Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/CMb2v2PccTlBgcAh5nA2SeBCOKc.roa
File: CMb2v2PccTlBgcAh5nA2SeBCOKc.roa (raw, json)
Hash identifier: khwSYgRcb0xgIwV3Wxw9JYrinxD/gAooMfP6PNCyCK0=
Subject key identifier: 08:C6:F6:BF:63:DC:71:39:41:81:C0:21:E6:70:36:49:E0:42:38:A7
Certificate issuer: /CN=58d3e953b5fe17a531c9cf71560748df41ff714a
Certificate serial: 019427468F62388D2CFF034B0F0CCD687550
Authority key identifier: 58:D3:E9:53:B5:FE:17:A5:31:C9:CF:71:56:07:48:DF:41:FF:71:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/CMb2v2PccTlBgcAh5nA2SeBCOKc.roa
Signing time: Thu 02 Jan 2025 13:48:43 +0000
ROA not before: Thu 02 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56537
IP address blocks: 193.22.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:8f:62:38:8d:2c:ff:03:4b:0f:0c:cd:68:75:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d3e953b5fe17a531c9cf71560748df41ff714a
Validity
Not Before: Jan 2 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08c6f6bf63dc71394181c021e6703649e04238a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:7f:f5:f3:32:e2:12:83:cb:29:ca:71:72:
6c:63:6a:51:1f:b1:e2:e7:76:25:84:6d:86:23:ae:
78:ab:07:af:31:bc:93:5e:21:85:5d:ad:ac:8b:ef:
4c:36:51:02:89:92:12:e4:6e:47:b8:71:24:fe:08:
09:fe:56:e2:04:4e:aa:db:c8:46:3d:6b:51:2a:c8:
e9:db:d3:f3:ab:ff:e5:c4:7d:3d:2a:06:44:61:b3:
ed:19:70:fc:f3:7f:cb:d9:f9:e9:79:f3:72:08:dc:
62:3d:b6:26:a7:94:e2:7c:8f:df:e4:3c:2f:f7:5e:
e8:12:cf:53:ff:a8:92:e3:47:f5:7c:e6:01:f4:42:
66:ef:8d:3d:8e:82:a2:26:81:3b:1b:1d:f3:14:77:
65:45:09:34:be:45:f6:29:bc:56:5b:ac:f1:f6:d3:
9e:b9:43:dc:20:12:81:d0:1a:db:e2:ee:80:89:ff:
47:ee:06:89:69:b0:a8:ca:9a:14:c9:83:22:2c:ec:
89:b4:31:ba:c7:45:bd:00:df:0f:fd:9d:53:a5:ec:
c5:f7:98:99:3d:9f:8f:38:1b:c0:9d:3b:12:4d:df:
33:51:2e:f7:02:65:d3:15:f0:42:24:e7:63:fb:44:
02:77:9b:ac:3e:6c:09:2e:78:33:aa:29:f1:5a:a5:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C6:F6:BF:63:DC:71:39:41:81:C0:21:E6:70:36:49:E0:42:38:A7
X509v3 Authority Key Identifier:
keyid:58:D3:E9:53:B5:FE:17:A5:31:C9:CF:71:56:07:48:DF:41:FF:71:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/CMb2v2PccTlBgcAh5nA2SeBCOKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.88.0/24
Signature Algorithm: sha256WithRSAEncryption
15:6c:3d:0c:bf:7b:c7:9f:7d:8e:b3:0b:1c:0f:38:90:52:89:
c0:6f:1f:95:7b:47:f7:16:f3:8e:d2:b3:2e:0f:32:af:f1:0c:
6b:2e:b1:17:16:96:7f:bf:c6:8e:7a:1d:58:9f:bd:b2:bf:c5:
3d:5c:55:a8:db:24:2c:4a:bb:fe:d9:30:6a:88:0e:a0:2c:34:
b7:3d:4f:db:1c:39:35:c5:62:1f:b1:58:18:46:ed:1b:21:b7:
0c:48:cb:b4:f7:65:34:7f:bf:b0:b1:df:ff:5d:08:a0:47:a7:
ed:e1:ea:d9:1a:fe:a7:8b:e1:1b:bc:8f:40:a2:c3:60:d5:dd:
a0:ac:ad:81:80:ad:21:27:ec:ca:de:13:e1:08:84:98:70:20:
87:5a:fe:e4:84:68:a4:f2:83:a3:c1:69:6d:0b:9b:24:28:11:
66:90:64:5e:89:96:f0:c2:ae:74:82:4c:38:e6:85:5f:0e:22:
4a:18:55:7f:56:56:6d:66:2c:4e:e1:f4:88:4a:a2:8c:58:fb:
54:60:e5:ef:33:2a:b8:9e:6b:3d:d6:14:c7:10:b8:a3:32:8a:
5b:22:2f:37:f9:be:60:2e:fd:13:63:6a:f6:b0:76:07:0d:5a:
9d:ee:74:a6:bc:67:df:0e:87:83:4e:5a:68:46:be:0f:5a:3e:
57:82:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:12:29 2025 by rpki-client