Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/_DGUdigNlKiD9xO4QSEF4BKCt08.roa
File: _DGUdigNlKiD9xO4QSEF4BKCt08.roa (raw, json)
Hash identifier: z7WDVXgi3Pw2TkLUYXKxpCULS1iHPgf/F7suU7KGInU=
Subject key identifier: FC:31:94:76:28:0D:94:A8:83:F7:13:B8:41:21:05:E0:12:82:B7:4F
Certificate issuer: /CN=4b9d1ed66df01a1e4992a745ffdbbcd5a9e608cb
Certificate serial: 01856BDC8FD83283069BB151A81B6F1B31A5
Authority key identifier: 4B:9D:1E:D6:6D:F0:1A:1E:49:92:A7:45:FF:DB:BC:D5:A9:E6:08:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S50e1m3wGh5JkqdF_9u81anmCMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/_DGUdigNlKiD9xO4QSEF4BKCt08.roa
Signing time: Sun 01 Jan 2023 05:44:54 +0000
ROA not before: Sun 01 Jan 2023 05:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35782
IP address blocks: 195.10.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:8f:d8:32:83:06:9b:b1:51:a8:1b:6f:1b:31:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9d1ed66df01a1e4992a745ffdbbcd5a9e608cb
Validity
Not Before: Jan 1 05:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc319476280d94a883f713b8412105e01282b74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ec:48:8d:9a:7f:33:ec:f3:c7:42:94:97:36:
cb:e1:27:c2:85:bd:f6:14:0e:91:e4:27:3e:35:89:
9e:36:2b:07:7e:b7:ff:c7:ea:04:0d:84:50:50:5f:
4d:91:02:04:24:35:8b:ec:2c:37:12:8c:d1:0e:d6:
07:bb:07:b9:a5:d0:b7:ca:f1:00:a1:5e:fc:6b:b8:
d6:ca:b5:97:0b:29:5f:7c:52:d8:42:2d:e6:53:71:
58:b4:fd:82:e8:f2:27:12:87:35:5f:3c:21:a3:19:
0d:6d:91:3a:8e:86:88:cc:72:d9:c0:94:9a:f4:8b:
68:d4:7c:36:eb:f7:81:1d:7c:e3:40:cd:8b:67:78:
19:71:2c:40:5a:e8:b7:80:4d:28:e5:74:55:50:dc:
cf:08:c3:c7:67:a2:61:2c:dd:f6:12:ff:69:7a:82:
57:d3:32:5b:07:5b:f3:cf:06:e4:cb:04:f6:1c:82:
df:07:98:9e:41:26:a6:e5:9a:30:ba:a7:76:da:e2:
fa:91:91:af:6b:ba:55:6d:fd:ee:c5:84:2f:25:1e:
41:37:20:71:3e:85:38:ae:2d:19:9f:39:f7:fc:b1:
7d:ee:80:d1:92:35:8f:02:49:d5:ef:8c:ea:b3:33:
7d:fb:4f:0b:e5:18:40:8e:33:4c:79:d7:5f:93:fa:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:31:94:76:28:0D:94:A8:83:F7:13:B8:41:21:05:E0:12:82:B7:4F
X509v3 Authority Key Identifier:
keyid:4B:9D:1E:D6:6D:F0:1A:1E:49:92:A7:45:FF:DB:BC:D5:A9:E6:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S50e1m3wGh5JkqdF_9u81anmCMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/_DGUdigNlKiD9xO4QSEF4BKCt08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/S50e1m3wGh5JkqdF_9u81anmCMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.202.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:12:70:c1:74:00:7d:c9:41:8f:27:f3:46:1e:e9:e2:9e:ed:
ac:22:3c:3b:98:a7:05:53:da:18:65:2c:b4:f6:5c:62:bf:54:
00:2e:55:b0:cb:fb:8d:0a:9d:1f:8e:d5:f4:a5:55:b4:d1:02:
c6:8f:10:e1:6f:dd:49:a3:bb:b4:e6:f2:f8:01:1c:b2:59:f2:
af:23:f4:08:d4:a5:1c:86:8d:6f:3d:35:e6:b0:24:c1:d9:a2:
d4:3f:d9:60:05:03:7f:2c:11:87:0c:62:44:6d:de:2b:e2:a3:
40:91:5d:b1:a4:1f:2e:9a:04:b7:3e:84:14:d6:fc:fb:9a:5c:
77:6d:80:73:36:2c:38:28:4e:df:ef:64:0e:0a:c0:ab:cc:07:
15:ac:a5:b6:60:97:20:37:3c:a7:ae:7f:10:49:5b:26:bd:f2:
91:52:36:2f:c1:52:61:cd:c4:30:fc:bf:10:ca:47:6d:ee:5b:
d1:91:01:8d:e6:c2:d2:32:47:8c:ad:84:ef:12:a8:8a:73:d6:
c3:83:e5:f3:73:53:d2:fa:05:9f:5a:50:74:29:6f:8b:17:02:
b4:fd:9d:02:35:68:f8:20:16:10:95:ed:15:ed:92:7e:9e:7a:
02:00:d6:ed:48:d4:ac:72:be:5c:c0:c7:66:c4:33:14:ae:a8:
a8:39:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:48 2025 by rpki-client