Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/DheYS6kXlTHMFO59gGUyPsW4eds.roa
File: DheYS6kXlTHMFO59gGUyPsW4eds.roa (raw, json)
Hash identifier: n/9tk9beMA1XkkvC1xAFHfiOMzHgwQU8810EuXnnbI8=
Subject key identifier: 0E:17:98:4B:A9:17:95:31:CC:14:EE:7D:80:65:32:3E:C5:B8:79:DB
Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial: 019421444509F76CF5BC8BD676FB3383097D
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/DheYS6kXlTHMFO59gGUyPsW4eds.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49206
IP address blocks: 83.118.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:45:09:f7:6c:f5:bc:8b:d6:76:fb:33:83:09:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e17984ba9179531cc14ee7d8065323ec5b879db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:b3:b7:b1:13:53:5a:08:3e:4a:4c:eb:90:
6c:72:fd:f8:ae:b9:87:37:9f:54:5b:97:2a:ab:c0:
c5:5f:e6:45:dd:03:77:58:7c:37:a3:86:2a:85:96:
e7:10:0c:90:98:17:ca:cb:46:69:bc:aa:ee:d2:36:
23:dc:88:ae:74:2c:8f:da:e7:90:f1:a1:62:6c:b9:
19:56:13:1d:f7:83:f4:c7:78:d3:da:89:c8:a1:26:
66:3f:4e:0f:5e:52:6c:63:c4:3e:44:7a:1a:2c:21:
4e:a1:d8:42:89:2b:7d:82:f8:ed:5f:93:a4:25:d9:
60:17:7b:99:55:4f:fb:e2:13:d2:ed:c7:d6:ec:a1:
89:9e:e1:4c:3b:2e:c8:8b:e8:3a:b8:f0:0b:63:fa:
c2:d3:0e:80:d3:91:e9:1e:ab:45:e7:16:06:96:d9:
df:88:76:4e:8e:b9:97:43:d4:18:a9:68:d2:a4:f9:
6e:4d:de:6b:32:dd:8f:3c:73:54:ac:14:7b:d9:aa:
0c:a3:a4:51:e8:3b:37:04:10:40:79:43:95:39:1e:
82:8a:8a:05:d3:0f:c6:83:75:a4:24:08:4d:e7:18:
38:7e:ef:e3:90:6a:41:b4:e5:36:93:58:fe:71:cb:
4e:db:c5:d9:76:13:e9:bf:27:95:f1:a9:98:93:bd:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:17:98:4B:A9:17:95:31:CC:14:EE:7D:80:65:32:3E:C5:B8:79:DB
X509v3 Authority Key Identifier:
keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/DheYS6kXlTHMFO59gGUyPsW4eds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.224.0/22
Signature Algorithm: sha256WithRSAEncryption
53:ed:d7:65:cf:5a:7c:44:1c:6d:4a:95:06:a0:97:13:85:52:
eb:22:be:43:9f:2c:ed:d7:e2:ab:95:44:14:56:16:5d:df:6b:
20:3e:3c:51:a5:b7:f2:21:b8:1f:2c:5d:d1:22:53:21:d9:1c:
2c:e6:f6:72:b3:52:1b:6f:cb:74:3f:2d:47:52:db:27:ff:52:
00:92:dc:54:75:74:81:1b:26:d2:2d:7f:f3:e3:3e:c3:25:41:
3e:33:0a:3e:e0:60:3e:75:db:5e:80:09:dd:92:49:74:70:43:
6a:48:90:f1:6b:1a:19:8e:11:96:44:b0:38:7e:5f:76:e9:fe:
df:9a:71:fe:ac:c9:28:e6:57:fc:d1:9f:65:17:1c:9e:1a:df:
48:22:8c:e7:f8:82:8a:9a:21:05:6a:3e:67:8c:a3:dc:a9:9c:
a7:df:88:60:13:4b:d6:e8:18:0e:a6:fd:70:28:0d:b6:74:6b:
7e:4b:37:60:d1:f3:d3:b6:99:69:18:d9:22:18:60:4d:1d:c4:
40:ba:94:e5:59:81:d1:8a:88:bf:91:ae:36:3b:d7:ae:f6:72:
46:bc:fc:df:30:18:8a:47:6c:60:4f:8e:11:0e:fb:65:28:a3:
91:17:94:3f:bc:c2:93:6f:e0:b4:f5:d4:7f:72:31:e4:95:eb:
36:3c:20:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:31:31 2025 by rpki-client