Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/DoG2UFHCOj7zOTIUPjjt5XZyaMI.roa
File: DoG2UFHCOj7zOTIUPjjt5XZyaMI.roa (raw, json)
Hash identifier: o5jRgA59QPQWDTQLvIg+41ICmEKRDLb8Qb3vB5Fkcs4=
Subject key identifier: 0E:81:B6:50:51:C2:3A:3E:F3:39:32:14:3E:38:ED:E5:76:72:68:C2
Certificate issuer: /CN=cf2eee78a0084d831de1a2500183e16489516ccf
Certificate serial: 0194236A1362386C0D31BE4ADB20B8723CDB
Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/DoG2UFHCOj7zOTIUPjjt5XZyaMI.roa
Signing time: Wed 01 Jan 2025 19:49:01 +0000
ROA not before: Wed 01 Jan 2025 19:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211215
IP address blocks: 45.95.8.0/24 maxlen: 24
2a0c:3300::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:13:62:38:6c:0d:31:be:4a:db:20:b8:72:3c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf
Validity
Not Before: Jan 1 19:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e81b65051c23a3ef33932143e38ede5767268c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:2a:71:ef:d4:68:f2:06:a8:90:ff:f2:27:
6f:1d:75:c7:07:95:56:9a:c3:37:ab:ac:40:61:7f:
bc:7d:a3:0f:9d:22:07:b1:03:a4:d6:d3:45:81:70:
f2:18:50:0f:98:b5:a8:57:0c:d2:d1:04:7a:2a:eb:
71:91:9b:2b:f3:bc:98:18:b8:0a:14:a1:d6:99:96:
3b:62:5c:00:98:4f:9b:53:cd:9b:bd:33:4d:0b:ed:
b7:82:a4:73:8c:0e:59:48:81:e4:1d:c5:ae:ef:d5:
37:5c:fe:07:1d:f0:2b:5b:36:9a:65:20:a8:cc:13:
f1:b0:5e:5c:fb:45:bc:ff:80:c4:d4:db:36:25:09:
8a:98:97:68:05:a6:7b:a6:20:87:f3:6f:81:79:fa:
74:db:c2:b8:5b:ff:62:0d:48:c6:98:73:83:70:91:
ec:0e:c2:79:7c:7f:07:d6:d6:ed:49:a1:61:3c:2a:
07:37:3d:d6:9a:08:a9:b0:c9:8b:86:9f:f8:ad:4b:
9d:4d:26:1e:c0:23:9b:fe:59:a0:f7:32:d0:c4:2e:
46:d7:15:9f:94:b2:f3:8a:2c:27:cc:89:40:9b:e5:
e0:34:89:c4:a3:ff:c4:6f:5a:2d:34:7b:f3:1f:12:
7f:d0:95:d3:4c:3e:48:f7:c7:47:1a:97:56:7a:60:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:81:B6:50:51:C2:3A:3E:F3:39:32:14:3E:38:ED:E5:76:72:68:C2
X509v3 Authority Key Identifier:
keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/DoG2UFHCOj7zOTIUPjjt5XZyaMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.8.0/24
IPv6:
2a0c:3300::/32
Signature Algorithm: sha256WithRSAEncryption
8e:be:82:32:4c:d6:41:0a:bf:9a:13:a0:8b:31:3b:ca:6b:65:
5a:06:88:15:4e:74:96:4d:96:82:ba:8e:59:f8:70:d8:06:36:
5e:ea:1d:58:5c:1c:1c:4b:7b:f7:bb:49:92:ea:87:77:03:e4:
19:e8:7c:d1:5b:ff:69:ed:24:fb:18:81:0a:88:73:09:65:83:
ef:ce:66:99:0b:07:89:c2:53:32:1f:ae:e7:46:d1:1c:7f:0f:
50:df:6d:e2:f4:04:0a:4f:db:2a:de:66:ee:3c:c8:29:05:f5:
9a:22:d6:9e:48:29:14:2a:b4:89:0b:4b:d8:35:b7:bb:f8:c5:
17:16:ee:22:d5:d7:e1:46:37:0d:12:b4:06:b8:59:6b:71:ac:
e4:fd:ba:d6:94:cc:dc:9d:44:79:14:e2:13:a2:14:c6:40:6c:
7f:3d:fd:78:91:7e:60:13:aa:f6:90:38:db:55:11:d0:38:3c:
55:6a:cb:97:4c:56:01:d6:01:e6:8a:a5:7f:99:df:b6:c8:02:
6d:2a:1c:ac:7a:fd:6b:95:fe:2f:a5:06:dd:92:c8:0b:be:7b:
64:f5:85:61:d3:56:78:b3:67:fa:8e:27:b6:47:46:ed:de:5d:
e7:c5:8e:13:24:c8:a5:55:a0:e8:c6:7f:44:50:69:e8:70:d0:
ce:c3:20:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:03 2025 by rpki-client