Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/CGLcLVB_nqLd9iNoes6GRQjCoVY.roa
File: CGLcLVB_nqLd9iNoes6GRQjCoVY.roa (raw, json)
Hash identifier: PUaaifTKcP0kb/F/TYWEggzMP0VnUab0IhVecDySCrE=
Subject key identifier: 08:62:DC:2D:50:7F:9E:A2:DD:F6:23:68:7A:CE:86:45:08:C2:A1:56
Certificate issuer: /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial: 019426D9CA03C18E8A40BC2565BA60C81FA9
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/CGLcLVB_nqLd9iNoes6GRQjCoVY.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196969
IP address blocks: 195.54.184.0/22 maxlen: 22
195.54.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ca:03:c1:8e:8a:40:bc:25:65:ba:60:c8:1f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0862dc2d507f9ea2ddf623687ace864508c2a156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:4a:5e:21:2e:44:69:f5:55:41:62:b2:b8:
61:2a:3b:89:66:75:6c:bc:2d:bc:3c:1d:92:49:e3:
e6:d6:e7:f8:82:1f:93:cc:78:dc:df:42:cf:e5:93:
29:16:f1:47:c7:ee:a9:df:92:e0:b2:3d:46:4f:8d:
7f:31:b8:ed:f9:6b:02:90:e8:14:24:00:3b:d8:30:
8e:f8:f7:ee:13:6b:96:32:51:ab:4a:10:16:30:22:
17:1a:5a:1d:ca:1d:98:74:b0:5e:05:de:a8:4a:f4:
f0:b7:e6:43:1a:78:a8:eb:fa:f0:d9:35:ac:e4:70:
f8:f6:cd:02:67:f5:1e:ad:ef:21:96:db:2f:6a:d6:
a0:71:01:a0:d0:b1:75:26:25:18:08:2d:68:6c:28:
f8:a1:c9:e8:7a:1a:6b:50:bd:77:a8:91:ec:bf:26:
39:bd:35:12:b8:16:c0:db:da:29:40:04:0b:cf:3f:
ed:cf:4e:5b:cc:1c:be:70:8a:47:85:81:ff:28:e5:
a4:d5:d6:45:a3:46:cf:7c:51:b4:d5:d0:76:3d:ca:
b0:45:10:bd:78:37:e7:a0:bb:f0:c6:02:38:fe:15:
a9:48:f1:fb:e4:15:b7:b3:76:50:1f:6f:4c:36:2d:
0f:33:25:5c:5c:e0:7c:1d:fe:e4:cd:10:ab:2e:da:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:62:DC:2D:50:7F:9E:A2:DD:F6:23:68:7A:CE:86:45:08:C2:A1:56
X509v3 Authority Key Identifier:
keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/CGLcLVB_nqLd9iNoes6GRQjCoVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.184.0-195.54.189.255
Signature Algorithm: sha256WithRSAEncryption
5f:37:b7:2f:6a:67:a9:bb:96:9d:5d:bd:84:d5:3a:7a:4e:50:
29:58:ec:af:d6:79:e2:1f:30:b3:c8:9d:52:49:31:fd:de:31:
9e:13:df:1c:65:9d:28:19:f9:8d:a3:6b:6c:9f:88:04:09:3e:
2d:10:a9:84:49:16:d2:b7:d9:2c:0a:be:ab:76:2d:22:7d:38:
ee:90:6b:97:71:ae:2c:31:86:b1:1a:08:87:1b:ad:cd:ce:64:
80:a0:c4:59:e1:9b:07:1a:7b:60:03:fc:ba:30:54:30:1e:33:
88:f4:41:d4:4f:eb:2e:03:31:3e:4b:5b:95:27:3c:9e:bb:fd:
a9:79:85:d6:a0:6c:bc:e9:cc:05:59:28:d3:00:13:f9:f5:87:
33:cf:0d:02:71:01:16:4c:b8:40:89:ca:59:27:fd:a4:6b:4f:
2f:2c:31:64:8f:c6:05:60:61:70:81:0b:61:0a:d4:65:24:1d:
86:41:6c:47:6f:86:d2:ec:53:11:af:09:57:7a:49:38:13:05:
7e:7f:a6:02:e2:ef:6f:e8:1f:a9:40:cd:2b:ce:e3:eb:66:ca:
19:dd:9a:66:7b:c9:31:5a:e8:b8:08:c3:86:4e:56:1d:76:23:
6b:e9:04:f5:a7:5f:0e:e7:7d:b7:a1:1f:fd:80:13:8b:2f:b9:
ca:e8:45:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:30:22 2025 by rpki-client