Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/DhdGK18Qr8BfEi425qb4XqU3Df0.roa
File: DhdGK18Qr8BfEi425qb4XqU3Df0.roa (raw, json)
Hash identifier: zUZN1xRmcwh2/G+LSnUGvmnpV/nEFzaIhdcZknHnKqM=
Subject key identifier: 0E:17:46:2B:5F:10:AF:C0:5F:12:2E:36:E6:A6:F8:5E:A5:37:0D:FD
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 0194282309C0E02249F5C953BEC690B4A61D
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/DhdGK18Qr8BfEi425qb4XqU3Df0.roa
Signing time: Thu 02 Jan 2025 17:49:32 +0000
ROA not before: Thu 02 Jan 2025 17:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200699
IP address blocks: 185.56.81.0/24 maxlen: 24
2a06:e80:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:09:c0:e0:22:49:f5:c9:53:be:c6:90:b4:a6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Jan 2 17:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e17462b5f10afc05f122e36e6a6f85ea5370dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:19:74:63:f3:a9:27:5e:54:45:86:bc:f5:
79:ec:7a:09:f1:e2:ec:b8:16:89:1e:a8:71:bd:ba:
8d:d0:d9:ff:b2:85:0f:d1:12:a2:2d:c0:bc:cf:8d:
e8:61:62:c3:1a:f1:c8:6c:18:d2:bc:34:83:ea:11:
aa:f9:07:7e:e5:ed:ba:8e:e9:71:91:53:d8:3b:44:
a6:c3:bd:67:d6:21:49:d1:ea:76:3a:59:4b:ac:f2:
7d:4e:26:b2:e1:47:f7:6b:7b:ee:8d:df:3e:14:0c:
b4:c2:c3:62:06:be:1e:14:e1:b6:ee:04:ef:42:f2:
3c:42:c7:f7:80:ba:65:9f:b4:e4:ff:21:25:9b:7b:
3c:f0:93:0a:4f:87:cb:af:00:fe:1c:9d:47:40:50:
43:dd:e2:6b:e9:2f:9b:4c:fb:d2:f6:ac:df:cb:b5:
12:51:f0:11:af:81:d2:b9:fd:db:9d:e7:41:ad:18:
04:86:f5:82:a0:ca:21:f1:c1:7e:f9:34:69:0e:55:
04:d0:db:ed:b6:80:9a:d8:d1:ee:20:2a:59:15:c0:
3a:78:6a:d8:80:9e:b7:1f:b1:86:75:1b:91:46:a3:
e1:e0:a1:74:f3:fb:a0:25:0b:6b:db:09:fe:66:a7:
af:72:cb:59:9d:d1:e0:71:f5:8f:41:e0:65:b0:16:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:17:46:2B:5F:10:AF:C0:5F:12:2E:36:E6:A6:F8:5E:A5:37:0D:FD
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/DhdGK18Qr8BfEi425qb4XqU3Df0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.81.0/24
IPv6:
2a06:e80:1000::/36
Signature Algorithm: sha256WithRSAEncryption
79:01:22:a7:2e:23:85:96:13:6b:fd:e6:8a:57:83:c2:c4:98:
2b:79:48:f2:00:4c:e1:6e:0c:7f:a7:a0:24:f2:a6:ff:64:2b:
6c:6d:a2:04:30:71:38:e8:3d:49:4e:70:4c:03:9b:d2:88:10:
d9:e8:a1:a7:ed:1a:a7:16:dd:95:ef:8d:2d:f8:07:2e:2e:fe:
cf:f8:c1:16:8d:c0:56:74:0b:27:4f:94:97:2e:85:88:59:a4:
f9:52:35:b2:bd:b8:af:ef:a7:41:fd:fc:32:39:13:51:40:13:
0c:69:22:7d:3f:b7:2b:16:04:37:26:e3:84:e5:fc:31:cb:ce:
76:aa:94:8c:98:e1:6f:89:47:3b:af:0b:fe:13:c9:c2:64:9a:
b1:f3:d4:d4:f6:cf:1c:55:c3:e7:a0:e7:a1:8b:99:9d:b3:b5:
f3:aa:af:d9:a9:9f:95:92:28:af:8a:72:0d:c0:27:4d:0b:3d:
db:4c:b1:51:21:94:ad:29:25:8b:dc:e9:08:01:1d:21:46:06:
97:2a:53:4d:1b:9c:7e:20:6f:36:52:02:ac:69:f5:32:59:10:
c9:a9:fa:68:6e:f1:ee:d6:ce:04:02:55:7b:2d:0e:e9:9d:13:
bd:7c:94:18:43:31:d1:72:c9:ad:0f:16:e4:17:ed:c0:e4:f9:
2c:28:45:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:00 2025 by rpki-client