Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/cAJwzXdTlj0l08klToV51g3reQE.roa
File: cAJwzXdTlj0l08klToV51g3reQE.roa (raw, json)
Hash identifier: MNtWLrHXizLnpt8hRaJw3axv6PAJCrUS/ztw7WczF4E=
Subject key identifier: 70:02:70:CD:77:53:96:3D:25:D3:C9:25:4E:85:79:D6:0D:EB:79:01
Certificate issuer: /CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
Certificate serial: 019425216DEDE668DE999560FB00884BBC1E
Authority key identifier: 0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/cAJwzXdTlj0l08klToV51g3reQE.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210172
IP address blocks: 194.53.176.0/22 maxlen: 22
194.53.176.0/24 maxlen: 24
194.53.177.0/24 maxlen: 24
194.53.178.0/24 maxlen: 24
194.53.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6d:ed:e6:68:de:99:95:60:fb:00:88:4b:bc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=700270cd7753963d25d3c9254e8579d60deb7901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:cc:a7:e0:1c:13:46:ec:da:32:3f:74:fa:
61:a5:75:40:3a:56:fa:f4:6c:ef:88:b0:ca:aa:39:
c8:58:5f:6c:d7:f1:52:15:68:53:8b:9c:4a:4d:d1:
aa:00:35:20:e5:b4:09:e8:ef:2c:18:74:4a:c7:30:
2b:55:45:47:f4:3b:cd:65:05:8c:ed:1e:6e:63:f0:
da:cf:20:5b:61:e9:37:7d:09:c7:a1:2d:1b:d8:bd:
17:89:29:a7:4b:31:c8:03:ed:da:1d:07:39:ff:6d:
a6:eb:aa:1c:fa:fb:48:17:d1:a3:77:2c:a9:a3:ad:
ee:b7:bf:ce:e5:bd:6e:99:62:3c:7a:29:3a:e0:79:
bd:e5:61:d9:9a:a2:85:1f:cf:03:8d:f1:7e:e6:3b:
56:36:19:2a:b0:6f:60:72:c6:cb:b9:38:86:c0:06:
13:51:03:c2:f2:3d:a8:02:1f:83:90:62:d4:60:09:
52:2d:45:77:b8:23:51:f4:40:82:86:f7:c9:21:13:
36:9b:e9:d7:29:32:25:23:66:f5:86:92:bc:a1:98:
30:0d:bf:42:2e:a0:c8:ba:a8:d2:61:d0:fb:05:06:
bb:ed:05:1a:d0:7f:b7:81:c7:88:58:b3:c6:74:4c:
40:81:1a:ec:af:af:94:9a:c5:f5:cc:fe:b6:a4:23:
73:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:02:70:CD:77:53:96:3D:25:D3:C9:25:4E:85:79:D6:0D:EB:79:01
X509v3 Authority Key Identifier:
keyid:0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/cAJwzXdTlj0l08klToV51g3reQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.176.0/22
Signature Algorithm: sha256WithRSAEncryption
59:96:3d:4d:bf:4b:da:ea:9a:72:15:95:cb:2b:fa:b5:d2:da:
41:fc:3c:c0:21:ef:b6:82:98:37:f1:ec:40:cb:80:95:c2:77:
51:e0:1d:ea:dd:d0:9e:78:0c:a0:eb:68:43:a2:ad:70:c8:ac:
d9:26:2a:a2:55:dc:61:49:2f:95:95:15:aa:b2:4b:74:86:71:
8b:2b:70:fe:7b:d8:18:15:37:07:8a:f2:17:94:45:12:04:d3:
f6:b5:b4:00:57:1d:e6:ca:4d:83:f7:0b:fb:1e:42:6f:ab:d4:
58:48:ef:07:5d:f5:03:bd:dc:14:c8:63:d2:2d:d6:35:d1:59:
33:d1:30:cb:d0:9d:75:f7:e3:81:9a:f9:4f:54:ff:83:e0:41:
67:2a:da:c9:4a:47:fd:ea:1a:e4:39:53:31:58:0b:1b:6e:c5:
fe:81:43:87:c9:c1:65:7b:85:49:d8:03:28:4e:7c:80:25:81:
cd:d8:3c:02:3f:47:00:24:91:dd:b0:83:56:50:39:46:9f:85:
3a:99:03:b7:0b:57:e5:f2:ce:91:bf:9b:50:77:b2:52:ff:f6:
aa:17:84:e8:2b:28:91:07:f9:2c:fa:2f:f3:aa:33:c2:e7:2c:
c9:f4:ee:52:bc:87:da:cd:0f:70:79:c4:f1:51:6a:cc:d1:d5:
37:7e:53:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:06:04 2025 by rpki-client