Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/dQ0oIYuDSKONFc7nV3PPFRMWji4.roa
File: dQ0oIYuDSKONFc7nV3PPFRMWji4.roa (raw, json)
Hash identifier: Vc/ZWST/3yTcZwfiqJU+Mt32w8429O3fCNWQTWPZzsM=
Subject key identifier: 75:0D:28:21:8B:83:48:A3:8D:15:CE:E7:57:73:CF:15:13:16:8E:2E
Certificate issuer: /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial: 018CC9BC6280836812C090BA2DC69F9B169F
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/dQ0oIYuDSKONFc7nV3PPFRMWji4.roa
Signing time: Tue 02 Jan 2024 10:33:35 +0000
ROA not before: Tue 02 Jan 2024 10:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209568
IP address blocks: 194.187.24.0/22 maxlen: 22
2a09:1840::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:62:80:83:68:12:c0:90:ba:2d:c6:9f:9b:16:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Validity
Not Before: Jan 2 10:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=750d28218b8348a38d15cee75773cf1513168e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:41:7a:c1:cb:01:38:d7:8f:25:10:5a:53:3b:
98:b8:a0:de:b2:b1:89:af:25:5d:9f:00:39:48:72:
3c:d5:80:ab:23:4d:46:44:72:7f:6c:f7:79:bb:1d:
fe:e9:e0:b9:16:8a:04:6e:ef:76:86:45:0b:60:ed:
10:2b:07:54:13:df:d3:28:19:b6:dd:3b:9c:00:24:
66:26:a3:5c:c4:51:38:7b:ff:58:7b:3e:b1:ad:a7:
04:8e:7f:85:fb:29:92:d6:e5:21:ce:17:25:c9:a7:
93:f7:0b:9b:f1:9a:0d:28:82:ed:31:3f:bd:24:a5:
8c:33:68:f0:27:a4:09:ed:08:9a:4d:67:e8:55:a0:
5b:6d:9f:44:80:c9:bb:51:5b:c0:4a:5d:4b:64:c4:
d2:5d:70:96:78:3e:a0:00:0b:07:49:50:d2:08:db:
5f:19:47:d5:33:a3:93:d5:ce:ee:1b:e1:f9:43:dc:
42:9f:2d:24:60:1c:dc:a7:ed:7d:80:0b:5f:0f:f9:
a5:93:ab:dc:1f:40:14:76:88:ea:5c:49:61:21:d1:
ac:57:a6:fa:75:cc:11:e5:56:71:65:19:f6:e7:31:
94:b0:0c:39:26:56:ca:93:ea:97:ad:aa:10:73:8f:
69:0c:76:01:61:7b:cf:71:cf:54:b5:66:ad:cb:70:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0D:28:21:8B:83:48:A3:8D:15:CE:E7:57:73:CF:15:13:16:8E:2E
X509v3 Authority Key Identifier:
keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/dQ0oIYuDSKONFc7nV3PPFRMWji4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.24.0/22
IPv6:
2a09:1840::/32
Signature Algorithm: sha256WithRSAEncryption
63:03:4f:37:f1:8e:a0:a0:02:1c:53:59:b3:53:2b:bc:21:62:
e8:1a:96:4c:a4:dd:87:2e:8f:d3:b9:48:c0:59:2f:68:3d:f2:
5d:3b:10:18:cc:cb:82:34:1b:7f:04:59:9a:2e:1f:b6:06:6d:
e3:26:b0:02:54:4c:ea:37:52:96:71:17:92:a5:bf:63:90:3d:
97:49:31:f1:c9:55:d6:ac:11:80:eb:a8:9d:77:a9:ab:e0:2c:
e3:87:fa:35:c1:67:f1:de:06:f5:c1:92:52:ae:a3:4a:34:c1:
52:09:89:f9:3d:21:ca:93:1f:d3:af:c5:43:80:6e:a5:f1:65:
b5:28:79:a4:d8:76:ca:13:43:1c:69:e3:dd:31:ae:f6:34:e5:
5e:d3:3a:77:63:00:75:47:fd:89:6c:4a:da:8c:e2:2a:fd:00:
95:f7:db:fe:6a:95:99:b7:bd:59:b7:e9:6b:ad:4f:d7:88:4a:
d0:dc:0f:63:a6:a5:1b:e7:54:bf:18:e4:c3:f5:bc:0c:6c:43:
c8:9e:e3:0e:3e:0c:bf:6b:1d:e4:c3:c4:54:48:c1:56:13:8d:
98:d4:1b:6c:af:48:eb:03:54:ae:b6:8e:9c:af:5d:40:46:1c:
5d:c3:94:96:e0:51:99:1e:b3:dd:d5:6b:4b:12:a7:22:4c:95:
06:a9:71:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:52 2025 by rpki-client