:f2:91:ec:60:af:8e:c0:73:a4:79:64:af:9c:58:51:05:
d6:d2:20:6f:c8:cb:83:6a:f9:f0:6e:bb:22:15:96:c4:d1:6f:
95:e0:4e:c0:b1:79:a7:06:bd:b8:0b:d2:21:78:41:1c:72:19:
79:d8:40:c1:77:95:95:e3:3a:88:f5:07:14:d2:1d:94:b0:17:
37:3d:9d:92:94:41:99:bf:9b:60:94:80:e0:4d:f4:16:b9:76:
3b:80:d3:11:5b:38:a4:b7:7b:15:bc:51:11:1e:b1:55:7b:6b:
cf:42:c6:10:c5:7f:1d:5f:0d:e6:ab:d2:94:ce:35:a4:c2:34:
50:2a:13:b9:f9:e2:f3:25:3d:39:b3:36:53:ee:30:27:8d:e2:
34:e3:82:35:b2:29:61:3c:fe:45:99:e4:47:c8:eb:d1:ba:3f:
66:32:66:6a:a4:e7:a4:70:78:2e:fe:ee:61:86:67:46:38:65:
25:54:e3:ae:c7:0a:1b:d3:95:a0:61:c7:b9:13:5f:8b:5d:b6:
f1:0e:7a:6e:2d:19:e1:1e:65:91:ec:aa:14:16:76:5c:3c:65:
47:bf:66:6f:af:ee:0a:1d:bc:28:31:d4:b8:f7:b0:55:3c:7a:
da:02:ec:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:53:13 2025 by rpki-client