Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dgohyp84EMdl1WJO5_730p1Xd9o.roa
File: Dgohyp84EMdl1WJO5_730p1Xd9o.roa (raw, json)
Hash identifier: OXOPnFrQGFN1LS1JsXZDF5521ZLbZlfBBudFpaK8rEo=
Subject key identifier: 0E:0A:21:CA:9F:38:10:C7:65:D5:62:4E:E7:FE:F7:D2:9D:57:77:DA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D01BF63E041DC6D45BAC43B37C5A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dgohyp84EMdl1WJO5_730p1Xd9o.roa
Signing time: Thu 02 Jan 2025 17:51:28 +0000
ROA not before: Thu 02 Jan 2025 17:51:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215667
IP address blocks: 185.254.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d0:1b:f6:3e:04:1d:c6:d4:5b:ac:43:b3:7c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e0a21ca9f3810c765d5624ee7fef7d29d5777da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:19:35:e0:34:b1:73:07:03:62:fb:b9:a8:
aa:cc:15:b4:1b:48:5e:4f:16:53:de:16:1f:e5:97:
e9:99:78:b7:88:eb:a6:a2:e2:2d:dd:9f:7d:73:b4:
e6:af:ec:19:f9:1b:2b:b9:64:18:8f:c5:29:77:c8:
9b:a7:30:a6:10:c4:d0:3b:14:26:e7:45:5a:f1:4b:
df:4a:eb:c0:f6:b4:f6:e7:90:2f:8d:19:6a:8f:98:
6f:16:84:f2:97:cb:82:f7:f5:b6:6d:e0:d8:a3:35:
0c:6f:dd:0c:42:76:89:ce:01:84:43:bd:58:68:cd:
7b:75:8c:44:d3:51:8d:b4:1c:5d:9e:95:93:6e:aa:
59:ce:9f:84:47:4d:4b:09:38:89:f9:96:b4:25:da:
a7:9d:28:38:b4:b0:16:d6:d6:00:c9:1e:b3:7e:6d:
d2:a9:3a:02:d4:f6:ad:c5:35:3e:fd:f7:28:b5:10:
4a:75:89:8f:68:21:00:7a:54:37:51:d1:af:5f:41:
07:8a:de:ef:e7:ed:35:c5:7f:65:0f:d6:fd:27:d8:
59:69:b3:4d:8e:5d:85:ed:30:9f:8b:11:05:1a:0d:
28:0b:e2:0e:6f:26:0e:8d:2e:f2:66:25:54:85:80:
18:54:cd:ae:81:b3:a0:69:52:98:c7:f1:51:fe:b8:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0A:21:CA:9F:38:10:C7:65:D5:62:4E:E7:FE:F7:D2:9D:57:77:DA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Dgohyp84EMdl1WJO5_730p1Xd9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a4:01:ab:06:5b:18:3a:90:c1:11:21:8a:5c:3e:98:86:3e:
5b:9c:10:e4:3d:bb:51:d6:ee:5e:6c:c7:50:1b:86:c0:91:62:
8f:7c:59:d0:39:78:f1:72:86:e0:1a:31:05:d9:c1:d5:66:cc:
c4:2b:fc:61:ec:f2:df:ac:3e:9a:29:70:51:18:fb:c3:16:04:
85:40:d0:1d:2a:13:38:17:2f:1f:a4:c2:11:48:54:e4:cf:c4:
75:28:e9:f2:9a:34:45:bf:13:81:67:56:d5:a4:62:09:f6:dc:
9b:33:e2:34:05:38:70:1d:8e:73:54:72:4d:ec:b9:e5:af:79:
8c:db:f1:95:56:12:23:51:2e:a7:e8:9f:73:6c:ee:33:48:79:
85:72:e1:ae:b2:49:70:b8:d5:6c:43:b1:a4:ea:90:5b:55:11:
80:75:60:3b:9e:67:1a:4c:0e:2d:59:8f:1a:65:2f:ff:fb:f0:
ca:f1:86:ff:cf:45:6a:b6:16:26:f6:32:b1:82:76:b5:96:81:
16:a1:4d:85:36:46:a5:0a:45:44:d5:f9:03:34:0f:fd:82:2c:
82:2b:8c:1d:d6:35:a9:16:b8:c8:b3:7f:51:15:5e:64:b3:57:
04:1e:10:12:9f:fc:04:8b:7f:b6:a8:ec:3d:95:54:17:79:e4:
74:4e:db:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:45 2025 by rpki-client