Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/CmAE8B1t5vtl2bRQPtAcN7cxb3s.roa
File: CmAE8B1t5vtl2bRQPtAcN7cxb3s.roa (raw, json)
Hash identifier: EUyII4SPPS8NnneMNy5H1gGoK71/rhaPmoIV02VhFv0=
Subject key identifier: 0A:60:04:F0:1D:6D:E6:FB:65:D9:B4:50:3E:D0:1C:37:B7:31:6F:7B
Certificate issuer: /CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Certificate serial: 019420D5EE961A8E92DF21AACCB6339F2013
Authority key identifier: A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/CmAE8B1t5vtl2bRQPtAcN7cxb3s.roa
Signing time: Wed 01 Jan 2025 07:47:58 +0000
ROA not before: Wed 01 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49588
IP address blocks: 176.107.48.0/20 maxlen: 20
176.122.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ee:96:1a:8e:92:df:21:aa:cc:b6:33:9f:20:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a6004f01d6de6fb65d9b4503ed01c37b7316f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:e3:8a:93:78:58:ad:4c:a9:67:b0:d3:2b:
5e:9b:b2:af:bd:30:4e:dc:fe:50:4b:79:af:23:19:
a9:59:bc:64:45:45:76:40:4b:2b:8e:92:52:70:42:
1b:52:0d:09:1e:64:d3:34:47:a9:cc:fc:af:e2:49:
d8:a2:e8:b9:83:51:91:40:03:e7:c8:02:41:c2:13:
fe:f6:aa:8a:36:81:bd:08:d0:c0:d0:93:45:14:49:
06:c6:f2:f1:9c:e3:c2:1a:21:6c:ad:fa:4e:61:cc:
eb:d2:89:0e:ef:d7:97:16:e5:56:34:54:2e:7a:bc:
87:d1:43:a5:a4:85:29:be:31:17:0c:45:31:5e:6c:
98:31:e1:a2:b6:14:45:e5:81:90:dc:20:bf:d7:05:
2c:36:a9:9e:26:40:70:4d:89:d9:56:0c:f1:36:6d:
ec:52:9d:71:8d:52:f9:3c:f8:78:bf:f8:f9:7a:bf:
61:24:3d:89:19:bd:5b:24:5a:b5:7b:5e:c4:6f:d6:
93:49:92:d1:98:b8:80:5b:20:31:1b:e2:95:3e:c5:
eb:9a:5c:bf:a3:a9:96:69:5d:22:8a:2d:c9:51:af:
9b:37:16:f1:6a:20:31:d2:aa:03:e5:b2:7e:f7:02:
d4:96:87:39:a7:af:e5:84:5a:b6:23:95:70:93:3a:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:60:04:F0:1D:6D:E6:FB:65:D9:B4:50:3E:D0:1C:37:B7:31:6F:7B
X509v3 Authority Key Identifier:
keyid:A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/CmAE8B1t5vtl2bRQPtAcN7cxb3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.107.48.0/20
176.122.0.0/20
Signature Algorithm: sha256WithRSAEncryption
98:c5:df:c3:38:38:28:23:32:27:9f:25:98:e0:56:d8:20:51:
7b:b8:be:5a:16:68:74:9e:4b:ac:a8:54:47:7d:9f:f7:1a:03:
54:e9:61:53:bc:0b:96:b0:16:98:a3:27:0e:65:97:23:b4:42:
f3:57:86:ec:0b:4c:7f:4c:57:fa:02:e9:fc:98:8c:40:59:94:
94:46:9e:92:8f:e2:12:a7:37:0e:65:40:7d:06:05:7b:75:4c:
09:76:1e:ac:75:2e:19:53:27:3d:df:41:4f:45:61:76:8d:1c:
a1:6a:35:3e:5a:c4:7e:a2:d5:dc:0a:1b:2b:0d:39:e5:47:64:
e8:1d:b1:59:a3:78:1e:67:b6:1e:80:b0:30:22:d2:69:58:01:
c2:1f:10:eb:17:44:8e:52:5b:f2:fb:d7:2f:cb:53:aa:91:9d:
2a:dc:ac:54:e6:e8:3c:64:3b:ae:e7:61:58:03:e4:15:79:cb:
00:52:f1:ee:79:0a:eb:35:5c:99:2a:a6:d2:ce:f8:e0:87:e7:
f8:9d:61:44:01:ca:23:cf:1a:67:41:10:8a:c8:44:f6:c3:0e:
8b:ca:d5:a1:a4:a3:bd:36:b6:3a:65:db:22:e9:52:d2:54:65:
a7:87:c7:79:df:3a:b3:98:86:ae:03:13:27:ce:c6:1c:04:ea:
c4:5d:fe:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:06 2025 by rpki-client