Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/dpvfrInTYFYCDpSNy4nBJ7fMOBk.roa
File: dpvfrInTYFYCDpSNy4nBJ7fMOBk.roa (raw, json)
Hash identifier: MFcK6MCir3IwgLRCLZLFYaFpQhejKg3ixDBCQgs5rTk=
Subject key identifier: 76:9B:DF:AC:89:D3:60:56:02:0E:94:8D:CB:89:C1:27:B7:CC:38:19
Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial: 01942521A36CC5173A1ABBEEC201D657BD81
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/dpvfrInTYFYCDpSNy4nBJ7fMOBk.roa
Signing time: Thu 02 Jan 2025 03:49:09 +0000
ROA not before: Thu 02 Jan 2025 03:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12337
IP address blocks: 185.245.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a3:6c:c5:17:3a:1a:bb:ee:c2:01:d6:57:bd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Validity
Not Before: Jan 2 03:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=769bdfac89d36056020e948dcb89c127b7cc3819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:69:44:9a:0e:65:77:ed:00:2f:bb:13:14:
51:8d:87:dd:1a:53:46:23:bf:6d:46:ff:00:2a:2b:
66:2a:bf:74:13:c4:d1:60:7b:f7:2a:b2:e4:69:53:
b0:ca:f9:fe:32:b4:0b:c5:88:1f:77:0b:e6:84:0e:
d3:73:d7:de:b0:46:9f:bb:25:cd:e3:53:af:76:4e:
0c:7d:cc:cf:9e:9e:61:fe:b0:8e:67:80:d7:32:7b:
b8:3b:81:74:3b:15:23:9a:f1:09:23:ee:1e:15:b9:
77:9b:2b:9c:a6:f4:99:30:6b:47:a4:ef:60:22:90:
5b:9b:f2:be:1a:e9:79:ff:eb:d2:7e:98:13:6b:48:
1a:2f:0b:2f:ed:4f:f7:a1:a4:e3:e7:88:88:af:17:
d4:36:94:64:84:b0:01:23:4f:5a:15:08:91:d9:39:
7f:17:90:75:50:e7:2a:ba:ac:21:a4:30:29:81:eb:
81:e3:82:2e:ea:6f:5c:97:f5:c9:8d:db:cd:ec:fe:
f6:a5:e8:c1:0b:1e:b4:ea:ba:0d:dc:04:80:4c:49:
44:6c:21:26:40:dd:1b:1b:41:34:7e:a1:c7:c6:59:
b1:8b:59:0e:b4:a2:c4:61:82:4f:27:8b:29:c4:11:
0e:51:42:b8:6a:bb:fe:bd:36:5e:b6:ec:7c:f4:cf:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9B:DF:AC:89:D3:60:56:02:0E:94:8D:CB:89:C1:27:B7:CC:38:19
X509v3 Authority Key Identifier:
keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/dpvfrInTYFYCDpSNy4nBJ7fMOBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.100.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3d:2b:af:d1:87:e1:bb:7e:d5:a2:7c:8f:46:23:92:88:a2:
5d:db:fc:86:58:b4:4c:14:22:1a:cf:43:42:82:e2:87:88:94:
72:ba:85:b0:04:2d:54:42:14:e8:7f:7c:37:1d:5f:2e:ec:c6:
34:ee:95:5b:c9:2e:57:15:72:b8:3b:1d:48:0a:34:f8:e1:3a:
55:a5:c5:0b:03:54:88:45:dc:74:c6:22:65:f7:ef:90:99:15:
8e:7d:09:0d:5e:24:14:74:24:35:a2:ed:89:18:6e:00:0e:12:
24:02:af:8c:4e:ff:37:6d:e8:3b:f5:a0:2b:df:45:2e:29:c7:
b0:b4:73:2f:02:8d:65:9a:bd:72:9f:ca:6f:d8:14:4b:df:23:
af:2b:73:47:9a:92:2a:2c:22:25:d9:4b:03:25:23:25:72:c3:
a6:b4:be:69:c9:e2:56:21:20:8c:d3:b2:0c:14:09:f2:a7:01:
d8:4a:e4:aa:9a:73:d0:e2:d9:52:c0:59:d1:28:29:3e:1c:d8:
78:97:cb:e9:36:33:f3:62:75:b5:0c:82:d6:cd:0b:3e:da:3e:
96:20:02:30:da:42:3d:20:61:c2:7e:bc:cc:ed:b9:ca:ae:1d:
41:5c:da:ec:fe:f6:95:13:3e:bf:00:0b:88:97:c8:6e:e8:02:
c8:86:b1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:41 2025 by rpki-client