Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa
File: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (raw, json)
Hash identifier: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=
Subject key identifier: 0C:5F:3C:66:7C:4D:0E:70:DD:2F:B9:BF:B6:94:2D:04:EA:C2:03:97
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019426D8685ECF29D208A5FA33AA91301AF3
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa
Signing time: Thu 02 Jan 2025 11:48:24 +0000
ROA not before: Thu 02 Jan 2025 11:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201295
IP address blocks: 94.74.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:68:5e:cf:29:d2:08:a5:fa:33:aa:91:30:1a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 2 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c5f3c667c4d0e70dd2fb9bfb6942d04eac20397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:04:ee:87:23:ac:e7:d6:06:0a:ba:73:ba:
a1:e2:6e:71:74:bd:39:a1:07:ff:0e:28:e4:ab:12:
fa:21:d9:85:59:ab:4d:8f:f0:ac:40:06:2f:b9:e0:
96:b6:0d:79:51:9c:19:ff:2c:2b:5b:98:2a:ff:25:
6a:82:e7:ad:64:a5:c4:99:44:83:47:24:84:1f:65:
cc:5e:c0:50:0e:3a:e5:ee:3c:f9:78:0f:74:f2:ac:
04:71:65:03:98:82:cb:ee:af:54:9b:c3:ea:c5:29:
21:27:a5:30:eb:e5:1d:86:7f:2a:3e:4f:a4:0a:c2:
b1:fd:a7:0c:d7:fe:19:d5:6f:39:0e:8e:d9:41:1b:
ac:02:ea:01:dd:e5:40:6d:1e:6f:3e:11:28:42:0e:
6a:13:a5:24:42:41:57:8d:21:9a:ba:1a:ad:9f:23:
a1:6e:82:e2:10:61:ba:ae:d1:8a:f8:38:d9:a4:22:
24:9e:c0:7b:e8:36:e9:2a:ee:e0:ef:e1:85:b2:2e:
aa:25:1e:1b:0c:62:64:4d:ac:3d:ba:3a:be:70:64:
b1:31:89:a7:fc:75:b2:26:3d:fe:e0:33:e5:17:7a:
86:0a:f2:c6:8a:f6:d2:3a:2c:ba:17:fb:fc:29:d5:
77:2b:f8:6d:32:be:dc:24:e3:15:c3:0b:04:ce:0d:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5F:3C:66:7C:4D:0E:70:DD:2F:B9:BF:B6:94:2D:04:EA:C2:03:97
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.145.0/24
Signature Algorithm: sha256WithRSAEncryption
59:6a:c2:6d:55:87:df:03:1b:bb:da:ce:0e:da:b0:c1:4e:3c:
80:30:6a:a5:7d:60:7f:c4:5a:5b:58:b3:ab:a9:5e:85:68:44:
e3:23:f8:4b:54:c1:e5:fa:80:a0:04:51:f5:c8:26:d2:72:12:
90:8c:d7:1e:99:71:e5:99:d7:9a:08:ce:91:5a:7e:c0:6c:14:
24:3a:3b:db:1c:89:78:18:e0:7b:b8:f8:d9:f4:4d:69:fb:71:
93:42:d7:ee:3c:a9:44:f2:e1:99:65:de:e3:2f:25:bf:a6:99:
ae:03:48:86:f9:74:c6:8f:9a:d2:03:fa:56:4e:ab:f4:84:91:
b0:f1:bd:d6:5d:2b:d9:e4:b3:36:e2:aa:de:08:21:b9:e7:96:
14:6e:fd:d0:cb:04:99:7e:dd:f5:7b:af:8b:36:0c:6c:56:27:
08:d8:f1:17:91:c5:0f:9b:3d:43:03:72:4d:da:31:41:66:07:
c2:f8:63:b7:f4:2c:7c:44:55:c6:d7:5c:0b:04:c3:da:f5:94:
ba:0f:9b:33:19:f4:59:c0:93:24:62:47:c1:1f:af:fc:6f:7e:
bc:37:fe:2e:0b:ef:03:1b:7e:1c:04:d2:0b:6e:51:7b:d0:2a:
ba:51:67:95:f7:45:18:09:00:41:2c:47:70:00:42:2f:89:1f:
0b:ca:c0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:10 2025 by rpki-client