Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/Dk824yYieLhb3lnVQMoI_RB7E3g.roa
File: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (raw, json)
Hash identifier: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=
Subject key identifier: 0E:4F:36:E3:26:22:78:B8:5B:DE:59:D5:40:CA:08:FD:10:7B:13:78
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 019423D75BC564DBD6F3BD8A6868D5852238
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/Dk824yYieLhb3lnVQMoI_RB7E3g.roa
Signing time: Wed 01 Jan 2025 21:48:23 +0000
ROA not before: Wed 01 Jan 2025 21:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.240.18.0/24 maxlen: 24
91.240.19.0/24 maxlen: 24
193.151.94.0/24 maxlen: 24
195.8.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5b:c5:64:db:d6:f3:bd:8a:68:68:d5:85:22:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Jan 1 21:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e4f36e3262278b85bde59d540ca08fd107b1378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0b:dd:90:2d:0c:0c:8c:2e:da:51:a6:ce:5e:
13:00:2a:fd:cd:5d:d4:23:56:eb:35:26:de:d9:58:
68:32:70:be:9e:13:1a:33:60:99:af:87:e2:01:9e:
07:78:08:7a:36:82:16:b4:78:9f:d6:d7:ed:61:a9:
f5:7f:cc:89:30:a4:dc:90:71:e0:19:08:6c:4c:bc:
d7:16:4b:72:fb:28:9c:bc:58:9e:d1:aa:00:3c:ba:
d8:da:9e:21:e2:4b:a2:27:71:30:35:f6:6a:cc:6c:
53:b2:4b:3c:2b:34:9d:f1:52:dc:45:a0:da:84:b6:
67:40:7a:00:48:97:2b:7b:3c:06:d1:9c:f6:c2:a8:
8e:66:5a:e9:17:15:cf:dc:99:56:b1:e7:9e:14:1b:
72:68:a3:e4:3c:f2:ca:11:16:f2:5a:b9:45:bc:1b:
84:8c:39:b1:44:00:31:d2:f5:d6:db:dc:0d:ad:0f:
f0:7f:21:fb:6d:f3:48:2a:7c:ec:36:9c:85:c8:07:
0f:05:c4:93:62:33:da:21:0a:1c:ec:ec:84:e5:a0:
51:db:70:ef:a7:18:23:f3:de:95:a9:b7:7e:15:d0:
76:26:1c:8a:c6:09:a9:60:82:8c:c6:de:f6:a2:24:
8b:ad:54:d5:a8:5b:61:7e:f9:08:d1:af:a0:c5:54:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4F:36:E3:26:22:78:B8:5B:DE:59:D5:40:CA:08:FD:10:7B:13:78
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/Dk824yYieLhb3lnVQMoI_RB7E3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.18.0/23
193.151.94.0/24
195.8.103.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:8e:fd:3f:f9:14:61:bb:6d:49:3d:17:45:fd:ce:fa:23:b7:
20:a1:5c:8e:b4:a4:96:53:95:4f:68:4d:40:a9:82:ac:9a:3e:
1b:0b:dd:94:bb:aa:6d:4b:01:e3:25:ed:4c:c0:0e:12:4f:97:
8f:20:3d:6f:cc:ca:ca:e5:8e:0a:9a:6a:4a:1f:66:62:0a:c5:
f3:37:fe:c8:70:94:66:46:e3:0f:f3:e4:a1:73:ee:d4:95:98:
10:31:cc:f1:c9:b8:1e:14:ee:ad:c5:f7:f2:f0:ec:3c:d6:8c:
b7:d3:3a:92:34:8b:c0:5a:6d:58:45:17:af:f6:3b:8b:c0:f9:
72:04:48:d0:74:b5:1b:86:54:b5:b4:e8:74:4e:83:e1:2a:dc:
c6:c2:d7:71:e1:74:8c:20:2e:7a:b2:1b:e2:60:16:b8:e0:f4:
6f:8b:88:4d:2d:81:33:e7:6d:36:09:8e:a7:bb:75:71:0e:9d:
63:df:e9:55:5c:0b:2c:dd:fc:cc:28:25:7b:75:c0:2f:ee:61:
d1:48:20:f2:8b:62:d1:f3:9b:22:77:af:46:5a:ee:fb:78:53:
f1:06:cb:cf:cc:08:95:16:04:e8:47:0b:78:58:60:21:b4:d4:
e2:0c:86:70:67:73:50:8c:d6:11:52:92:87:62:9e:29:22:87:
23:1e:90:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:39 2025 by rpki-client