Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/CMAN4bcbFlE2ovL3BXKdvH4eTII.roa
File: CMAN4bcbFlE2ovL3BXKdvH4eTII.roa (raw, json)
Hash identifier: ZzFaJfQBLQmJT0k4QbFN8QUiuOCXpP8XehevhIAFTKY=
Subject key identifier: 08:C0:0D:E1:B7:1B:16:51:36:A2:F2:F7:05:72:9D:BC:7E:1E:4C:82
Certificate issuer: /CN=66507077ce7f30fc0686dd0934a89997df31e84c
Certificate serial: 019561FBB2376FD1B85CF61EC8FDBC0E40A1
Authority key identifier: 66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/CMAN4bcbFlE2ovL3BXKdvH4eTII.roa
Signing time: Tue 04 Mar 2025 16:27:19 +0000
ROA not before: Tue 04 Mar 2025 16:27:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202527
IP address blocks: 193.111.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:61:fb:b2:37:6f:d1:b8:5c:f6:1e:c8:fd:bc:0e:40:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66507077ce7f30fc0686dd0934a89997df31e84c
Validity
Not Before: Mar 4 16:27:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08c00de1b71b165136a2f2f705729dbc7e1e4c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:ad:e7:6d:b7:cb:d2:fb:e1:d7:52:26:18:
63:20:1d:ee:4a:a7:a8:5e:8e:c2:be:26:16:a2:b4:
3f:8f:b6:87:c1:eb:94:80:03:bd:df:33:3d:f1:b2:
4d:f1:5a:ef:3f:dc:0e:4c:46:8d:4e:52:b4:08:81:
c3:4c:13:65:4b:46:be:19:b0:1c:61:b5:77:17:90:
ec:22:02:53:72:12:6e:c4:fe:fe:ac:24:b2:75:c4:
6e:a1:4a:cf:56:d0:e1:66:03:91:f5:22:e1:ab:17:
91:f3:ea:64:e2:c0:11:71:b3:ae:7e:7e:82:6b:b2:
49:9c:ce:77:4c:da:c6:d7:70:07:8e:2a:27:b8:aa:
cb:1a:e6:92:ac:6d:77:33:aa:37:35:19:51:98:24:
fd:c0:10:3f:5c:33:d3:c1:af:ff:bf:45:6f:4e:ff:
07:48:2f:be:16:ca:34:f3:a5:5e:c2:e6:be:52:76:
8d:e4:e0:7d:85:cf:1d:09:6e:c2:ac:3e:63:70:e5:
71:e2:32:df:3c:4e:cf:66:27:33:df:bd:e4:d8:39:
11:39:ce:82:c0:06:cf:96:3f:56:9b:33:07:9b:06:
b6:d9:3e:91:b8:d8:9b:e5:e6:b3:81:e1:26:b0:1d:
cc:53:fb:f8:a3:dd:29:fe:5c:a1:e4:ce:28:81:61:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C0:0D:E1:B7:1B:16:51:36:A2:F2:F7:05:72:9D:BC:7E:1E:4C:82
X509v3 Authority Key Identifier:
keyid:66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/CMAN4bcbFlE2ovL3BXKdvH4eTII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.47.0/24
Signature Algorithm: sha256WithRSAEncryption
71:14:90:d6:27:30:b3:58:67:f0:27:33:50:9b:d8:a3:a7:cc:
8b:e9:6f:a7:86:ab:74:21:09:3d:cd:e6:02:46:3b:0a:fc:8a:
d3:43:a5:e3:f3:8c:20:d7:8f:ea:9f:58:43:7a:17:e7:0d:31:
63:74:d3:f2:c3:d6:41:da:7c:72:04:d7:49:a9:17:0a:d7:0b:
ba:4b:f4:3b:5b:83:84:c4:83:2e:f4:a2:71:f5:43:07:e5:16:
b8:28:14:4b:03:26:dd:1b:e0:47:4e:11:ad:97:b9:8b:4b:07:
01:23:39:aa:f1:a3:28:24:cd:e2:4a:0d:77:63:fe:cd:3b:97:
0c:89:91:ba:70:3f:b3:e6:7a:b9:ec:e0:53:c2:1d:6c:c0:d5:
52:6c:01:48:5e:f9:04:9b:05:60:19:f7:b3:79:a3:0d:1e:61:
76:cb:22:75:1b:a4:72:2e:75:1d:04:62:0c:41:d3:07:82:b3:
69:23:1e:3a:54:17:2b:6f:b0:30:ce:c6:e7:6f:8d:7c:99:d1:
ff:26:c4:20:6d:90:ae:52:8d:e4:3e:f6:91:0a:0c:3c:d5:9b:
81:1d:c1:4c:90:0e:22:fb:65:9a:15:ad:75:49:a0:f5:5b:84:
a7:3b:11:c6:92:64:42:f5:64:b4:64:5b:35:f7:53:f7:f9:f1:
c4:2c:a3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:41 2025 by rpki-client on console.sobornost.net