Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/ClcjDVwq5bxJkQpaatwkcE8Ccvk.roa
File: ClcjDVwq5bxJkQpaatwkcE8Ccvk.roa (raw, json)
Hash identifier: iX9fNXWEgzfPs5uLIPgDHjdM43scoKq0NVj+XxIGDUs=
Subject key identifier: 0A:57:23:0D:5C:2A:E5:BC:49:91:0A:5A:6A:DC:24:70:4F:02:72:F9
Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial: 019421445C2E8426A43F0F2D4B16BDA7346D
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/ClcjDVwq5bxJkQpaatwkcE8Ccvk.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16242
IP address blocks: 185.15.137.0/24 maxlen: 24
193.247.85.0/24 maxlen: 24
2a12:5a40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5c:2e:84:26:a4:3f:0f:2d:4b:16:bd:a7:34:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a57230d5c2ae5bc49910a5a6adc24704f0272f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:98:1d:82:57:72:b6:d7:38:b5:39:72:56:
fc:ba:d6:1a:d8:03:09:68:f8:ce:66:5d:68:8a:46:
51:5e:aa:57:a4:61:ec:28:35:be:d4:c6:92:9f:ba:
27:71:8a:9f:6a:06:3b:b8:3b:37:f4:29:d7:68:98:
f4:46:a0:a0:62:ef:ef:85:29:7c:ff:1b:ec:02:a7:
f1:fd:a5:58:a6:c7:5a:34:3b:f9:2e:36:f3:14:5e:
4e:10:0a:63:ed:bb:04:fa:71:64:91:24:e5:3a:3a:
99:d8:5c:d4:fb:e4:47:ec:48:87:eb:8b:e1:53:58:
ac:19:9f:d4:cd:b1:a3:35:f2:ba:12:0f:e8:91:94:
21:9a:25:89:b9:da:9b:64:82:2e:73:9f:33:be:0f:
b3:20:88:a6:31:9b:68:37:58:99:d3:20:8d:66:39:
93:a0:ad:7f:8f:7a:c9:c0:0d:cf:4d:c9:ca:33:4d:
c6:6f:07:14:ea:67:69:2e:66:d8:74:b4:36:b0:92:
81:28:d5:da:9a:46:99:70:99:10:cd:0f:87:03:fd:
f0:90:ac:27:19:9e:c5:03:52:8c:bb:0a:be:21:ae:
6d:57:8b:c9:63:3b:5f:52:d0:5a:10:44:4f:b4:a5:
e2:1e:43:74:9d:0a:d4:a0:c5:e2:00:1e:d2:46:eb:
8a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:57:23:0D:5C:2A:E5:BC:49:91:0A:5A:6A:DC:24:70:4F:02:72:F9
X509v3 Authority Key Identifier:
keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/ClcjDVwq5bxJkQpaatwkcE8Ccvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.137.0/24
193.247.85.0/24
IPv6:
2a12:5a40::/29
Signature Algorithm: sha256WithRSAEncryption
97:22:51:71:36:cc:39:16:f8:74:77:6a:d4:7d:20:5e:d4:b8:
96:c6:da:f5:8b:1e:06:cf:f9:1c:ce:60:89:1f:8d:c8:db:f8:
c4:d2:ba:6d:9c:b4:73:92:1e:70:8f:a6:2e:5c:36:48:ae:68:
14:43:09:c1:3f:39:fa:d9:35:08:4c:a4:96:3c:d3:4f:28:27:
82:ff:7f:a9:78:3e:21:c4:82:8a:4f:2a:04:f6:8c:6b:47:81:
f6:15:19:1c:cc:fe:1e:a3:8f:22:2e:aa:64:7c:88:86:0f:5f:
80:51:ed:e8:c4:ed:9a:1f:09:41:f0:c2:72:d6:6a:16:fc:a9:
68:6b:87:c5:37:f3:91:db:79:c9:d4:52:38:b4:b4:91:47:6c:
8a:51:3b:07:0e:7b:94:e3:9e:94:be:da:b9:17:52:2d:06:df:
a5:b6:a7:d5:bb:dc:ae:b3:8d:e6:3b:b9:63:00:64:c7:13:54:
69:90:9d:8d:31:9a:50:c0:c5:43:8c:54:23:65:de:be:e6:0a:
d4:29:e2:ab:34:27:ec:3b:b9:48:6c:c1:e3:2c:74:35:f3:b1:
63:5c:ca:86:b9:80:d2:88:ef:b7:c4:0c:1d:ba:6e:ab:ea:a9:
f6:de:d3:1b:ea:72:1b:21:19:d4:5e:3b:e9:ae:3d:aa:6a:fd:
cb:50:17:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:59:20 2025 by rpki-client