Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DTURcsf9G3uyDeYaLeFU1fgdFU0.roa
File: DTURcsf9G3uyDeYaLeFU1fgdFU0.roa (raw, json)
Hash identifier: kewNdN/GM7AhlPs6nSo5pxFLZg8EaMmzAF/3Hp3V06s=
Subject key identifier: 0D:35:11:72:C7:FD:1B:7B:B2:0D:E6:1A:2D:E1:54:D5:F8:1D:15:4D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0195BF3360ADD98C6F88C6CE0290D190A26D
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DTURcsf9G3uyDeYaLeFU1fgdFU0.roa
Signing time: Sat 22 Mar 2025 18:52:50 +0000
ROA not before: Sat 22 Mar 2025 18:52:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203061
IP address blocks: 185.239.244.0/24 maxlen: 24
185.239.246.0/23 maxlen: 23
185.244.105.0/24 maxlen: 24
185.246.236.0/22 maxlen: 24
185.254.16.0/24 maxlen: 24
185.254.17.0/24 maxlen: 24
2a14:1104::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bf:33:60:ad:d9:8c:6f:88:c6:ce:02:90:d1:90:a2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 22 18:52:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d351172c7fd1b7bb20de61a2de154d5f81d154d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:d3:0a:e4:75:24:dd:81:33:83:ec:80:ee:
2e:e9:5b:d8:98:f7:34:a3:0a:e8:84:e8:2b:a2:bf:
5e:2a:ac:dc:94:8d:7f:ce:7f:0d:fc:d5:9f:f8:a5:
af:ed:30:c8:eb:e9:80:55:e9:e2:e3:e8:60:6d:78:
44:ea:3c:3b:71:92:22:b4:cf:34:10:fb:a2:9c:a2:
20:ae:db:b1:5e:07:93:32:52:48:ea:47:f4:a4:a9:
b8:4b:c2:4b:73:83:0c:bd:e6:eb:f3:b0:c1:b3:69:
25:27:52:fd:6c:f4:f2:3c:5b:74:52:d8:03:8f:5e:
9a:26:b7:3c:05:ad:b1:a1:10:63:2e:7e:85:01:35:
11:bb:2d:ad:41:7d:1e:dd:e6:af:ff:ef:8b:98:b1:
a8:d1:2f:65:59:1f:5b:7f:27:b2:1a:ac:c6:7e:bb:
36:42:57:4c:76:f0:1b:1a:e6:58:b4:cf:33:c2:43:
23:98:c8:d9:ad:5e:a9:47:fb:7e:57:f7:4c:44:35:
65:4e:3b:e1:e0:47:91:77:d5:de:75:ff:91:18:d3:
c4:e5:0d:c4:31:d7:48:99:67:d1:a3:2e:81:8c:3d:
0d:d1:6a:be:42:48:2a:35:68:fa:29:9d:1c:78:a0:
34:9f:27:a3:0e:96:eb:93:ac:04:5c:48:3e:a7:e0:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:35:11:72:C7:FD:1B:7B:B2:0D:E6:1A:2D:E1:54:D5:F8:1D:15:4D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DTURcsf9G3uyDeYaLeFU1fgdFU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.244.0/24
185.239.246.0/23
185.244.105.0/24
185.246.236.0/22
185.254.16.0/23
IPv6:
2a14:1104::/33
Signature Algorithm: sha256WithRSAEncryption
49:e7:ff:be:7e:76:87:a1:e4:c0:84:5e:1c:8d:67:0d:32:f9:
f7:e6:e6:7b:85:2a:06:2b:62:59:3a:67:bb:ab:67:58:2d:4a:
b0:be:ab:1f:a5:3e:c5:6e:81:a5:cb:83:c9:ce:c1:bf:9a:81:
cb:92:8d:62:66:5d:34:36:25:fd:e2:86:ca:f1:be:ee:aa:27:
86:a5:bf:99:5a:70:46:37:13:4b:43:eb:70:74:52:ed:8f:29:
3d:36:c0:a4:c9:b9:08:be:7b:33:2a:20:99:aa:b6:bf:bc:c9:
9d:f6:fc:28:6b:87:ae:41:a9:99:f0:ac:2b:a8:e6:54:41:02:
51:75:05:60:53:73:41:93:42:a2:b3:fc:b5:05:15:a7:b8:bf:
aa:43:5e:f1:a4:a0:6e:16:84:c3:eb:d7:30:65:33:b7:c5:43:
a9:90:c6:ae:d2:68:a6:83:7b:d5:11:07:20:67:f8:2f:3b:8d:
29:b0:06:48:ec:cc:4c:b6:0a:b4:71:42:a7:50:04:9a:36:8b:
ca:41:3b:c2:73:18:de:0a:40:59:07:4f:32:79:2f:cf:44:40:
fa:ca:dc:fa:d6:63:80:b0:2a:a6:a3:a8:d9:d2:58:6a:b1:ae:
cc:a7:d2:bb:0f:b8:0f:bd:ce:69:f0:c7:68:42:fb:3b:bf:8e:
d6:e0:94:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:08 2025 by rpki-client