Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/DJ2HKm_1c1O48zC-cc12FURV1-w.roa
File: DJ2HKm_1c1O48zC-cc12FURV1-w.roa (raw, json)
Hash identifier: odPYR1sTJx4nskAcxBKfAydZplTxWpbfAnjmQhPzJX8=
Subject key identifier: 0C:9D:87:2A:6F:F5:73:53:B8:F3:30:BE:71:CD:76:15:44:55:D7:EC
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 0194221F75ADC2E7CC8EEA77E66A4433F50B
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/DJ2HKm_1c1O48zC-cc12FURV1-w.roa
Signing time: Wed 01 Jan 2025 13:47:54 +0000
ROA not before: Wed 01 Jan 2025 13:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15395
IP address blocks: 193.138.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:75:ad:c2:e7:cc:8e:ea:77:e6:6a:44:33:f5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 13:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c9d872a6ff57353b8f330be71cd76154455d7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1a:8f:bf:f8:87:68:37:09:3f:74:54:c1:8f:
42:c6:fb:74:bc:f6:4f:27:10:2c:20:46:a7:04:fd:
fc:98:73:d7:8d:00:54:31:8c:32:ab:65:b3:da:8a:
d0:3d:11:27:63:03:ea:40:40:bf:61:9a:16:82:73:
97:c4:f9:af:9d:1d:24:47:36:dd:4a:11:0f:79:ef:
62:96:ba:35:e6:89:13:3b:0c:31:10:06:1c:f1:2c:
72:54:63:17:2e:f8:58:ac:b2:0f:f6:dd:ba:40:15:
ff:e6:75:a9:58:0c:16:55:8d:cd:67:bc:03:2f:80:
d8:80:42:ba:f3:0d:e1:3e:49:13:f0:ce:b9:fc:cf:
ac:c1:5f:77:60:b7:98:14:91:6f:97:09:58:fe:31:
d1:9e:4a:bf:e4:08:f9:97:4f:ef:c4:00:64:65:09:
3a:ae:f6:47:64:db:5a:ba:3a:6a:3d:85:07:50:4c:
d0:1c:c9:8a:e2:be:f3:a6:8e:54:15:b1:ff:60:b7:
69:55:38:1e:c4:3a:71:f5:a0:a1:f7:0f:96:a6:37:
da:bb:92:aa:6d:c3:69:4a:7e:eb:c0:5a:a8:f2:c2:
e8:11:4e:72:75:21:f6:03:97:cd:15:eb:e0:55:92:
d7:69:82:bb:cb:4c:fe:b8:78:38:d1:ed:94:13:a0:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9D:87:2A:6F:F5:73:53:B8:F3:30:BE:71:CD:76:15:44:55:D7:EC
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/DJ2HKm_1c1O48zC-cc12FURV1-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.122.0/24
Signature Algorithm: sha256WithRSAEncryption
52:18:5d:3d:a6:14:4d:e8:4e:00:2d:c6:69:bb:23:38:f3:07:
12:93:d6:a1:d2:5f:f8:02:f9:8d:4d:69:ee:ed:0c:ed:ed:57:
a4:d0:8b:dc:0d:2c:d8:82:c8:f9:04:fb:0b:26:7f:3e:b6:a0:
bf:44:20:70:6b:8e:63:18:6b:f5:67:8d:3d:d8:4f:60:a7:62:
4c:6e:49:fc:87:7b:a1:c5:e7:2c:7e:58:20:53:48:56:bc:ae:
a8:e6:38:06:60:87:46:fd:c7:ad:21:d5:02:9c:92:06:6e:58:
97:11:a5:97:7e:b6:da:4e:a4:4b:09:65:3d:c6:50:61:74:be:
07:a8:83:88:e8:a6:6e:01:47:a5:ea:73:07:97:4f:04:36:12:
36:a8:4b:51:31:83:4f:fe:2a:d8:a0:d3:34:8f:28:57:b1:99:
b1:a8:f9:f8:6f:ff:e9:50:ec:2b:23:c6:6d:40:0d:47:a2:20:
73:a7:97:1b:29:56:41:39:ff:e1:c9:1f:15:6c:e2:61:5b:14:
a5:ad:85:19:51:cb:a7:7a:91:b8:8c:d1:f8:24:fb:84:7d:01:
77:c7:82:29:6a:f6:ff:44:b0:79:dc:0e:88:f6:3c:77:e1:e0:
bb:06:61:ec:9f:89:8d:b9:ee:e9:77:bc:d5:3d:74:63:6a:f5:
63:4c:19:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:19:49 2025 by rpki-client