Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/COOSirhVHTLVRSIt4NAQH8L8vr4.roa
File: COOSirhVHTLVRSIt4NAQH8L8vr4.roa (raw, json)
Hash identifier: tu1lQ0uqkhi4vcEmV6leM3hmh+odZkH5lyLz+npAcNE=
Subject key identifier: 08:E3:92:8A:B8:55:1D:32:D5:45:22:2D:E0:D0:10:1F:C2:FC:BE:BE
Certificate issuer: /CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Certificate serial: 0194228D90863B6E9E8B3199450A46FB847D
Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/COOSirhVHTLVRSIt4NAQH8L8vr4.roa
Signing time: Wed 01 Jan 2025 15:48:10 +0000
ROA not before: Wed 01 Jan 2025 15:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201843
IP address blocks: 2.58.224.0/22 maxlen: 22
2.58.224.0/24 maxlen: 24
2.58.225.0/24 maxlen: 24
2.58.226.0/24 maxlen: 24
2.58.227.0/24 maxlen: 24
185.61.204.0/24 maxlen: 24
185.61.205.0/24 maxlen: 24
185.61.206.0/23 maxlen: 23
185.133.96.0/22 maxlen: 22
185.133.96.0/24 maxlen: 24
185.133.97.0/24 maxlen: 24
185.133.98.0/24 maxlen: 24
185.133.99.0/24 maxlen: 24
185.191.64.0/24 maxlen: 24
185.191.65.0/24 maxlen: 24
185.191.66.0/24 maxlen: 24
185.191.67.0/24 maxlen: 24
185.238.48.0/22 maxlen: 22
185.238.48.0/23 maxlen: 23
185.238.48.0/24 maxlen: 24
185.238.49.0/24 maxlen: 24
185.238.50.0/24 maxlen: 24
185.238.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:90:86:3b:6e:9e:8b:31:99:45:0a:46:fb:84:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab
Validity
Not Before: Jan 1 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08e3928ab8551d32d545222de0d0101fc2fcbebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dc:27:4f:d8:6d:92:80:04:60:52:ef:a0:16:
c9:c9:81:1b:9d:ad:30:68:ff:31:62:de:4e:3f:41:
13:8d:cb:da:19:cb:d6:f1:3c:ee:af:0c:f3:20:90:
95:bc:65:bf:99:de:2c:e8:af:c7:91:4a:0d:3a:f1:
f0:2f:3e:4d:1b:5a:2d:bb:7d:fb:3c:a6:59:4d:dc:
6b:44:14:29:52:15:d2:40:7c:c1:0c:4c:6c:38:75:
e3:81:6b:bc:e9:5d:98:d5:20:bf:dc:ab:16:74:a2:
f3:b5:a2:39:c9:50:d5:71:1a:24:57:3a:60:d2:c1:
7b:9e:a3:c9:b4:52:57:88:13:db:61:1a:ca:7e:cf:
c5:20:99:81:8e:f4:32:b6:d1:25:71:ba:c9:0f:d5:
ea:0f:4f:a3:d5:3f:63:f2:52:7f:13:69:2f:b7:d1:
32:ff:9b:a6:e9:2e:b9:e8:1e:4b:23:1a:05:58:4e:
d7:2f:58:09:bb:8a:1e:b9:77:4f:eb:61:8f:d5:7b:
b3:62:82:40:0e:5d:05:e6:ec:c3:2a:19:de:d6:80:
c4:72:8f:28:23:a5:44:f2:ea:c8:7e:95:6e:a5:e8:
35:01:97:64:bc:0e:fb:d4:12:a3:e9:69:6b:17:3b:
cc:a9:05:92:81:e6:23:ae:d5:32:e4:c8:ff:67:3d:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E3:92:8A:B8:55:1D:32:D5:45:22:2D:E0:D0:10:1F:C2:FC:BE:BE
X509v3 Authority Key Identifier:
keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/COOSirhVHTLVRSIt4NAQH8L8vr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.224.0/22
185.61.204.0/22
185.133.96.0/22
185.191.64.0/22
185.238.48.0/22
Signature Algorithm: sha256WithRSAEncryption
85:45:29:d8:b7:f8:2b:16:0b:cc:bf:a4:3a:94:07:b2:b3:fc:
03:71:3f:66:0f:08:6e:5e:b0:8b:af:f5:38:5e:18:c8:1a:94:
87:6d:bb:0a:f8:76:5b:dd:f5:e3:c8:75:ea:3f:3e:3a:bd:58:
45:c4:97:e4:53:27:2c:6a:71:0b:fb:32:2f:61:97:2f:74:24:
0a:cd:01:4b:27:8b:d1:74:18:f5:46:43:05:83:9d:de:7b:e0:
81:73:00:b5:d7:7b:3b:92:85:ee:78:fb:5e:e6:f0:3a:83:5d:
93:96:3a:ed:0a:68:1b:2b:bc:6b:99:e9:96:40:85:02:8a:41:
24:94:c1:a5:4b:09:a3:b5:4f:54:b5:dc:b3:d9:e9:b3:69:76:
d1:d0:5d:0d:ab:ed:1d:01:a5:1b:94:af:e9:21:78:88:2e:57:
67:da:7d:25:e0:12:55:88:34:bd:4d:95:11:01:de:26:8f:e6:
55:23:44:0f:58:a1:c3:a6:e1:11:80:1f:0c:b3:58:7d:17:c7:
7f:da:fd:66:59:5b:49:9d:73:c6:01:cf:77:d6:c7:bc:01:c1:
12:53:d6:de:0d:4e:09:ad:8a:97:0d:b5:ad:64:8f:2c:2d:be:
82:23:d5:e4:1c:65:2e:04:05:1b:0c:f4:7b:61:41:46:bb:ee:
02:e5:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:57 2025 by rpki-client