Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DgruKePNRuL9Hja6ewBSPCJG6ew.roa
File: DgruKePNRuL9Hja6ewBSPCJG6ew.roa (raw, json)
Hash identifier: wpcsa852SwhalYE3nfNI6CdsVY1eoAH1JFigxpKvZ7k=
Subject key identifier: 0E:0A:EE:29:E3:CD:46:E2:FD:1E:36:BA:7B:00:52:3C:22:46:E9:EC
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F8409D1F02A16477A729E9EF3DDC1
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DgruKePNRuL9Hja6ewBSPCJG6ew.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21219
IP address blocks: 195.178.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:84:09:d1:f0:2a:16:47:7a:72:9e:9e:f3:dd:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e0aee29e3cd46e2fd1e36ba7b00523c2246e9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:31:86:3a:e3:fc:85:03:1b:21:ea:97:fa:
3c:01:8b:f3:cf:44:1f:55:c1:37:c1:35:45:66:2d:
5f:f8:d8:da:f6:03:f5:11:67:4e:8d:11:ff:1a:f1:
8a:16:d0:64:fb:e3:f3:d3:9f:7d:62:eb:84:16:18:
99:68:76:23:9a:2f:8d:15:74:21:99:3e:a7:e1:fc:
70:20:df:06:1d:ab:7e:58:82:d9:f1:8d:b1:30:a8:
2d:d3:bf:cc:4d:df:20:ed:78:0b:f0:df:2e:7c:0b:
ab:24:ed:28:fd:54:e6:0a:f1:e0:ed:9d:1d:e5:bb:
6a:f1:fc:15:2a:1b:f9:bf:db:42:ca:48:76:88:5e:
6d:ac:e7:a5:51:e7:64:57:28:bb:72:79:63:91:da:
9e:ed:f8:83:58:f3:8e:5a:be:c0:30:0e:63:22:c3:
1b:ab:de:2c:c5:d9:9c:f1:05:b0:d6:0e:d0:2e:be:
15:38:90:78:3e:a0:76:01:35:83:a8:85:27:38:0f:
08:f4:56:94:7c:ae:48:3f:aa:2e:8b:3e:3c:6f:03:
a8:49:92:c8:9f:7d:d0:59:45:86:69:d1:63:6a:14:
8a:20:71:45:33:cf:5c:08:f1:fd:e8:f9:e1:d5:c0:
11:04:18:10:e1:fb:cd:ad:5b:67:c1:98:e6:99:05:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0A:EE:29:E3:CD:46:E2:FD:1E:36:BA:7B:00:52:3C:22:46:E9:EC
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DgruKePNRuL9Hja6ewBSPCJG6ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.150.0/24
Signature Algorithm: sha256WithRSAEncryption
37:fa:03:ad:ef:26:0c:3d:6a:41:19:03:04:4d:f7:d2:7d:14:
c0:6e:26:ab:fb:cd:28:49:9f:4a:41:f7:f4:6c:f6:26:92:e8:
24:b1:79:41:54:45:24:c8:6b:55:32:d4:43:aa:c0:77:ec:d9:
9c:20:1a:31:76:26:02:d4:9b:00:7a:4b:e2:e2:cb:fd:e1:24:
4e:6a:9a:40:c2:5e:ea:1d:d7:9b:30:e0:00:fa:06:69:95:ad:
36:f9:f2:91:87:e4:6e:37:4a:34:86:ba:6f:bc:4e:48:79:0f:
83:fc:58:27:3d:56:a5:24:34:df:57:06:6b:e2:f2:19:0c:03:
d0:ae:df:91:b3:83:61:3b:45:1e:ae:b7:7a:41:94:ee:98:56:
74:b1:4f:aa:22:42:1b:07:d8:13:dc:de:fc:19:50:15:f3:e7:
6a:be:52:39:b0:05:fe:ad:05:75:40:d8:6c:85:b0:07:6d:ea:
6f:ab:97:1a:7e:7c:91:f0:f6:05:47:fd:be:7f:4f:e8:d0:13:
00:7c:f9:8a:7f:94:0e:55:75:9b:69:ec:18:7f:fd:6b:c8:49:
cc:cf:60:e3:60:8e:9e:c8:4e:3b:7f:1f:cc:bc:31:e0:1f:0c:
f3:44:10:65:96:21:da:cc:af:86:e0:b9:0f:e3:ea:a9:94:09:
7a:c5:1b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:53:18 2025 by rpki-client