Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/Dk8y_Ou1uZWQiNL6yHHBr0s0ttA.roa
File: Dk8y_Ou1uZWQiNL6yHHBr0s0ttA.roa (raw, json)
Hash identifier: R07SZsf5miM7Ul/UJEmVinbpjidx4vC3ZL0OhnTHSlY=
Subject key identifier: 0E:4F:32:FC:EB:B5:B9:95:90:88:D2:FA:C8:71:C1:AF:4B:34:B6:D0
Certificate issuer: /CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Certificate serial: 019586FFDD583A0A8D9ED8E611F240B37104
Authority key identifier: 99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/Dk8y_Ou1uZWQiNL6yHHBr0s0ttA.roa
Signing time: Tue 11 Mar 2025 20:57:50 +0000
ROA not before: Tue 11 Mar 2025 20:57:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 194.246.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:86:ff:dd:58:3a:0a:8d:9e:d8:e6:11:f2:40:b3:71:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Validity
Not Before: Mar 11 20:57:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e4f32fcebb5b9959088d2fac871c1af4b34b6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:88:be:6c:93:22:1f:13:9d:74:92:67:d3:c6:
3d:55:6b:f3:ee:4c:0a:c1:b6:a4:0f:c3:6f:49:20:
43:a9:39:c0:67:d0:dd:8f:d8:a2:19:53:42:0c:4f:
34:9a:72:b6:9a:5b:15:c6:ce:a9:30:13:06:e4:a7:
93:ea:14:30:fd:89:a7:13:fc:ae:6e:e9:a3:d9:71:
4b:94:ca:cf:03:43:c1:0a:54:63:c9:ae:aa:4b:b4:
20:a2:ce:68:e9:15:cd:4f:19:3e:14:43:53:fc:5a:
c3:00:72:de:dd:b4:14:32:1f:57:c6:1b:5c:d9:85:
44:9b:9e:a6:0b:2b:1e:20:a3:6d:36:d1:1f:0b:16:
e3:28:5b:b4:e0:2e:8a:90:58:56:4e:43:5f:c1:c4:
bf:be:3a:4c:e8:22:d7:65:d3:1d:b4:33:c3:3f:8e:
0e:99:38:da:f4:62:ee:31:b7:4c:1f:3a:1f:33:d3:
ef:ee:11:c5:8e:d6:a8:49:a6:79:c5:ff:1c:35:2b:
53:22:f3:e3:81:52:c4:30:66:0b:31:5b:95:d0:72:
94:21:87:d4:25:17:e0:b7:e6:b3:4c:39:24:0a:70:
57:d6:80:3f:02:84:33:37:fb:fa:83:1a:b0:bf:12:
39:de:76:64:76:28:6b:e7:12:73:6d:84:76:78:b2:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4F:32:FC:EB:B5:B9:95:90:88:D2:FA:C8:71:C1:AF:4B:34:B6:D0
X509v3 Authority Key Identifier:
keyid:99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/Dk8y_Ou1uZWQiNL6yHHBr0s0ttA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.34.0/24
Signature Algorithm: sha256WithRSAEncryption
20:74:3f:73:3b:33:c2:af:07:3c:a0:4c:8c:9b:60:d8:43:40:
4c:da:c4:cb:21:a2:94:03:c5:2c:f3:9a:fb:97:01:78:c4:a1:
55:44:e2:92:b5:33:10:b7:a3:58:16:2a:79:2b:88:6f:40:ea:
1d:68:c0:55:0e:98:75:0d:5a:d4:cd:08:be:19:cc:d5:45:88:
e9:71:74:8e:a1:dd:b0:2c:e5:46:ad:7e:02:36:aa:95:4d:25:
ec:e9:a4:5f:65:94:1a:43:6b:1c:a8:ab:15:6a:c4:ab:19:22:
b8:b0:79:7f:a3:0e:1a:11:17:db:f6:3e:1d:d0:bc:8b:d1:c7:
01:0c:e4:7e:a8:ea:ff:46:2b:bb:64:8e:83:92:4b:b0:b3:16:
07:ee:e4:ca:e1:89:67:f9:81:36:c8:8b:d9:fe:48:67:cf:b3:
2c:af:14:32:d9:65:0d:e9:18:3c:2a:a6:32:d9:ea:7e:e6:cf:
9d:b0:d4:19:92:5f:e6:78:84:86:4e:c4:f1:55:92:b7:71:a8:
d5:cc:1d:6a:47:fa:77:e4:d3:c6:b3:74:a2:84:f9:73:26:18:
2c:6c:30:56:b1:a1:48:7d:c0:1e:29:0e:25:a3:35:e4:c5:e0:
26:b9:a1:97:cd:da:96:30:24:ec:4e:08:18:44:eb:93:63:7b:
d5:78:e5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:38 2025 by rpki-client