Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/DQfIEoXTsX4hjARlWuTZqThAeA0.roa
File: DQfIEoXTsX4hjARlWuTZqThAeA0.roa (raw, json)
Hash identifier: BiGW3GsERqTMcmti5d4+0u8B8YdLVW43FxSBCXsifjw=
Subject key identifier: 0D:07:C8:12:85:D3:B1:7E:21:8C:04:65:5A:E4:D9:A9:38:40:78:0D
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B576E79A9D46380DEC9AEBCAD049A8
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/DQfIEoXTsX4hjARlWuTZqThAeA0.roa
Signing time: Thu 02 Jan 2025 15:49:51 +0000
ROA not before: Thu 02 Jan 2025 15:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40934
IP address blocks: 82.98.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:76:e7:9a:9d:46:38:0d:ec:9a:eb:ca:d0:49:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d07c81285d3b17e218c04655ae4d9a93840780d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:d2:dc:ff:73:41:92:6b:a8:0c:5f:c2:9c:
c0:bd:26:62:29:c6:3b:22:98:05:5f:12:ed:b1:be:
e1:39:7d:3e:25:9c:0a:06:0d:a8:d6:17:79:30:28:
92:e8:c8:44:5f:17:9c:50:1c:b0:66:e3:ed:ac:c3:
26:e8:66:41:a6:b9:fb:bd:e7:93:03:36:c3:10:7b:
77:e9:93:e5:c5:49:80:29:e4:14:46:a6:d8:f8:bb:
e2:26:0e:6e:c0:e5:f4:a0:80:48:3d:34:80:dd:22:
99:11:7b:8c:70:15:f3:34:48:4a:35:2e:50:81:35:
30:6f:5a:b6:ab:b6:4d:81:07:26:b3:ed:4c:68:c7:
95:93:4a:ae:b8:7e:c8:d3:fd:3a:4d:4e:2a:68:1c:
8b:40:ce:4e:ce:24:ab:fc:08:f0:84:43:90:e1:82:
0d:4f:fb:7c:07:72:ea:49:1b:86:df:b5:6f:10:09:
fb:f5:f4:49:57:3a:1c:20:e0:d0:1f:21:57:1a:f0:
d0:8f:9f:16:b3:ae:69:2f:30:a2:8f:aa:3d:a8:96:
94:81:b6:f2:5e:6c:75:6d:f9:1c:c7:1c:94:be:ee:
72:fe:f3:df:58:6e:94:fa:fc:97:78:3f:ad:47:6c:
08:ee:3c:57:5f:3b:a7:e8:a3:6b:a1:55:77:63:ec:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:07:C8:12:85:D3:B1:7E:21:8C:04:65:5A:E4:D9:A9:38:40:78:0D
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/DQfIEoXTsX4hjARlWuTZqThAeA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.199.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:48:d1:75:6f:16:19:da:29:62:30:90:25:b8:d1:49:19:3b:
0e:41:f0:25:d6:ca:41:a2:29:4f:32:de:72:3d:ee:35:5a:0d:
84:bc:fb:c7:e0:c9:ba:4c:f6:1b:56:94:87:15:52:09:76:d4:
59:56:71:24:3e:70:cd:3a:b4:65:bc:4d:a7:cd:5e:fd:aa:3c:
13:f1:3d:cb:6e:b8:26:67:8e:a8:66:78:8a:09:70:f4:d2:b2:
aa:a5:25:cf:e0:79:70:42:61:bb:fb:6e:d4:7c:b5:50:1b:11:
3e:02:98:05:ba:a7:68:cf:bf:fd:1b:72:ed:6d:59:a1:eb:55:
22:4e:5c:2e:85:77:5d:73:39:56:55:34:dd:6d:b7:71:d1:64:
75:12:40:4d:d2:c5:eb:6f:83:86:55:34:5b:47:93:46:69:bb:
ab:d9:9f:09:ef:23:8d:57:04:40:7a:07:6b:43:9e:cc:ea:f2:
a3:48:32:0b:35:b0:85:43:30:b1:b2:01:5e:da:15:8b:b1:b2:
e5:c6:7b:8b:e7:ec:87:24:94:73:f5:37:f2:06:f0:cd:f3:5b:
21:f9:9f:0a:44:ef:ec:21:51:00:c1:c8:58:e2:8e:5b:b6:cd:
90:3f:8b:2d:2d:99:61:d3:c2:1c:dd:2a:a8:23:7f:f2:15:53:
07:e9:5f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:39:31 2025 by rpki-client