Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/do2zpX_Bm2DhKEf2Sc8lD8WwNjg.roa
File: do2zpX_Bm2DhKEf2Sc8lD8WwNjg.roa (raw, json)
Hash identifier: bv1c6z9PT1mUw2A4b23SzSBhnRbg7tBzgx2vZRw5WYE=
Subject key identifier: 76:8D:B3:A5:7F:C1:9B:60:E1:28:47:F6:49:CF:25:0F:C5:B0:36:38
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 0192B2B285DD6436183A29DEC4279C8A9C13
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/do2zpX_Bm2DhKEf2Sc8lD8WwNjg.roa
Signing time: Tue 22 Oct 2024 05:28:16 +0000
ROA not before: Tue 22 Oct 2024 05:28:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59504
IP address blocks: 185.42.26.0/24 maxlen: 24
185.42.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b2:b2:85:dd:64:36:18:3a:29:de:c4:27:9c:8a:9c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Oct 22 05:28:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=768db3a57fc19b60e12847f649cf250fc5b03638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:00:28:0b:2c:8a:31:23:bb:cd:26:8a:98:e1:
03:c6:ba:28:8d:98:37:c7:a8:aa:49:0f:71:90:c7:
11:df:77:33:a2:93:13:b4:58:12:1f:d6:38:d4:15:
a6:75:9b:b5:2d:b3:92:d0:ab:38:64:73:bb:d3:df:
ba:7d:90:ad:38:47:80:25:1a:04:27:62:fb:1f:a4:
0c:6c:01:4f:1e:ce:ab:d1:12:b7:fe:ae:03:c6:9c:
db:e1:05:19:c9:10:69:4e:60:28:f7:d2:75:1d:c6:
63:75:ba:95:4f:e8:6b:2d:ea:dd:c0:00:3d:83:0d:
e1:90:c9:d7:a9:a8:cc:14:68:df:a2:b5:0f:ea:a7:
46:f5:a9:7e:1f:ee:83:d9:bc:d8:8f:48:b5:33:9f:
4f:5a:6b:23:cd:a8:e5:9b:94:1d:b8:1f:37:2b:c8:
1d:d8:c6:cc:d3:02:9a:8a:0c:e6:c8:ef:19:c2:a1:
96:9c:d4:2f:12:77:66:d0:14:fb:da:1d:15:fb:5b:
e4:af:5f:53:aa:98:00:76:be:c4:17:ef:31:46:dd:
15:62:76:8a:ee:15:33:cd:66:cb:99:40:40:08:55:
88:96:0f:14:40:88:03:fc:e4:28:2e:5a:b3:99:b5:
1f:01:bd:d9:c2:98:c5:28:6e:6e:24:f2:13:00:55:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8D:B3:A5:7F:C1:9B:60:E1:28:47:F6:49:CF:25:0F:C5:B0:36:38
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/do2zpX_Bm2DhKEf2Sc8lD8WwNjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.26.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:28:6d:db:97:6c:20:4d:7b:ba:cc:9d:c9:c4:fe:e3:e0:3a:
83:2b:e3:41:ab:a2:c5:26:83:a3:cb:66:bc:16:82:7c:ec:a1:
58:1d:99:f5:da:16:95:d2:cc:37:cf:c6:2f:23:e7:d1:cd:55:
33:83:c1:b6:eb:59:20:5c:ab:a0:d6:f9:f4:92:de:ac:3a:95:
a6:ba:30:3b:6d:3e:6e:a8:7b:ad:f5:63:5d:9c:8b:81:f2:5a:
19:c2:6e:dd:de:61:d2:ee:49:3b:30:f4:5b:80:d8:d6:fc:20:
13:d3:bc:6d:a4:6f:3b:37:64:cc:ff:1a:8c:15:c4:7e:d1:c3:
ee:55:d6:6d:0b:38:e6:05:e4:1a:40:1b:f8:fb:3e:47:d7:0c:
f1:55:9e:72:ce:e1:e8:96:74:01:7f:43:e4:01:18:7b:0a:2c:
e3:b5:c8:47:93:db:f0:cc:70:72:bf:3a:4a:9d:15:fe:03:2a:
a1:fa:9c:b9:c6:ea:39:8f:20:68:ae:9f:90:ce:13:82:60:13:
8a:9e:ae:65:f1:8f:9e:a8:60:34:dd:97:70:7e:5f:cf:f9:f0:
5a:d9:9a:e3:7b:8a:a0:13:0f:05:ab:b8:49:22:9e:66:a5:36:
20:7e:6f:1b:5f:4f:be:17:b9:b4:7f:74:37:2c:76:dc:d0:bf:
06:da:59:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:33:57 2025 by rpki-client