Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/djNdVQcmVTrF_ImkfBTW1TEQZN4.roa
File: djNdVQcmVTrF_ImkfBTW1TEQZN4.roa (raw, json)
Hash identifier: DtPfbxjdA+NH1bgRX93+QdhSVAdl+yD2XBVTnWNlO4A=
Subject key identifier: 76:33:5D:55:07:26:55:3A:C5:FC:89:A4:7C:14:D6:D5:31:10:64:DE
Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial: 01942444FBF90A3393A0CBA0887D4BB173E6
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/djNdVQcmVTrF_ImkfBTW1TEQZN4.roa
Signing time: Wed 01 Jan 2025 23:48:08 +0000
ROA not before: Wed 01 Jan 2025 23:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46484
IP address blocks: 185.212.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:fb:f9:0a:33:93:a0:cb:a0:88:7d:4b:b1:73:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Validity
Not Before: Jan 1 23:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76335d550726553ac5fc89a47c14d6d5311064de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e4:d4:04:d2:bc:c0:13:d0:25:2f:d0:78:70:
a6:c1:e3:4b:aa:41:07:77:93:86:11:b4:5f:28:9f:
26:56:ef:c2:c4:5a:e2:56:88:9e:28:4a:65:bf:92:
48:eb:06:75:cf:ce:3d:4f:7f:89:b9:3d:ca:bd:8a:
c3:88:c7:f5:37:aa:97:33:1f:07:c4:5c:4b:3d:fe:
72:74:dd:c9:b1:c8:f0:73:3b:ab:2f:97:2b:c3:9c:
2a:95:a5:ec:58:a5:90:30:0e:50:e2:78:81:a6:c8:
d7:ad:2b:f4:56:77:26:c7:05:17:c7:51:c1:e1:dd:
48:2b:a4:99:a9:41:73:62:96:fb:ab:41:94:77:14:
47:45:62:6c:95:e4:f9:ff:74:9d:0a:c1:00:30:a9:
8b:13:33:4b:c5:92:2d:ee:b6:3e:a8:a9:34:2c:ef:
28:f0:17:76:f0:72:d1:e9:08:de:84:92:f7:ba:f0:
92:56:cf:88:d3:e3:31:5d:ba:c9:43:a3:43:91:ba:
de:10:0a:17:fa:10:3e:6b:dd:71:4a:19:47:85:04:
b4:a8:26:bf:d8:38:dc:6c:e6:17:bf:93:bd:5a:73:
e0:fb:89:ba:47:fc:cd:1d:46:cb:8b:49:7d:11:ac:
13:4f:79:8a:01:d0:33:dc:f2:9e:3f:87:6a:e5:13:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:33:5D:55:07:26:55:3A:C5:FC:89:A4:7C:14:D6:D5:31:10:64:DE
X509v3 Authority Key Identifier:
keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/djNdVQcmVTrF_ImkfBTW1TEQZN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.104.0/24
Signature Algorithm: sha256WithRSAEncryption
00:27:1a:fa:b0:5a:96:83:ed:5f:07:a7:25:6a:c0:69:81:ab:
95:4e:ea:3b:f9:c2:5c:e1:1f:68:92:30:a0:98:63:b8:3d:e8:
99:c3:14:a2:0f:bd:ea:7d:a7:4a:96:bd:ac:6d:47:03:73:b2:
37:7e:d5:ef:7a:4d:b7:c4:f3:4b:29:65:bc:86:d3:c6:50:97:
e7:e9:f1:6d:ea:df:ab:26:7b:f7:c3:0e:21:83:4a:56:14:3e:
f7:e4:e4:07:cf:c1:06:02:e2:9f:36:d7:45:40:e8:70:15:37:
2b:f3:79:13:97:0d:3a:38:59:8f:7c:97:18:3d:63:4e:90:d3:
e9:45:a7:62:f9:bf:e6:c1:18:fc:4d:a8:66:88:e4:79:c3:67:
82:80:07:03:2b:5e:e4:ab:29:c3:85:a8:ea:5a:05:0c:84:8b:
d6:63:35:7d:06:a8:11:07:34:77:92:90:b0:80:88:ae:30:1e:
9c:39:70:3d:a6:ba:48:fa:71:52:ee:a2:7d:52:2f:76:36:2e:
3f:3e:d5:e6:42:63:6b:da:28:8a:1e:06:d1:4d:32:f0:fd:5c:
26:11:dc:01:61:c2:ea:47:5b:90:ef:bd:16:79:03:f9:85:83:
e8:18:b6:c9:e1:aa:8b:fc:4d:9d:1f:eb:34:76:05:29:03:94:
cb:f1:22:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:20 2025 by rpki-client