Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/Do4PLeA5o1GoY13K0QrZV2b74eA.roa
File: Do4PLeA5o1GoY13K0QrZV2b74eA.roa (raw, json)
Hash identifier: B+FCeD+X05tR69YheF7VQWedc1p5umVaXn20qWaAN1Q=
Subject key identifier: 0E:8E:0F:2D:E0:39:A3:51:A8:63:5D:CA:D1:0A:D9:57:66:FB:E1:E0
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 019427B520534B592EEBCF16634D08E06417
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/Do4PLeA5o1GoY13K0QrZV2b74eA.roa
Signing time: Thu 02 Jan 2025 15:49:29 +0000
ROA not before: Thu 02 Jan 2025 15:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 906
IP address blocks: 193.41.248.0/24 maxlen: 24
193.41.250.0/24 maxlen: 24
193.110.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:20:53:4b:59:2e:eb:cf:16:63:4d:08:e0:64:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Jan 2 15:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e8e0f2de039a351a8635dcad10ad95766fbe1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:56:35:f0:3d:c5:a0:fb:26:ca:01:02:e4:
ca:ab:4f:f1:5e:89:92:1a:66:d1:88:68:6e:3b:5c:
23:a9:7b:b6:c3:30:69:79:59:1a:d1:af:e5:ad:58:
71:76:e3:c8:0b:13:66:ad:d4:31:18:1c:50:0a:a7:
da:79:83:97:32:45:17:66:08:47:4c:7a:53:b0:c3:
55:35:3f:20:74:54:38:57:fd:06:a5:43:0e:e2:3e:
12:5b:86:4c:eb:02:85:75:d4:34:a5:9d:56:18:2a:
fd:54:86:cf:00:bd:5a:6f:aa:27:63:54:f7:ae:bf:
ca:58:41:ab:75:63:4c:29:3e:6c:ef:2a:cc:01:14:
18:d8:2d:81:aa:a1:26:97:31:bc:78:92:c6:22:48:
4e:f5:55:bf:dc:75:48:6c:c3:5c:b8:de:fb:42:d6:
71:d7:7c:5b:f0:1d:79:70:60:42:96:c0:a2:30:70:
21:3a:bc:6d:4e:2a:dd:ff:e5:5d:e7:e0:05:8c:8a:
37:da:68:53:4d:27:84:30:e9:45:2e:4f:07:1d:bb:
e4:81:23:d0:99:83:6f:75:55:22:18:00:23:88:cf:
c3:51:76:39:7f:b0:50:9c:ef:ec:ab:e1:a5:28:86:
8b:bb:b2:f4:20:35:b6:26:71:ba:da:cc:6b:6b:a0:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8E:0F:2D:E0:39:A3:51:A8:63:5D:CA:D1:0A:D9:57:66:FB:E1:E0
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/Do4PLeA5o1GoY13K0QrZV2b74eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.248.0/24
193.41.250.0/24
193.110.200.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:41:e8:bd:99:82:74:d0:13:b6:b8:e2:26:be:81:fc:4a:05:
89:18:bd:22:00:57:72:b1:06:a1:ab:89:f7:2d:3c:4d:0b:be:
f5:04:89:ca:c7:76:3a:56:e0:24:92:9e:be:5d:47:73:ee:24:
50:d6:c3:1f:90:00:66:9a:3a:a5:54:0c:c1:2a:3d:67:5b:fd:
4e:c7:47:5b:cc:c7:8e:e0:75:2b:bd:66:90:a7:91:8d:63:99:
a0:7e:28:c2:8c:b0:1d:9d:b6:7f:02:ae:c5:29:dd:cb:29:89:
c6:cd:42:ec:58:22:be:e0:16:8e:43:44:90:9e:30:74:2f:31:
9a:4d:a4:c3:aa:35:4b:34:fa:68:c0:de:bd:66:06:6d:ca:e5:
ba:b8:7e:5c:2b:77:e1:92:bf:ea:3a:a0:9a:fe:36:97:1d:92:
96:0f:b9:fd:2c:74:f1:e8:b5:01:eb:14:aa:e5:9a:db:94:40:
ce:8b:0a:20:dd:c7:7f:17:98:70:18:50:7b:08:4d:06:33:c1:
8a:63:3c:ef:1d:ab:ee:c1:36:eb:12:ff:1c:7a:60:a8:50:a7:
46:cb:04:cc:6d:1e:7e:27:3d:ff:8f:9b:48:a5:d4:2d:04:4f:
71:22:34:50:25:91:d7:63:28:67:73:ea:61:b4:27:26:b3:26:
af:39:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:09 2025 by rpki-client