Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/DaVvwNhmLZ7YvB4G_4EErsgVRto.roa
File: DaVvwNhmLZ7YvB4G_4EErsgVRto.roa (raw, json)
Hash identifier: 9N2XrCoRGQ94Srik137EIdOpwG9c0HxGyO4AFS+YxkQ=
Subject key identifier: 0D:A5:6F:C0:D8:66:2D:9E:D8:BC:1E:06:FF:81:04:AE:C8:15:46:DA
Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial: 019425FDCD5656F31179480F220C415C9A8E
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/DaVvwNhmLZ7YvB4G_4EErsgVRto.roa
Signing time: Thu 02 Jan 2025 07:49:37 +0000
ROA not before: Thu 02 Jan 2025 07:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215503
IP address blocks: 185.178.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cd:56:56:f3:11:79:48:0f:22:0c:41:5c:9a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0da56fc0d8662d9ed8bc1e06ff8104aec81546da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ca:49:29:92:2c:98:cd:0c:05:84:03:47:b1:
89:6c:c1:fc:72:31:b9:c4:b5:de:02:4e:d9:71:01:
fe:f0:54:d0:88:76:c5:22:9b:e0:16:7b:9f:b6:f4:
83:7e:80:b8:50:d3:42:32:27:8e:c3:42:65:05:18:
03:69:f0:a6:cf:18:51:5c:f5:be:7d:76:bc:64:8b:
ea:9a:a0:39:76:99:d0:40:a8:5e:bc:61:9f:4d:b9:
35:13:2b:59:81:92:bc:b2:1d:1a:bc:f8:c8:69:73:
7a:45:05:6e:df:97:2b:7e:e2:02:08:ee:94:de:97:
6e:e5:54:66:aa:5a:63:81:9f:ad:a3:6c:e2:b3:2b:
97:f9:69:4a:e2:cb:cb:9c:49:f4:95:b3:9e:c0:69:
10:38:74:36:07:9b:a3:c6:82:19:f0:95:08:98:54:
ea:54:20:41:a0:9d:f1:fa:ec:9d:1d:ce:53:59:2a:
af:c1:10:b6:2c:bb:eb:05:eb:e5:b7:a5:37:05:aa:
c6:29:a1:97:3b:a3:a3:16:ae:92:b3:e8:36:9d:6f:
b3:63:38:59:a6:ea:32:2f:05:3a:fb:de:11:27:c5:
53:92:1b:5d:c7:34:b5:26:17:b2:fc:12:16:9f:05:
7e:40:4c:3b:37:51:52:46:e6:1c:aa:c0:3b:7f:0d:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A5:6F:C0:D8:66:2D:9E:D8:BC:1E:06:FF:81:04:AE:C8:15:46:DA
X509v3 Authority Key Identifier:
keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/DaVvwNhmLZ7YvB4G_4EErsgVRto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:50:99:67:88:68:5d:c6:8c:85:a0:b1:2f:c8:e0:f6:1e:93:
7b:2d:bd:03:9d:5a:e8:4d:dd:08:4a:f1:f1:9b:5a:23:7a:38:
eb:8d:6f:4a:ff:48:8f:33:bb:65:4b:d6:2f:b5:53:b2:bf:e7:
0c:b1:32:41:93:29:44:cd:5c:2d:14:4c:66:66:f2:7d:2e:f4:
18:99:5f:98:20:48:79:31:1f:5c:dd:99:3c:00:98:48:0d:f3:
48:c6:63:0f:62:fd:53:0a:4b:1b:61:4f:8c:ce:45:be:13:9e:
6f:ea:9d:ee:3f:16:2f:f0:db:9f:72:a6:7a:48:d8:bc:70:87:
cd:38:8a:89:73:d8:d6:a6:b5:18:59:28:fe:f3:cf:47:15:5d:
39:5d:e9:6c:50:90:17:50:32:0c:4f:fd:b3:f3:66:6c:cb:65:
4f:39:b8:4b:2e:35:1c:9a:33:f9:e6:99:8d:8b:ad:f1:07:01:
8c:64:98:da:be:93:a4:b1:f2:e4:82:34:62:37:9c:4e:71:7f:
40:2a:19:55:03:36:4a:4c:48:27:57:93:86:0e:0f:e6:f6:7a:
2d:32:9b:94:82:1e:47:f8:8d:74:73:ac:4d:14:f0:f1:86:04:
f3:50:11:ce:d3:a8:7c:09:51:d2:a6:47:87:ba:da:d6:9a:4a:
fb:60:06:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:02 2025 by rpki-client