Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/RCebozhiTcCblvotMpWCdCJ1ob8.roa
File: RCebozhiTcCblvotMpWCdCJ1ob8.roa (raw, json)
Hash identifier: ZFZoBEoVJHz2x12TIIxXed5WibUd/7/bBstI8X2ocJo=
Subject key identifier: 44:27:9B:A3:38:62:4D:C0:9B:96:FA:2D:32:95:82:74:22:75:A1:BF
Certificate issuer: /CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0
Certificate serial: 019425FC30281575EE6FDC922DA8679F9D05
Authority key identifier: D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/RCebozhiTcCblvotMpWCdCJ1ob8.roa
Signing time: Thu 02 Jan 2025 07:47:51 +0000
ROA not before: Thu 02 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44684
IP address blocks: 185.159.24.0/24 maxlen: 24
2a00:9b40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:30:28:15:75:ee:6f:dc:92:2d:a8:67:9f:9d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0
Validity
Not Before: Jan 2 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44279ba338624dc09b96fa2d329582742275a1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:cd:fa:a9:fb:a5:89:84:e9:24:16:38:05:
ff:94:25:89:55:69:2a:49:bb:15:3d:38:ba:a5:bd:
8a:f2:fa:73:65:a0:62:09:d4:f3:ff:f0:5c:28:27:
6c:44:eb:85:cf:38:45:61:f9:d9:7e:0a:97:2f:39:
b7:ff:9e:7e:bf:53:50:76:97:3f:1c:76:f3:54:f3:
eb:42:3d:a0:d2:a8:f3:7d:0a:26:e1:f5:7b:81:fc:
b4:c8:76:60:1d:8b:d9:4e:15:96:cd:10:4c:fd:13:
f0:46:d8:5e:60:6a:3b:b9:fc:b5:e4:ff:e5:a1:a6:
08:88:18:84:5d:39:4c:89:fb:4b:d1:af:bb:27:6f:
be:c4:35:7f:09:70:f9:d7:d2:02:85:94:de:e6:13:
ad:43:dc:d8:c8:96:26:a2:97:97:d5:48:f4:46:e5:
bb:3a:32:1d:3f:e8:27:82:36:60:12:2f:2d:c3:5c:
27:b8:ef:da:bd:ec:59:96:3f:87:81:d8:78:ae:a1:
05:30:4c:09:b9:95:62:54:ad:e2:9f:65:d9:9e:08:
6b:fe:7c:24:5d:6f:1b:8b:47:e6:58:5f:9f:4e:0f:
78:67:59:01:49:82:58:4e:21:36:b0:2f:ae:2c:2e:
0a:ce:66:e6:16:1d:b3:6e:78:74:ea:ea:4a:07:bc:
76:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:27:9B:A3:38:62:4D:C0:9B:96:FA:2D:32:95:82:74:22:75:A1:BF
X509v3 Authority Key Identifier:
keyid:D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/RCebozhiTcCblvotMpWCdCJ1ob8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.24.0/24
IPv6:
2a00:9b40::/48
Signature Algorithm: sha256WithRSAEncryption
51:bf:ef:79:6f:57:9b:bd:45:06:03:d7:b7:79:0b:e4:a6:70:
b9:ab:01:a9:f8:21:b5:3e:70:79:2a:22:ab:ea:c7:9b:4a:4c:
b1:cb:3b:b0:0c:45:a0:59:87:31:c0:c1:d6:e3:71:2d:ba:e6:
c3:82:6b:64:49:ad:af:aa:3e:7a:8f:38:ca:5d:f4:f1:09:12:
85:4b:f0:26:24:45:4e:a0:6d:f2:04:88:fa:9c:80:99:23:33:
c8:30:7a:d5:18:1e:d2:a5:d0:60:7d:23:c9:07:9d:ca:0c:ca:
11:44:2d:64:8d:1c:e2:10:5e:f9:d3:1d:2d:bb:b1:8a:61:54:
1f:cb:7a:75:a5:e7:8d:e6:01:e5:1c:84:4b:1c:74:b1:19:88:
18:bd:a5:96:55:f5:89:c0:57:26:ad:3e:e5:72:14:1a:e4:a6:
2d:37:a6:a4:1f:68:99:84:54:4c:3c:dc:c1:55:ac:ce:a3:50:
69:21:31:b2:16:89:f4:3d:2e:56:6f:68:4e:73:1b:f8:b9:8d:
eb:c6:46:fd:0c:1a:63:41:16:07:fb:73:64:e8:81:cb:86:99:
13:39:bd:be:bc:63:16:da:f1:c5:5b:cd:21:44:8c:e2:da:3b:
77:7b:ef:45:84:05:0c:67:7b:0e:8b:50:22:0a:61:18:c1:02:
11:0e:40:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:30 2025 by rpki-client