Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/dRXssJ13yx35ENXgGitRyldcyQ0.roa
File: dRXssJ13yx35ENXgGitRyldcyQ0.roa (raw, json)
Hash identifier: GNYSRDBbtFSH98fHHAWFkKkpqHnJB5tc2K3fGmfA9Xk=
Subject key identifier: 75:15:EC:B0:9D:77:CB:1D:F9:10:D5:E0:1A:2B:51:CA:57:5C:C9:0D
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D651BCE5D6C66EA7B3A4725FBB1373
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/dRXssJ13yx35ENXgGitRyldcyQ0.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47748
IP address blocks: 94.155.47.0/24 maxlen: 24
94.155.48.0/24 maxlen: 24
94.155.49.0/24 maxlen: 24
94.155.55.0/24 maxlen: 24
94.155.93.0/24 maxlen: 24
2a02:4c8:af::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:51:bc:e5:d6:c6:6e:a7:b3:a4:72:5f:bb:13:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7515ecb09d77cb1df910d5e01a2b51ca575cc90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:31:fa:90:bf:c7:74:9c:f6:55:e0:70:3f:
33:24:52:c7:f1:c3:13:f8:b9:d8:ea:36:fc:13:42:
8c:10:9b:69:80:4b:6a:e8:90:d2:d6:bc:1d:11:42:
0d:e9:64:e2:58:24:ba:e5:e2:a2:8c:37:77:cd:51:
c7:e4:e9:83:cb:9c:c2:06:c0:87:5f:5f:56:75:ca:
da:3b:e9:27:fe:08:10:38:2a:e4:d1:df:6c:ae:68:
77:a1:ed:10:c2:a8:7a:51:6b:15:2b:5e:58:aa:e6:
c5:c8:cd:8e:0b:8c:63:a5:aa:f2:4e:d3:ae:cc:f6:
58:d7:2d:89:fb:db:bb:0a:a0:09:75:b1:d5:d7:98:
d6:45:7e:e5:26:38:c9:3f:76:28:9e:42:c1:dd:e1:
33:71:a2:4d:65:78:4c:d7:a7:14:24:b2:35:ac:ee:
16:40:79:52:a5:a1:6b:e4:7a:cb:e0:f7:72:92:08:
2d:2a:6a:e5:6b:7a:0b:b4:94:f7:17:4a:fc:28:6e:
b1:87:22:f9:cc:0a:17:37:5b:66:17:c0:cd:b8:8e:
41:11:d4:9d:46:1d:71:61:d4:12:e6:41:8a:2b:f9:
b2:cb:ed:05:11:10:c0:f5:ac:74:aa:2c:9e:27:90:
b4:99:8a:1f:69:98:d1:0b:a2:69:19:54:45:83:b8:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:15:EC:B0:9D:77:CB:1D:F9:10:D5:E0:1A:2B:51:CA:57:5C:C9:0D
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/dRXssJ13yx35ENXgGitRyldcyQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.47.0-94.155.49.255
94.155.55.0/24
94.155.93.0/24
IPv6:
2a02:4c8:af::/48
Signature Algorithm: sha256WithRSAEncryption
27:26:ab:51:ca:a1:50:fa:02:f4:0e:7a:6e:26:41:0b:c1:d0:
06:1a:85:90:de:8d:8a:85:c7:1a:e8:ff:89:af:eb:fe:5e:28:
ed:64:d1:40:74:ea:e5:31:b0:54:23:2b:fe:45:60:0b:d5:14:
28:0a:58:c3:69:db:67:d5:4b:43:76:0b:cf:76:47:b2:b8:75:
2d:35:5d:06:5c:cd:9c:9f:0b:ee:52:2e:94:01:68:43:5f:4f:
23:2a:94:f5:ab:f4:fb:e9:7a:2e:ab:ae:6a:c8:ef:14:a7:7d:
c2:07:a3:7e:31:55:59:79:f7:61:0c:29:f9:c5:78:93:c8:4c:
88:95:2d:39:3a:4f:dc:08:7b:df:4a:05:d1:09:74:0b:ee:fb:
d0:73:cc:69:24:0d:98:da:86:a7:c9:8b:a1:b9:4e:7f:ff:5b:
f7:41:ff:ee:7a:53:c5:2b:ed:cc:e9:15:13:52:33:0f:8b:a9:
0c:19:70:26:af:f4:3a:1b:c6:04:7f:86:ba:92:89:0e:66:d6:
10:8e:4c:48:eb:64:1b:e0:32:a7:97:ee:1e:95:7c:36:86:f5:
94:80:59:90:42:3b:76:9b:79:f2:39:38:8b:e1:ea:38:1d:46:
bf:0d:24:d6:9c:58:b9:41:9e:4e:30:7a:74:06:23:6d:49:10:
b4:3a:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:04 2025 by rpki-client