Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/DmRR3GF8-WQWeJRfv67c6IOtwYM.roa
File: DmRR3GF8-WQWeJRfv67c6IOtwYM.roa (raw, json)
Hash identifier: Ze30W45oSoQ4xQnw5Hx0X13TUUxpp4siUQM5FqBt76o=
Subject key identifier: 0E:64:51:DC:61:7C:F9:64:16:78:94:5F:BF:AE:DC:E8:83:AD:C1:83
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 01856DD4142DE0D15E74CD49044EDFCAC1F6
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/DmRR3GF8-WQWeJRfv67c6IOtwYM.roa
Signing time: Sun 01 Jan 2023 14:54:53 +0000
ROA not before: Sun 01 Jan 2023 14:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211804
IP address blocks: 185.250.240.0/24 maxlen: 24
185.250.242.0/24 maxlen: 24
185.250.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:14:2d:e0:d1:5e:74:cd:49:04:4e:df:ca:c1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Jan 1 14:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e6451dc617cf9641678945fbfaedce883adc183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:60:71:01:ab:a8:6c:dd:fd:d7:f0:ca:e3:
77:4b:fe:52:55:f0:41:6a:c0:7b:7f:b3:e1:03:19:
05:f7:93:94:04:6f:e0:7b:1d:b1:f3:a4:3f:37:f8:
25:b6:89:e0:f2:7c:c1:3a:9b:58:af:bd:72:3e:4d:
10:bc:35:84:b7:05:7c:ef:0f:49:b6:7b:bd:f2:18:
a5:02:8f:be:85:45:d2:f2:89:6e:58:ac:2a:4d:cb:
41:c4:44:97:72:65:80:34:cf:b5:a7:7d:57:02:c3:
66:5b:d8:88:9a:8e:ef:bc:17:7e:d3:2f:c1:5d:7a:
c6:5c:1c:8d:bd:e0:4f:90:59:eb:ae:03:c7:60:60:
70:53:97:2d:45:f0:fb:61:23:f9:76:73:60:98:e8:
14:79:dc:3a:69:2a:55:8f:15:f7:3b:c8:08:c3:ef:
7a:57:50:bb:cf:fa:e2:9a:fb:b0:b6:b8:a7:91:b4:
9b:43:47:0b:02:cb:f1:d3:56:5f:e4:67:e7:4a:e5:
d1:bd:85:b3:a5:24:15:61:82:f0:a5:df:c1:b5:17:
9e:81:53:53:8c:67:64:fc:ae:2b:60:0a:67:62:3d:
44:c4:1d:8d:32:c7:51:4f:c1:2d:26:86:c4:be:76:
f6:25:41:bb:25:9a:41:c7:9e:ff:5a:87:96:62:3a:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:64:51:DC:61:7C:F9:64:16:78:94:5F:BF:AE:DC:E8:83:AD:C1:83
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/DmRR3GF8-WQWeJRfv67c6IOtwYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.240.0/24
185.250.242.0/23
Signature Algorithm: sha256WithRSAEncryption
02:68:f2:8d:9e:f3:36:b6:af:10:ae:0b:03:72:cf:42:26:9a:
1e:ee:c1:b0:a6:a8:d9:ab:3f:76:5f:1a:1f:78:f3:ab:4b:78:
ca:b0:18:6f:5a:81:15:65:3b:f2:e3:6a:3b:d9:e3:93:5d:e3:
53:22:a9:d8:63:c9:e9:37:4a:cb:c6:00:43:ac:36:6a:ff:ee:
d4:0f:39:59:f5:de:58:28:f3:9d:d1:99:a0:2d:0f:d6:ab:65:
15:25:bb:4f:f6:37:52:89:29:94:e0:d0:b1:26:55:2b:0e:9c:
f5:d6:28:4f:16:68:4d:26:13:d2:20:8a:75:18:67:66:c0:66:
ef:51:1a:42:20:17:29:07:f8:ea:aa:d7:b7:2b:42:64:a1:c2:
f4:70:f6:5f:06:be:21:04:b6:01:97:11:d7:62:d0:10:1b:26:
53:57:e8:9e:1a:49:8e:48:ba:2f:1f:72:11:10:6e:ad:fd:35:
6e:b4:41:0f:a9:22:d7:a7:ce:37:29:88:30:d0:a3:49:52:fd:
14:62:45:9b:dd:66:da:c2:b3:47:19:f9:0f:f7:3d:84:7f:07:
48:d0:7b:18:6a:77:10:3c:72:ed:03:03:ff:82:46:4a:0b:df:
1e:39:02:40:b5:af:1e:00:4d:81:21:8b:c6:5e:94:cf:2e:9a:
c3:c6:8d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:37:53 2025 by rpki-client