Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/DZd0pALHgJd9eZqJ0lqDYx2tP1g.roa
File: DZd0pALHgJd9eZqJ0lqDYx2tP1g.roa (raw, json)
Hash identifier: 6WUkxN9OHui6uTGjLyg1o7jDorDn1S/H4RzVo9det4I=
Subject key identifier: 0D:97:74:A4:02:C7:80:97:7D:79:9A:89:D2:5A:83:63:1D:AD:3F:58
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B0355191632F92FEFE62A77E623E6
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/DZd0pALHgJd9eZqJ0lqDYx2tP1g.roa
Signing time: Sun 01 Jan 2023 13:35:04 +0000
ROA not before: Sun 01 Jan 2023 13:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31141
IP address blocks: 194.6.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:03:55:19:16:32:f9:2f:ef:e6:2a:77:e6:23:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d9774a402c780977d799a89d25a83631dad3f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:4e:28:7d:d9:2a:ee:0f:2d:09:8a:84:a1:
f7:dc:51:cc:62:ed:6c:25:5d:4a:e7:9a:39:b6:82:
0a:38:a2:b3:3f:d6:40:b5:fd:1f:45:b0:86:eb:28:
73:d2:c4:13:b6:30:32:12:22:45:5a:53:2c:fa:65:
e5:ba:b0:03:12:9c:83:b9:0e:e5:f0:5e:76:31:85:
b0:70:0f:55:4f:94:16:3d:31:5c:c4:04:a6:b0:07:
81:78:7e:cd:82:c5:6f:ae:18:d0:6a:77:59:4e:0d:
f7:3a:85:c4:f0:18:4c:84:8e:dd:85:98:56:6e:ff:
d8:f8:0a:9f:62:7d:24:b1:44:00:79:66:17:1c:1d:
45:62:02:bb:90:e8:a9:7f:49:3b:83:dc:88:0b:24:
c8:23:f1:8b:14:5c:65:ee:1a:89:30:98:67:ae:2d:
fc:b5:1b:a8:91:bf:e3:f8:9c:d4:66:b2:83:a6:a2:
5a:84:a2:cc:1a:7c:6a:3a:22:64:e5:10:cc:60:a6:
69:63:0f:eb:55:89:f6:02:b3:5f:44:96:cd:53:24:
6c:95:85:97:09:10:1e:25:ca:93:f4:97:b2:c9:91:
a6:c6:79:c9:7a:58:69:ce:3f:c9:90:59:81:35:ee:
39:86:e6:10:d1:c8:47:d6:6f:f4:4c:53:3b:18:a3:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:97:74:A4:02:C7:80:97:7D:79:9A:89:D2:5A:83:63:1D:AD:3F:58
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/DZd0pALHgJd9eZqJ0lqDYx2tP1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.188.0/24
Signature Algorithm: sha256WithRSAEncryption
72:5f:2b:da:6f:c5:e4:dd:bb:6e:5c:3c:33:56:d9:1a:5b:58:
67:ad:46:db:d6:ed:12:8a:2b:71:8d:eb:19:23:50:9c:d5:e4:
1c:40:7c:5b:cd:52:32:25:01:f8:2c:a2:10:f9:ba:93:64:a9:
bf:9e:d2:20:57:75:f5:b7:76:ff:1d:1f:2f:81:a9:79:5e:51:
b0:3c:68:59:00:66:44:ce:6e:43:84:e4:99:09:5f:a9:46:66:
8e:c7:ed:97:31:16:5a:62:92:cf:8e:c8:4c:8c:50:4c:b5:b7:
bb:7b:8a:b1:58:82:8e:1d:2f:54:e8:06:30:fa:5f:83:bd:0a:
23:b9:55:2a:5c:bf:a1:d4:3b:ac:e9:10:53:40:fb:3a:32:d9:
22:47:8c:7d:f0:9b:0a:a9:7a:72:b5:b9:42:50:4d:9a:d3:53:
2a:83:aa:3e:91:9e:3a:0b:f7:6f:cd:63:d5:03:5b:d1:27:3a:
ba:8a:f5:2d:c0:98:30:34:9b:21:24:ba:23:63:62:e9:e2:00:
66:32:44:eb:91:ba:4d:5c:8b:ca:60:c8:36:8d:9f:08:1f:2f:
2e:b9:00:fa:a0:ca:c4:74:97:e1:c9:cc:3c:c1:88:ba:88:9d:
3d:f4:9a:7a:11:a0:6a:8d:8d:13:8f:aa:a7:9b:59:0f:ec:09:
8a:e2:62:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:16:30 2025 by rpki-client