Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Dlsb_G1LYHi_vd6VbULIekH-Z_c.roa
File: Dlsb_G1LYHi_vd6VbULIekH-Z_c.roa (raw, json)
Hash identifier: Jh4GRWmE5Ow0D49xK33Nj0X+wQxXCEj+2lLG4Yz1okI=
Subject key identifier: 0E:5B:1B:FC:6D:4B:60:78:BF:BD:DE:95:6D:42:C8:7A:41:FE:67:F7
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0193221BD6CEB49E93BBCF9A8A6652872654
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Dlsb_G1LYHi_vd6VbULIekH-Z_c.roa
Signing time: Tue 12 Nov 2024 20:41:10 +0000
ROA not before: Tue 12 Nov 2024 20:41:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 84.32.6.0/24 maxlen: 24
84.32.52.0/22 maxlen: 24
88.216.20.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.98.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
88.216.129.0/24 maxlen: 24
88.216.185.0/24 maxlen: 24
88.216.212.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
88.216.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:22:1b:d6:ce:b4:9e:93:bb:cf:9a:8a:66:52:87:26:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 12 20:41:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e5b1bfc6d4b6078bfbdde956d42c87a41fe67f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c4:62:c7:42:62:08:e0:60:dd:e9:07:4d:c2:
6e:a5:a5:e6:bf:60:7b:a4:40:78:68:26:07:29:97:
52:e9:d6:ce:62:62:ba:f3:bc:6b:97:7d:07:20:86:
c3:a2:43:75:b2:28:4a:02:32:f7:87:55:ca:d2:7d:
ed:36:a6:3d:a8:ca:c7:3a:cb:ba:50:49:1d:02:eb:
45:bc:72:46:40:5c:b0:fa:c2:cd:50:ae:c8:7d:d3:
68:91:43:23:fd:ef:4e:07:f7:c8:ad:ac:cf:56:57:
eb:a9:c9:a4:f9:aa:93:61:f3:d2:fe:97:79:1f:e9:
f6:24:66:37:4a:87:cb:af:63:74:66:33:a9:67:d8:
c0:9f:49:33:ed:72:ef:f9:53:86:72:e5:cf:4e:23:
16:b6:2f:87:82:1a:fa:d9:26:b1:d7:1e:2d:d7:f5:
bf:bc:f1:58:7a:bc:03:d0:af:f0:ff:09:fd:70:81:
11:dc:1f:d0:04:a4:24:36:22:46:28:62:94:67:70:
ee:be:fd:ad:79:ff:11:a9:04:8b:31:ef:3c:f5:f9:
e9:d1:d5:2c:92:a9:cc:67:d0:fd:0d:94:69:e3:5a:
f4:a0:ee:d7:f5:c2:27:cb:f8:76:d5:22:8d:2f:a1:
18:e4:c6:9b:df:b1:65:d9:0f:6a:68:e0:57:d7:85:
fa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5B:1B:FC:6D:4B:60:78:BF:BD:DE:95:6D:42:C8:7A:41:FE:67:F7
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Dlsb_G1LYHi_vd6VbULIekH-Z_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.6.0/24
84.32.52.0/22
88.216.20.0/23
88.216.98.0/24
88.216.103.0/24
88.216.129.0/24
88.216.185.0/24
88.216.212.0/23
88.216.252.0/22
Signature Algorithm: sha256WithRSAEncryption
07:31:df:09:f1:bc:22:38:f6:88:d9:cd:db:40:9e:d3:b1:76:
58:c0:9c:71:64:38:af:1c:ff:0e:69:7e:bf:c1:a5:14:d2:f3:
18:a1:d7:ec:fd:a5:a8:5f:44:c3:43:5d:c2:7b:fa:70:dc:31:
ae:9f:05:9b:55:46:97:ed:80:63:42:27:6c:ac:c9:c6:27:fa:
cb:fb:9c:75:cd:0e:3f:33:44:c0:39:56:eb:ca:7a:3f:60:02:
18:bc:c1:78:90:09:71:b7:aa:8b:74:0f:d8:1b:e3:19:c9:de:
a9:c5:49:2c:0c:3f:75:1f:e4:4b:00:be:9e:ff:46:f5:a2:da:
bd:e3:c0:06:ea:fa:52:f0:e8:8d:ad:e3:86:d7:e7:4d:a3:46:
50:0e:f7:ea:3f:54:c8:c3:45:b2:04:63:b3:9b:9f:a1:ba:12:
63:4e:1d:86:5e:8a:24:9a:c2:c2:69:4b:61:da:df:a5:db:7a:
7f:4a:c8:9b:76:69:a1:6b:66:4c:3f:f0:98:cd:c9:2d:8d:b7:
af:ec:1d:a7:a7:16:ab:c7:cf:10:fe:91:fe:36:19:21:02:4e:
e7:69:5f:ad:c0:03:24:5d:a4:db:c1:d9:f3:66:ea:ac:c0:c7:
90:7e:4e:36:24:5d:9c:d4:94:99:89:64:af:29:5b:15:3d:8d:
0f:55:20:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:58:14 2025 by rpki-client