Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/dKYMWOSuDbDzG_55PxQ6zWUGjo4.roa
File: dKYMWOSuDbDzG_55PxQ6zWUGjo4.roa (raw, json)
Hash identifier: jx6o6656P1/2uAu6tNuMhpveGEMTalzlqd0P2gLiCYA=
Subject key identifier: 74:A6:0C:58:E4:AE:0D:B0:F3:1B:FE:79:3F:14:3A:CD:65:06:8E:8E
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01945FB550928400C1EB16D95A010EFB11C0
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/dKYMWOSuDbDzG_55PxQ6zWUGjo4.roa
Signing time: Mon 13 Jan 2025 12:48:25 +0000
ROA not before: Mon 13 Jan 2025 12:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136796
IP address blocks: 194.163.80.0/22 maxlen: 24
195.180.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:b5:50:92:84:00:c1:eb:16:d9:5a:01:0e:fb:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 13 12:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74a60c58e4ae0db0f31bfe793f143acd65068e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:ff:44:55:ed:ea:e8:0a:fd:4a:80:b2:51:
cc:42:9b:fb:30:b8:aa:6d:e8:c0:a6:2c:27:43:69:
71:42:bd:20:7d:b4:c7:3f:23:54:2c:30:bc:f2:07:
45:16:92:7d:2f:44:6c:b5:75:d5:9d:d2:57:9a:22:
b7:57:5f:19:b3:e3:44:8c:e3:82:9e:14:3b:05:49:
a0:48:b0:69:5a:a6:b0:a2:67:85:30:61:f8:da:d3:
67:0d:25:97:4f:fb:d8:91:4d:56:46:56:a9:b6:18:
97:05:35:73:92:78:c4:79:91:9b:2c:0a:dd:f3:b3:
79:32:12:64:32:61:68:d3:4f:50:2a:eb:84:cd:38:
d9:46:b6:20:17:92:5e:0e:ac:17:10:c5:c8:ee:f7:
f9:3b:58:db:52:d5:ec:c8:31:c9:6a:ee:92:9e:93:
0b:a1:4f:c8:cc:87:05:11:5e:b9:dc:68:2e:d3:51:
36:1e:62:b8:c2:9d:f0:01:78:c3:75:7e:50:f5:c3:
28:7c:8f:68:e0:ce:a1:2a:28:c7:a3:aa:1d:26:5a:
d8:ae:af:8f:6a:39:54:05:12:ae:c7:33:08:b4:57:
4a:7d:44:05:a2:7d:20:10:30:11:a6:54:24:9d:23:
28:c8:78:2f:62:d1:3f:89:7e:9e:7b:99:ca:f9:1d:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:0C:58:E4:AE:0D:B0:F3:1B:FE:79:3F:14:3A:CD:65:06:8E:8E
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/dKYMWOSuDbDzG_55PxQ6zWUGjo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.80.0/22
195.180.150.0/23
Signature Algorithm: sha256WithRSAEncryption
41:9a:8e:25:80:54:55:48:3d:6a:54:13:9a:11:4f:55:a8:a2:
43:ca:ed:d4:49:b0:76:63:b9:d3:80:3c:53:aa:b2:32:0c:5c:
84:92:db:b5:4a:c1:a3:2a:ae:2c:20:1c:b1:b2:22:54:3a:3a:
b3:d3:b8:47:d5:8d:c2:af:eb:53:63:6f:36:67:08:b4:3d:09:
39:a6:45:89:b5:a7:b9:86:4a:21:42:f7:b5:b1:aa:ba:a3:f5:
85:7a:15:d0:fe:f7:f7:53:13:a6:59:c9:61:ab:ab:fc:0c:a0:
be:13:8e:ae:bb:3f:f4:82:8b:6d:6e:e8:f4:32:7f:00:67:9a:
f4:b4:74:80:25:c4:b4:32:32:1c:3d:8f:2b:d2:0d:52:62:67:
60:ea:f6:e7:34:70:ac:68:b1:c8:71:39:5f:22:34:72:ca:3e:
ee:b7:75:55:75:73:d0:dc:ad:33:d7:a3:7d:d1:a0:21:f7:8a:
be:ac:ed:4c:ef:55:9f:df:6a:c1:12:94:f8:fa:86:9c:f5:42:
e3:5d:03:85:26:2e:d9:9b:de:27:1b:28:82:09:8a:3f:f9:9d:
a0:6f:50:17:c0:f3:cc:da:d5:ff:78:e0:f7:60:b6:f0:1c:de:
fc:05:9c:a0:93:10:91:65:3b:99:13:a0:06:00:2e:a7:ed:27:
6f:55:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:40 2025 by rpki-client