Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/DUQ0ry08WIUw5lopwRc9s2zZ5Ck.roa
File: DUQ0ry08WIUw5lopwRc9s2zZ5Ck.roa (raw, json)
Hash identifier: 4MMSMGpFYTj64gvYvAI9aZYJdovl51CVqQfi4na/C5A=
Subject key identifier: 0D:44:34:AF:2D:3C:58:85:30:E6:5A:29:C1:17:3D:B3:6C:D9:E4:29
Certificate issuer: /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial: 019542AB132A779D6CAE52D6ADD23493E57E
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/DUQ0ry08WIUw5lopwRc9s2zZ5Ck.roa
Signing time: Wed 26 Feb 2025 14:31:02 +0000
ROA not before: Wed 26 Feb 2025 14:31:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.192.184.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:ab:13:2a:77:9d:6c:ae:52:d6:ad:d2:34:93:e5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Validity
Not Before: Feb 26 14:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d4434af2d3c588530e65a29c1173db36cd9e429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:cb:94:97:ad:8d:29:08:cb:a7:80:e5:a3:
8d:bb:75:c7:92:c2:51:03:c8:02:f2:ae:ee:11:d6:
be:40:8d:ce:54:9c:70:73:19:8f:40:64:54:68:e4:
6d:75:fd:73:df:19:d9:3e:f6:2e:85:f3:ed:e5:16:
de:f2:46:16:80:36:87:6a:c3:6a:95:93:57:5a:1f:
b6:33:61:fa:c4:5a:c4:06:0b:9a:35:1d:3b:44:f0:
08:a8:8a:ce:02:86:b7:84:07:f0:93:b9:3a:94:7b:
ae:7d:2f:2c:47:da:d3:db:c8:71:33:a7:5b:6c:7e:
ca:cd:23:11:d4:fb:2f:7a:3f:3c:29:3b:4f:72:cd:
b8:37:1b:2d:7b:54:78:e1:9c:f8:26:2e:70:a6:09:
86:f7:0f:eb:e3:0e:40:67:58:6a:05:2e:ce:88:60:
3d:ac:44:a4:68:41:d6:72:57:6d:c2:bd:ae:b3:91:
57:d7:56:e5:b2:55:67:98:03:df:1f:9e:8a:fb:ea:
4b:f4:03:a5:fc:c8:bd:e7:d5:04:97:af:df:44:95:
15:bc:63:30:41:16:25:2d:a2:c0:de:a6:c1:c4:f5:
c6:31:11:81:60:ed:9a:70:5e:de:46:e1:1a:f1:4b:
b9:9b:29:2c:6c:c3:d7:aa:dd:a3:7d:ed:5b:2f:8e:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:44:34:AF:2D:3C:58:85:30:E6:5A:29:C1:17:3D:B3:6C:D9:E4:29
X509v3 Authority Key Identifier:
keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/DUQ0ry08WIUw5lopwRc9s2zZ5Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.184.0/23
Signature Algorithm: sha256WithRSAEncryption
96:5a:df:57:d9:8f:fa:c5:fa:2f:af:11:ef:63:ec:4b:1f:a9:
4d:80:3c:94:f1:c3:f0:01:73:fc:13:90:d2:0a:16:4b:ff:2e:
25:2f:12:88:36:3c:64:5a:cb:4d:e2:d5:60:61:25:0e:78:3f:
76:bf:65:34:08:44:98:e5:b0:a6:8e:7d:62:33:28:03:4e:06:
e6:5c:4e:96:00:04:b5:14:e5:87:37:31:4b:ae:2f:6d:0b:0a:
35:c6:f4:91:50:d6:77:63:19:29:b8:22:e6:9b:20:bd:17:b2:
be:30:87:43:aa:4c:22:27:ab:bd:68:25:f5:d5:d1:2c:5d:2b:
b6:50:a7:59:e5:8d:4d:c0:fc:c8:b8:08:10:26:7d:ca:2d:6b:
51:22:5f:15:9e:76:33:e4:5e:60:6b:60:3a:5b:fd:3c:a1:52:
87:35:6a:eb:55:ee:75:ff:8a:b0:de:ab:9c:9b:61:92:88:3c:
fc:c0:49:6c:ea:90:81:30:a2:33:6a:a1:8d:a4:98:6d:c1:a2:
23:2c:8c:41:2d:77:4c:c2:6a:46:c7:0a:29:e7:5f:7b:70:c1:
98:a5:ad:05:0c:72:a5:f2:9c:38:c7:a2:47:f5:e3:c6:bc:b9:
da:d8:dc:15:85:82:8f:6c:15:13:8e:15:82:74:03:4c:bb:2b:
c2:c4:a7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:37 2025 by rpki-client