Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/24PmMpD-bHbUV8mxF_RlzuSRjLU.roa
File: 24PmMpD-bHbUV8mxF_RlzuSRjLU.roa (raw, json)
Hash identifier: ohLVMvfqoqKO1xPsU0QfK7dKJZtv+ZBmQ14II/YiXms=
Subject key identifier: DB:83:E6:32:90:FE:6C:76:D4:57:C9:B1:17:F4:65:CE:E4:91:8C:B5
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 019420D65EB0EB96DC1E0A96219C85FDE9DA
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/24PmMpD-bHbUV8mxF_RlzuSRjLU.roa
Signing time: Wed 01 Jan 2025 07:48:27 +0000
ROA not before: Wed 01 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62236
IP address blocks: 185.224.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5e:b0:eb:96:dc:1e:0a:96:21:9c:85:fd:e9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db83e63290fe6c76d457c9b117f465cee4918cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:89:c9:ee:1a:4f:3d:28:ca:5f:34:ea:9d:
ec:6f:76:a2:b6:37:93:0e:c9:14:1c:92:35:7d:03:
20:c8:e4:93:de:d9:85:dd:8b:f6:bc:5d:5c:0f:65:
b4:66:d9:12:72:ef:bf:b1:d4:06:95:91:93:87:78:
11:88:cc:1a:58:21:22:d9:91:60:8c:c3:45:78:8f:
09:64:c6:42:d8:04:7e:7b:bf:f8:bb:0f:6e:72:ce:
01:5b:89:f0:52:8a:3c:f8:96:bd:38:4f:a5:8e:8e:
41:58:ba:a3:94:51:1a:7a:b0:f0:a1:82:af:b2:58:
a6:a6:ec:4b:a8:1b:82:8c:6e:d2:a7:e5:d0:8e:4f:
63:f0:40:b8:6f:1b:a6:82:c7:4c:86:2f:d0:d2:ce:
0d:92:13:bf:ff:c5:12:8f:d5:8a:46:ea:37:ae:ed:
4d:f6:09:df:1a:23:36:03:03:0e:9a:08:01:1c:5c:
55:25:59:a4:3a:9e:ff:f2:19:7c:20:66:fd:a6:48:
67:6c:55:c6:16:7e:7b:4e:7f:bb:47:9a:0e:d3:cf:
60:15:f1:28:9d:ed:4b:9f:50:cf:81:cd:94:73:0c:
b7:ed:37:e5:50:62:52:b0:a6:22:04:b2:97:f3:7c:
66:a5:3c:3e:20:ea:c8:89:c5:b1:da:3c:e2:07:9d:
e5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:83:E6:32:90:FE:6C:76:D4:57:C9:B1:17:F4:65:CE:E4:91:8C:B5
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/24PmMpD-bHbUV8mxF_RlzuSRjLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:27:24:7c:f3:76:76:bd:98:4f:4b:e2:56:91:d2:9d:78:8d:
36:3e:f0:3e:49:76:d7:27:6e:f0:47:ab:85:a9:d3:39:c3:e6:
1c:7f:02:d6:a1:13:87:76:0a:52:84:58:b5:fc:d0:81:7a:28:
1d:ae:6d:a3:46:0f:90:f7:8b:85:fd:9b:50:c5:27:5e:6c:38:
8d:a3:32:16:05:f0:8e:70:33:7c:df:12:73:2e:f1:2e:d1:69:
d2:c7:27:5b:61:44:67:9c:71:f1:e2:16:b5:08:4f:bf:f6:8a:
cf:29:50:9f:c9:59:68:8c:a1:92:b6:15:a0:5c:47:91:f9:18:
e6:26:b0:81:d8:86:4d:2e:ec:7a:e0:bb:49:87:04:21:87:2b:
8a:6c:5c:57:d1:e4:24:96:8e:6a:ce:bd:27:51:a4:8f:e2:48:
7c:cb:91:9d:b7:f0:a4:ed:de:cc:90:77:c2:9b:f1:b6:e1:15:
2f:c8:3d:f6:a2:3f:46:1c:be:67:1c:c1:e9:32:10:c1:31:55:
c4:5d:f0:72:f6:b4:ab:34:89:c5:71:03:20:05:0f:f1:1d:63:
df:55:59:c9:a4:d7:c5:f4:ed:b2:b0:0e:3b:da:4a:6a:80:38:
fe:63:ad:82:f6:4d:41:9e:83:50:d6:74:3a:ad:0f:02:b1:33:
af:21:ac:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:33:44 2025 by rpki-client