Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/DLstc3U0rg1XJMzpW3kLJk6bWww.roa
File: DLstc3U0rg1XJMzpW3kLJk6bWww.roa (raw, json)
Hash identifier: aRJQLolF5fKnY48Uu+tEP6pfOTPeicajt7bpyIpZajQ=
Subject key identifier: 0C:BB:2D:73:75:34:AE:0D:57:24:CC:E9:5B:79:0B:26:4E:9B:5B:0C
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 0194274812929504B18ADE0EACEEFF802772
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/DLstc3U0rg1XJMzpW3kLJk6bWww.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34927
IP address blocks: 185.44.82.0/24 maxlen: 24
185.44.83.0/24 maxlen: 24
194.76.231.0/24 maxlen: 24
2a12:f340::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:12:92:95:04:b1:8a:de:0e:ac:ee:ff:80:27:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cbb2d737534ae0d5724cce95b790b264e9b5b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:c0:6b:ce:ae:09:27:e6:5a:9f:c5:9b:ea:
29:a4:c9:5e:a0:31:29:3e:da:17:72:20:54:fb:43:
86:05:17:c1:18:62:4f:29:bd:2a:41:8b:c9:49:62:
70:f0:6a:b4:0f:6e:93:46:c2:14:11:5e:ff:a6:22:
32:11:d4:ab:d1:be:eb:81:0f:0f:dd:aa:ec:f2:a2:
47:12:bd:22:ad:8c:32:43:99:7d:e4:90:19:c2:8e:
e2:43:a1:37:c2:31:da:fd:38:98:d9:d8:31:06:28:
71:83:eb:e2:b1:b4:97:7e:cd:ec:5f:ec:ed:8d:54:
b4:67:4b:9c:04:c9:b0:83:a5:45:5f:9e:48:8f:d6:
aa:d2:28:cd:e0:3f:c5:fc:ae:af:bb:94:62:c5:12:
85:a5:bb:c8:8b:1a:a0:bd:47:7f:60:ec:1f:bf:25:
ea:27:65:c2:f3:7f:96:61:86:d2:63:9c:d1:ad:50:
db:24:ff:ea:ee:28:88:26:de:28:ba:f0:56:43:47:
08:2f:4c:e4:a8:37:fd:e2:58:22:c7:96:eb:1c:43:
9c:ee:57:3a:7c:f4:32:32:ee:28:a1:02:9f:13:f2:
60:be:9f:f2:64:a0:ba:31:59:70:31:b1:70:c6:e0:
15:ce:fb:b6:70:e2:2e:45:41:8d:c7:f1:0b:d0:e9:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BB:2D:73:75:34:AE:0D:57:24:CC:E9:5B:79:0B:26:4E:9B:5B:0C
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/DLstc3U0rg1XJMzpW3kLJk6bWww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.82.0/23
194.76.231.0/24
IPv6:
2a12:f340::/48
Signature Algorithm: sha256WithRSAEncryption
20:ed:b6:c9:c8:ec:62:59:72:90:42:5c:92:be:4d:45:78:b0:
02:5e:79:63:0a:85:ea:53:3a:dc:87:cf:c9:95:60:50:27:f2:
20:c9:32:4c:ad:93:08:20:8b:c7:4d:8e:5e:e5:fe:b9:26:0a:
82:4d:e7:9d:3d:b3:88:8a:45:f7:4c:56:4d:58:fb:f0:ac:ce:
bd:49:4d:d8:4d:a5:2c:94:60:2b:4e:d8:d4:14:ff:b8:00:34:
26:8d:47:2d:4e:22:ec:23:5a:68:c1:47:a6:64:3d:2f:85:a7:
24:34:04:97:41:18:5a:be:61:65:82:d9:2c:c7:56:2b:1e:a3:
6b:3d:37:97:3e:16:a5:96:dd:e8:19:80:45:3f:e0:3c:76:a6:
29:0f:19:c3:c7:1d:26:5f:3a:2d:4c:73:c4:ee:78:51:89:39:
5d:82:56:73:24:20:d6:1e:4e:86:41:36:f9:20:94:8b:30:8f:
4d:4d:1d:f6:06:ea:a7:5e:6f:b8:c9:80:ad:d1:c6:c5:59:c1:
be:e5:eb:7a:7a:c1:30:28:66:47:a9:79:95:7f:08:00:e6:13:
6a:e0:52:b8:a7:a6:6d:96:7c:e9:ff:81:07:f4:34:c6:a6:c1:
f6:f8:1c:fa:1d:94:ea:f0:1b:3b:e9:4d:ee:2d:44:0f:4f:90:
3f:9b:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:33:19 2025 by rpki-client