Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/Dcjqka0vRB55CJDqEWplWQ0em2k.roa
File: Dcjqka0vRB55CJDqEWplWQ0em2k.roa (raw, json)
Hash identifier: QNtKb0wVTgOzXABHcHNsksEjhhvzQUkXJ+QzngWUeuU=
Subject key identifier: 0D:C8:EA:91:AD:2F:44:1E:79:08:90:EA:11:6A:65:59:0D:1E:9B:69
Certificate issuer: /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial: 01942521D16A43AEECFE5FF91D8188BFA071
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/Dcjqka0vRB55CJDqEWplWQ0em2k.roa
Signing time: Thu 02 Jan 2025 03:49:20 +0000
ROA not before: Thu 02 Jan 2025 03:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58243
IP address blocks: 185.207.156.0/22 maxlen: 22
2a0b:25c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d1:6a:43:ae:ec:fe:5f:f9:1d:81:88:bf:a0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Validity
Not Before: Jan 2 03:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dc8ea91ad2f441e790890ea116a65590d1e9b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:0f:0e:ea:c8:aa:6a:20:bb:b8:dc:c1:4c:
1c:6a:57:f4:d8:29:e0:b5:5d:8b:7f:b0:ad:31:a8:
4c:41:71:7f:97:a4:30:65:4e:0a:f7:3f:35:1e:7a:
03:07:26:be:7d:f8:d3:3c:12:4e:e0:9f:b1:87:85:
cb:f6:7c:8d:1a:5e:04:cb:92:99:cc:a4:b3:cc:bf:
a1:3d:f7:d0:12:5c:12:60:d8:d5:72:20:b5:9c:b3:
b3:41:b6:98:e5:9f:0c:c8:5f:9b:ae:c5:d0:05:33:
18:28:14:ad:0b:05:fd:ea:c0:0d:c1:74:7f:d0:51:
49:29:0b:a0:47:21:20:0f:4d:08:be:91:02:5f:d6:
57:ef:86:4d:8d:f4:6b:27:aa:cd:18:5c:0d:3c:b1:
86:c8:c7:72:17:42:5f:b6:6d:aa:48:18:4e:90:f9:
5b:21:b6:e0:92:f8:43:df:d7:38:bb:c3:f7:8f:67:
53:63:ec:bb:e2:03:4d:72:35:96:19:9c:45:56:96:
f7:37:e6:c9:29:57:21:aa:39:e7:33:c6:e2:be:83:
9f:49:b2:6f:e6:51:6a:d8:10:9d:45:12:06:5d:0d:
5c:e0:6c:fe:e0:bf:ce:7b:b7:71:d5:08:c0:09:a2:
13:3d:b2:cc:2f:d4:33:73:fb:35:7e:71:2a:7d:cc:
e3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C8:EA:91:AD:2F:44:1E:79:08:90:EA:11:6A:65:59:0D:1E:9B:69
X509v3 Authority Key Identifier:
keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/Dcjqka0vRB55CJDqEWplWQ0em2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.156.0/22
IPv6:
2a0b:25c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:ae:0c:b8:66:b6:34:97:67:44:c7:ea:08:b6:9e:4a:a1:97:
be:e6:3d:4a:e1:9b:f1:84:b0:c9:5c:8d:d4:e7:7f:40:5f:09:
a9:b2:c4:76:97:88:bd:5e:64:52:a0:6b:70:23:bb:7c:3b:f1:
b5:c9:97:a9:54:5d:0a:53:04:78:e4:6c:98:fa:b5:09:65:14:
45:fb:98:02:53:0f:e2:68:d4:b9:8a:4f:1c:11:0d:76:48:5c:
d8:82:51:ae:ee:f4:b6:36:d9:06:b5:a4:f1:31:af:04:32:aa:
05:b3:b1:39:b5:ca:f0:16:fa:87:28:df:c4:0c:13:db:af:54:
79:04:63:46:b0:79:4e:46:3b:22:87:b3:5d:87:28:0e:9a:71:
80:e3:08:f3:e8:9c:3b:be:f4:85:78:0a:a1:38:10:d4:e0:32:
90:12:ee:93:1b:5d:a3:98:3b:a1:59:58:fd:f9:80:47:57:32:
cd:a9:13:0d:28:7d:52:90:77:f9:1e:72:d6:02:40:d1:47:ef:
fa:83:a6:3d:0f:2a:e1:73:2c:b9:2c:b9:0f:fb:5f:63:d7:11:
00:81:9c:b7:2d:a5:49:fe:a5:cf:84:e5:ab:b5:69:96:3b:02:
bd:d3:1c:d0:b0:70:f2:ab:08:e0:35:52:10:d1:86:30:29:36:
6f:7b:1d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:35 2025 by rpki-client