Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/0GRCDt4fJ388QfTkHCpESDtsT30.roa
File: 0GRCDt4fJ388QfTkHCpESDtsT30.roa (raw, json)
Hash identifier: k9OOgOfGm6/D5FgP/oCwjZmCMN3rSoxJmPb/amgvunU=
Subject key identifier: D0:64:42:0E:DE:1F:27:7F:3C:41:F4:E4:1C:2A:44:48:3B:6C:4F:7D
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 019426D8EA5AED003371DD623C34DA1CB89A
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/0GRCDt4fJ388QfTkHCpESDtsT30.roa
Signing time: Thu 02 Jan 2025 11:48:57 +0000
ROA not before: Thu 02 Jan 2025 11:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 192.44.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:ea:5a:ed:00:33:71:dd:62:3c:34:da:1c:b8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 2 11:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d064420ede1f277f3c41f4e41c2a44483b6c4f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:c7:b5:43:78:79:1d:18:b7:3a:2f:42:72:
29:50:7b:67:e4:87:ad:ba:e0:59:75:20:d2:65:23:
64:02:81:e6:d2:f7:d5:95:e2:c8:8f:2b:fd:f1:b6:
04:bf:a5:dd:fe:3a:02:35:7c:5a:92:90:6a:ee:74:
47:ef:e2:e2:8f:f6:07:a8:4f:77:f7:cd:59:df:8e:
31:82:9d:b3:d0:97:3a:15:4b:08:90:7f:cd:f6:13:
b5:26:3e:88:81:48:6c:7b:a7:6a:79:74:03:42:ef:
12:24:77:6f:88:02:14:c2:03:d1:82:71:77:6b:cc:
27:18:27:40:6d:1d:f7:47:2f:d8:fe:2c:9e:2f:bf:
4c:f4:c7:d8:4f:fe:fb:c1:53:c2:0c:2c:f1:c7:dd:
ab:d4:7b:7b:4a:88:0d:d8:6e:ed:ee:3b:d8:70:61:
99:15:74:5a:dd:0b:d9:9e:a4:ff:fb:2f:13:1e:23:
44:e5:e4:af:d2:69:15:62:66:ae:62:3b:51:f9:be:
e9:8b:b8:f3:dd:52:69:2a:a8:15:31:af:5c:99:e1:
2d:db:a5:4b:17:74:71:1e:4f:95:a1:29:91:a0:9f:
28:17:a0:a9:4a:59:91:de:51:c4:8b:6b:10:ae:44:
eb:cd:16:85:9a:e4:f3:af:00:12:0c:9a:d4:c4:ef:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:64:42:0E:DE:1F:27:7F:3C:41:F4:E4:1C:2A:44:48:3B:6C:4F:7D
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/0GRCDt4fJ388QfTkHCpESDtsT30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.26.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:37:ae:f2:e2:ac:e9:4b:e3:63:03:d4:48:79:26:78:83:10:
76:da:0d:c0:87:6f:ae:c7:bf:68:a3:af:59:10:00:bf:b9:56:
76:c7:55:08:fa:3b:0d:ab:58:98:cd:e5:29:91:bb:9e:e9:be:
1b:f2:45:8c:e9:2c:b9:29:c3:4d:cd:61:69:32:c8:87:3a:82:
c2:46:a6:bc:74:de:5a:7a:34:ba:2b:db:eb:a3:f3:70:d3:80:
97:e9:01:f9:e5:17:8f:88:ad:0b:4d:9e:5e:17:c2:db:c1:cd:
90:bb:6c:be:0d:0b:23:f2:da:b0:06:31:0a:0e:87:21:11:e5:
e6:f2:af:86:16:06:49:c2:7f:7b:54:ae:3a:90:b2:f8:66:2e:
8c:50:cc:3d:7c:34:e4:ba:20:a1:6e:a1:ea:4d:9c:a6:d2:c8:
44:3c:0a:53:8f:2e:16:3d:94:9f:21:1c:e2:b7:a9:32:8c:bb:
ed:4c:db:8a:a5:9b:64:c7:64:71:d3:44:e7:d4:be:f2:30:e2:
a7:bf:5c:74:bf:18:a8:82:7a:db:60:eb:2a:b2:9f:73:92:69:
51:09:cc:26:47:90:a7:39:c7:26:fd:82:12:32:c7:dc:7b:f9:
e1:b7:9e:40:03:20:6b:9d:f3:6f:be:4a:93:43:38:d7:49:a0:
58:66:7a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:37 2025 by rpki-client