Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/CC2hAsaTX94OsKPmChtfbXTcFNE.roa
File: CC2hAsaTX94OsKPmChtfbXTcFNE.roa (raw, json)
Hash identifier: l5IYiZcm9PSDWMsJtwhQfhiyJDNyjG8wrsa+ZBwNb+0=
Subject key identifier: 08:2D:A1:02:C6:93:5F:DE:0E:B0:A3:E6:0A:1B:5F:6D:74:DC:14:D1
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 019426D945A41D1398E4E808FAE2982727A3
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/CC2hAsaTX94OsKPmChtfbXTcFNE.roa
Signing time: Thu 02 Jan 2025 11:49:20 +0000
ROA not before: Thu 02 Jan 2025 11:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64414
IP address blocks: 185.166.112.0/24 maxlen: 24
185.166.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:45:a4:1d:13:98:e4:e8:08:fa:e2:98:27:27:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=082da102c6935fde0eb0a3e60a1b5f6d74dc14d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:c4:b4:26:59:e6:4e:36:5f:1d:f6:dc:ac:
26:0d:62:94:ca:aa:ef:1e:f4:8d:96:2b:a5:d2:9d:
b2:5c:94:da:bd:97:24:bb:88:9e:c6:7d:b9:0c:fe:
6a:3a:28:84:8b:7c:54:67:59:9d:97:71:05:18:ad:
70:ac:43:96:75:c7:5b:7e:9f:71:b3:c1:a7:dd:c0:
8e:c4:32:45:05:c5:ff:d0:d8:ac:e1:47:a5:e7:d0:
11:8c:17:81:28:1c:2c:bc:82:84:05:62:65:10:1b:
d6:0e:09:8e:33:b6:57:56:01:97:e3:e9:da:86:0f:
e8:74:86:32:36:eb:54:43:3b:a5:4f:d3:e1:b0:36:
32:cb:62:d9:ee:f9:9e:1b:26:15:93:89:4d:3b:d6:
3a:32:5f:cd:2d:e2:3e:de:5d:20:e6:bb:43:26:61:
d6:e8:18:01:de:6c:0f:a2:15:24:6c:e7:ab:97:94:
61:66:d1:8a:7b:50:77:7c:43:24:33:36:36:03:5a:
69:9d:b6:56:63:77:7f:85:6d:6b:8b:7e:b1:f3:f7:
6c:3f:1e:ca:eb:94:9d:a6:ab:38:df:54:35:89:86:
83:c2:a7:c0:f0:df:80:84:78:f2:fa:4b:9f:33:b1:
ab:81:ac:24:89:58:95:f1:d6:1d:f2:03:dd:d0:46:
53:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2D:A1:02:C6:93:5F:DE:0E:B0:A3:E6:0A:1B:5F:6D:74:DC:14:D1
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/CC2hAsaTX94OsKPmChtfbXTcFNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.112.0/24
185.166.114.0/24
Signature Algorithm: sha256WithRSAEncryption
18:38:75:07:64:0c:b9:58:b9:57:57:cf:b4:f6:37:31:53:bd:
9e:b0:da:c2:c4:7d:eb:87:c0:67:d7:5b:58:be:4a:31:c4:42:
6a:ca:f1:bf:eb:1e:4b:7b:b6:69:35:0b:91:5b:14:62:9a:51:
35:e3:ba:42:34:ce:ff:f9:7a:da:c1:d9:b6:24:fa:b9:a6:2e:
55:13:38:25:4c:ec:d4:59:2c:18:63:58:d4:0d:49:9c:0a:04:
c9:42:f4:cd:0f:f1:71:9b:d2:1c:eb:48:44:e8:97:96:0c:28:
d3:c2:0e:a0:f4:e3:33:5b:87:af:d3:50:66:64:64:4f:70:b0:
53:31:b7:39:4e:4d:af:17:e5:55:87:6a:a0:f4:6c:18:8e:b3:
9b:0d:e3:6b:fb:36:76:58:d6:08:e2:7a:7f:0f:fe:0b:78:29:
50:9c:72:8c:9d:ae:56:45:dc:c9:7f:4d:d5:3e:bb:84:db:33:
2a:29:93:c8:8a:a6:fb:4c:fd:a8:76:5c:db:97:a5:f6:19:f0:
23:df:0d:c4:af:7e:94:43:b9:cb:d5:62:53:2b:a3:77:89:ae:
6f:aa:32:ad:02:a5:55:6a:72:b1:bc:d4:1f:6c:63:52:1f:46:
bc:d7:4f:f1:d5:30:55:4d:a4:3e:93:48:be:78:14:ea:0d:67:
24:96:5e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:22 2025 by rpki-client