Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DOpf2U-Ws9dEbqMlt17FzkXITdY.roa
File: DOpf2U-Ws9dEbqMlt17FzkXITdY.roa (raw, json)
Hash identifier: JjxN/HpGKEgg4h7/5HRp6TCWvWkJJA16GUZtAwSVNX4=
Subject key identifier: 0C:EA:5F:D9:4F:96:B3:D7:44:6E:A3:25:B7:5E:C5:CE:45:C8:4D:D6
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427487EA02DC7BD8396872D458A1215DF
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DOpf2U-Ws9dEbqMlt17FzkXITdY.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26636
IP address blocks: 2.56.246.0/23 maxlen: 23
147.78.124.0/22 maxlen: 22
212.87.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7e:a0:2d:c7:bd:83:96:87:2d:45:8a:12:15:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cea5fd94f96b3d7446ea325b75ec5ce45c84dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:fa:17:03:d2:0b:e7:12:b4:18:c7:cd:8c:
5a:6d:94:bd:9b:b0:00:5b:b4:d9:ff:ee:39:0d:ac:
71:4d:fb:0d:36:db:76:26:9a:c9:e2:90:ca:01:39:
17:61:63:68:dc:4c:f8:c7:4f:93:34:be:9c:75:c1:
cc:ac:d3:b9:d3:a3:f7:8c:39:2d:59:d7:8c:cd:7b:
cf:5d:e6:ef:94:0e:ce:52:e4:e8:c7:43:7e:36:c9:
15:f9:fc:f5:ce:da:f4:c1:bb:9f:0c:37:0c:86:b3:
3b:26:e7:1d:14:38:60:91:b4:b3:09:56:3c:e2:9c:
e9:2c:50:08:17:e2:ff:22:75:25:8b:0a:5d:30:33:
77:f1:b8:dd:d3:00:4b:8d:8f:28:e4:7d:7c:f0:f6:
59:11:3b:93:62:a7:a0:01:e9:d8:f5:6d:c1:f6:7b:
0d:1f:4e:ef:cf:d7:17:b8:f0:30:80:fd:65:c7:c5:
3a:23:0a:db:b5:6e:3c:2a:ef:85:ac:2c:98:36:23:
9a:53:de:95:c0:c7:13:ad:31:3e:7f:26:89:42:20:
dd:e5:04:c1:c8:1e:2e:88:30:9c:58:ae:20:fa:32:
2f:d0:7a:f7:57:fe:1c:b6:6a:97:55:5c:bf:bc:98:
38:b7:50:33:6b:b8:2d:fd:e9:90:4f:63:66:f3:f0:
3f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EA:5F:D9:4F:96:B3:D7:44:6E:A3:25:B7:5E:C5:CE:45:C8:4D:D6
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DOpf2U-Ws9dEbqMlt17FzkXITdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.246.0/23
147.78.124.0/22
212.87.212.0/22
Signature Algorithm: sha256WithRSAEncryption
09:2e:50:42:d8:2b:8e:32:b3:3c:13:82:d2:14:83:a8:07:01:
9e:d2:a4:7c:5f:e3:e8:2d:cd:6e:14:eb:4b:48:98:5c:cb:2e:
6c:97:03:e2:d0:3a:02:2e:da:a0:5d:97:67:b0:34:9a:58:43:
0b:0f:10:f2:ae:8e:50:59:a8:09:55:84:c0:b2:63:c0:60:3c:
49:80:80:b4:bb:16:42:af:87:42:e4:94:59:16:10:64:6d:9f:
bd:f0:4e:3f:5f:51:c1:12:0b:5c:36:7d:02:60:77:7b:09:5e:
9b:88:dd:c6:01:7a:4f:26:a5:1a:4d:05:10:38:4c:10:43:1b:
ee:7d:b9:81:72:58:d0:9f:a8:2e:97:c7:49:bb:13:d1:6c:f5:
78:7e:28:5d:76:25:41:90:2f:9e:d5:db:70:9d:b0:0b:73:9b:
df:04:04:56:b0:b0:82:7c:b9:7f:7c:1c:65:6a:73:c4:54:8c:
ed:b6:7e:aa:eb:4b:28:3d:3c:3e:8c:e1:1c:d4:5d:9d:36:44:
51:30:b7:c8:80:03:b0:fe:45:ee:8f:f9:58:30:48:2c:c4:69:
97:0a:e4:38:4b:de:7d:bb:9c:41:7b:6b:a0:e6:24:94:1d:a5:
1f:9f:44:6e:c5:c0:b4:92:c2:10:59:25:41:be:62:e2:1c:c8:
69:9b:21:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:06 2025 by rpki-client