Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/C3RhNI4vei9vXU8f0_IahSCPRnE.roa
File: C3RhNI4vei9vXU8f0_IahSCPRnE.roa (raw, json)
Hash identifier: vs0Au7u5G+Apq+/KnDsEAEa+xOgyE8YY5QoZS5n45sI=
Subject key identifier: 0B:74:61:34:8E:2F:7A:2F:6F:5D:4F:1F:D3:F2:1A:85:20:8F:46:71
Certificate issuer: /CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Certificate serial: 019420D5BC467E6C6FA4B8295120E4C7B76E
Authority key identifier: FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/C3RhNI4vei9vXU8f0_IahSCPRnE.roa
Signing time: Wed 01 Jan 2025 07:47:45 +0000
ROA not before: Wed 01 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5484
IP address blocks: 185.33.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:bc:46:7e:6c:6f:a4:b8:29:51:20:e4:c7:b7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Validity
Not Before: Jan 1 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b7461348e2f7a2f6f5d4f1fd3f21a85208f4671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:d9:dd:b3:17:64:eb:58:8e:e1:1f:15:b1:
62:f1:5f:6a:c1:09:7a:22:b1:6b:e3:62:91:17:32:
b4:64:be:82:cc:54:84:94:29:6b:1c:3c:a4:41:59:
20:a1:de:8a:fb:a1:e3:e9:04:08:28:3c:b3:2a:09:
82:4c:de:0e:9c:3c:03:e5:02:21:bf:11:7a:0f:ca:
ba:76:80:b5:95:ef:f5:7f:10:ad:36:43:54:17:49:
3a:a2:c2:ab:e8:d7:40:7d:3c:45:35:d8:98:3c:6a:
1b:9d:8c:a7:5f:e9:13:d6:0b:5d:6d:ba:e9:8e:f7:
b2:a3:4d:a5:f8:9c:fd:66:c9:53:96:ce:2f:64:36:
7c:33:94:87:fd:49:46:a9:26:4d:5f:34:bb:dc:6a:
52:fe:b1:59:96:ba:8d:06:3d:c0:b8:ce:b4:c1:41:
7c:f9:75:d5:42:8c:e6:f4:02:6b:6e:7c:a1:0e:2a:
99:e7:bd:8e:86:46:1d:c9:d0:9c:20:98:63:82:f9:
3f:9c:2f:1d:a8:eb:5d:4d:9a:94:62:fe:99:ad:27:
dc:8d:82:55:dd:a7:95:77:38:c3:f5:7f:58:e3:64:
38:ce:98:b7:86:4c:34:23:87:01:48:2f:84:ec:f5:
cf:ee:63:26:1a:e6:c9:29:18:16:a5:ed:22:65:17:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:74:61:34:8E:2F:7A:2F:6F:5D:4F:1F:D3:F2:1A:85:20:8F:46:71
X509v3 Authority Key Identifier:
keyid:FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/C3RhNI4vei9vXU8f0_IahSCPRnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.25.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f1:27:c2:7f:85:a5:29:2e:3a:30:bd:8e:80:1b:6c:70:e3:
35:15:b7:4c:f5:a5:dc:fa:e5:8e:98:e5:cc:c3:9d:13:90:0d:
8d:b2:9f:87:a5:ea:e4:1c:9f:47:dd:b3:94:2d:ba:e4:e3:c0:
92:34:2d:e1:3e:00:3f:f2:ee:b2:cd:cd:5e:cc:c0:ff:fb:e7:
22:7d:74:97:06:74:fc:11:1a:0d:d3:f6:10:1c:78:02:b5:d1:
51:23:4b:88:6e:ba:a4:73:e3:37:70:55:46:12:b4:40:f1:a0:
3a:fa:d7:92:21:bb:2f:3c:bb:ac:87:49:a3:a1:60:7b:48:74:
ce:d1:bd:dd:1a:47:49:77:a3:c6:63:7f:1f:d8:64:5d:cc:a7:
b2:2b:b0:39:22:37:47:4d:6a:24:1c:f3:98:d9:29:37:6e:bc:
c2:bc:81:7a:b3:c5:f7:f5:40:7c:34:bf:5d:e0:26:2f:d1:a7:
e1:46:62:0f:ce:14:5a:c3:bd:52:72:56:72:db:21:71:3e:e2:
04:d1:76:67:f7:e1:d2:b0:ea:5f:77:47:f6:3e:93:e2:63:1e:
e0:d7:2a:79:47:bc:cf:13:4a:9c:6e:7a:0a:8e:30:53:81:f8:
5d:87:fe:21:98:89:70:01:80:b1:99:ba:ec:b3:f6:af:ae:16:
eb:c6:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:34 2025 by rpki-client