Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/CuC7YwLfcFdkBUn2FoNsTNOXfjk.roa
File: CuC7YwLfcFdkBUn2FoNsTNOXfjk.roa (raw, json)
Hash identifier: I4hol0YsV7mnOp0GHtrq4UwhSCksN1Q1IbqUqZuz7o8=
Subject key identifier: 0A:E0:BB:63:02:DF:70:57:64:05:49:F6:16:83:6C:4C:D3:97:7E:39
Certificate issuer: /CN=114c56d595de33cb8751739dbdd9b45edb2eff0c
Certificate serial: 019424B396AE41064BD5DD213C2ADAA8E60B
Authority key identifier: 11:4C:56:D5:95:DE:33:CB:87:51:73:9D:BD:D9:B4:5E:DB:2E:FF:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/CuC7YwLfcFdkBUn2FoNsTNOXfjk.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60274
IP address blocks: 185.233.67.0/24 maxlen: 24
193.203.252.0/24 maxlen: 24
2a10:df80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:96:ae:41:06:4b:d5:dd:21:3c:2a:da:a8:e6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=114c56d595de33cb8751739dbdd9b45edb2eff0c
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ae0bb6302df7057640549f616836c4cd3977e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:dd:9d:b6:62:45:5f:d4:b7:ce:0e:94:e4:
b1:59:84:fb:4a:89:17:9d:e0:39:23:62:cd:31:a0:
f0:61:10:61:66:98:e1:23:e9:26:9f:76:0a:cf:83:
2e:f9:02:01:c6:f3:e4:f6:80:ce:06:cc:37:80:02:
33:08:0d:da:49:fe:7b:7c:c1:97:30:14:35:68:94:
70:3b:82:05:c6:88:4c:ba:57:db:d7:be:19:5e:5d:
13:94:0a:2f:83:2f:8a:88:b9:23:7c:18:27:2f:21:
db:c9:67:ed:a2:53:03:f7:a9:76:39:68:ef:5d:0e:
bb:c0:ec:00:78:1d:5d:e0:4d:1a:09:61:c6:e1:1a:
0e:c7:87:43:6e:22:d6:ef:6b:35:07:33:51:4d:a2:
1b:88:2c:e5:a3:71:91:5a:68:55:3a:b6:9e:dd:18:
96:ab:b1:68:ee:31:51:ac:38:f6:21:a1:75:58:01:
bb:61:09:4a:17:a1:45:ca:ca:bf:0b:9e:3a:f3:6d:
4f:af:9e:ef:bf:8f:34:33:4d:3d:9c:dd:b6:58:47:
b7:37:7c:4b:6f:47:54:ee:2d:ae:1d:a6:91:12:50:
9a:ab:70:d9:2b:1c:45:15:94:ed:fa:f8:31:03:b5:
01:0b:93:45:3b:f3:73:08:2d:d3:4c:80:0e:b3:64:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E0:BB:63:02:DF:70:57:64:05:49:F6:16:83:6C:4C:D3:97:7E:39
X509v3 Authority Key Identifier:
keyid:11:4C:56:D5:95:DE:33:CB:87:51:73:9D:BD:D9:B4:5E:DB:2E:FF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/CuC7YwLfcFdkBUn2FoNsTNOXfjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.67.0/24
193.203.252.0/24
IPv6:
2a10:df80::/29
Signature Algorithm: sha256WithRSAEncryption
3e:3c:2a:8a:85:c0:92:90:49:13:4c:be:d3:fe:c7:e0:23:f7:
36:34:2b:10:ed:96:ca:ae:b7:b2:3f:21:b4:0a:d8:38:44:35:
ca:23:b4:2f:3f:45:d6:0f:d0:9b:0e:d3:11:50:20:d2:07:64:
3e:73:bc:82:13:1c:f9:e3:81:87:4c:19:bb:f9:3f:42:98:84:
88:2c:69:f1:97:fe:7b:6a:bf:55:6f:23:4b:86:b4:bb:fe:e8:
63:4c:33:4b:1a:e2:46:f0:60:cd:b6:2f:39:58:3d:2a:7c:c0:
36:75:79:a7:3d:98:83:8d:8c:e1:91:93:8f:e9:0e:ea:ee:56:
55:b4:4e:05:20:87:d0:be:ca:6b:5c:bd:84:3f:dd:60:72:69:
0d:32:d6:53:60:53:0f:3a:3c:18:48:91:dc:b0:dd:98:d5:51:
50:c9:20:2f:4c:23:d5:b4:3e:0c:16:75:6d:e4:30:ae:0e:f3:
0b:42:49:eb:7d:84:5e:65:bb:f1:3f:2b:19:fa:24:5f:9c:fe:
7a:c4:98:9a:26:c0:3c:71:f6:53:cf:56:01:3c:b8:95:90:fd:
75:f5:3b:ba:64:61:a9:96:81:e2:02:26:93:2d:06:de:f1:f6:
c7:47:45:0c:c3:45:d1:7d:e6:64:95:ac:66:8d:a0:72:92:81:
b0:a5:de:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:16 2025 by rpki-client on console.sobornost.net