Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dpCsGoHafg0iXdeBs0hS5C1KxQ4.roa
File: dpCsGoHafg0iXdeBs0hS5C1KxQ4.roa (raw, json)
Hash identifier: rCwemQqoi/c3Dzoy/GnN54AA4g+sMzJbJM4KNW5zXa0=
Subject key identifier: 76:90:AC:1A:81:DA:7E:0D:22:5D:D7:81:B3:48:52:E4:2D:4A:C5:0E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FE456080BA08F7EE5FB9A477DA783
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dpCsGoHafg0iXdeBs0hS5C1KxQ4.roa
Signing time: Thu 02 Jan 2025 05:49:34 +0000
ROA not before: Thu 02 Jan 2025 05:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197520
IP address blocks: 92.38.22.0/23 maxlen: 24
93.170.77.0/24 maxlen: 24
93.170.114.0/23 maxlen: 24
93.171.78.0/23 maxlen: 24
95.46.11.0/24 maxlen: 24
95.47.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:e4:56:08:0b:a0:8f:7e:e5:fb:9a:47:7d:a7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7690ac1a81da7e0d225dd781b34852e42d4ac50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:d1:5a:9d:a5:d3:ff:66:54:d5:9e:47:d4:
c4:5e:84:86:15:1b:39:29:d3:66:b2:f5:ca:84:7f:
ec:65:2f:b4:47:39:8f:99:8f:2c:22:cb:fc:28:7e:
ca:bd:47:a0:d4:a9:9a:87:71:af:a1:3e:ac:1d:d2:
03:f5:0a:42:bd:66:2a:7c:4f:e8:25:68:84:0f:14:
d9:17:61:53:a2:df:86:b5:21:5b:07:f4:2a:63:96:
8f:77:92:9f:42:8c:a2:0f:f3:41:3a:9b:4a:16:ab:
50:b2:eb:e2:24:6d:11:e9:66:77:1e:e2:22:e6:22:
62:be:39:b4:bb:2b:d5:5a:1e:e6:54:6e:52:23:2f:
30:f8:54:73:ae:d6:19:cb:d0:2e:71:d2:c2:7b:59:
02:b4:97:d9:9a:d2:e0:ec:40:cb:62:29:04:8c:97:
ef:9a:32:5d:d6:68:18:e8:eb:2f:d2:92:7b:f2:0e:
43:a7:a6:83:21:b8:dd:47:f1:67:8e:30:61:8b:ad:
e1:f2:50:64:f4:72:2f:1e:4e:f0:1c:9d:c9:b6:60:
6f:1c:93:f4:23:8f:fc:16:af:21:46:7f:b1:de:06:
e4:25:53:6e:77:d4:36:fb:b4:f5:58:b0:57:e9:4f:
05:ae:e4:fb:89:a2:75:9d:34:f8:1e:0c:20:89:2b:
e2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:90:AC:1A:81:DA:7E:0D:22:5D:D7:81:B3:48:52:E4:2D:4A:C5:0E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dpCsGoHafg0iXdeBs0hS5C1KxQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.22.0/23
93.170.77.0/24
93.170.114.0/23
93.171.78.0/23
95.46.11.0/24
95.47.164.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b5:d5:3e:80:78:a0:3e:6b:6d:88:4f:ef:b7:a0:48:04:9f:
e0:7a:73:f3:37:82:3b:94:96:c2:f6:6f:e3:e2:f8:ac:dd:76:
62:d0:f2:80:98:3d:1b:a9:0b:be:eb:02:69:4b:05:07:44:92:
e5:ba:c8:2a:49:62:0f:61:6f:09:48:03:e8:ff:7b:62:e2:37:
6e:f7:16:98:20:59:bc:97:c4:3d:ae:25:ef:de:ef:27:7c:82:
72:d2:13:51:ee:1c:f2:19:b8:c3:ba:dc:2d:86:9b:ae:83:df:
76:7f:8e:e5:61:d5:af:61:34:77:51:9d:0b:3c:43:1f:8a:e0:
61:34:6c:91:19:e3:f7:71:5f:5d:f3:67:a9:52:32:88:e2:8b:
5a:80:fa:1b:7c:49:bf:c1:21:e9:1c:84:e4:2e:7f:dd:76:ff:
a8:c1:a1:c5:4a:d1:3c:fd:1a:4c:c6:57:1f:b6:3e:9f:8e:08:
89:7a:4f:a0:34:36:bf:f7:16:de:d5:27:3a:de:84:1a:3a:57:
60:f0:90:94:bb:47:ee:27:9f:f7:6d:d1:ac:d1:c3:ff:32:19:
93:71:d9:f3:98:f5:94:bf:c8:c8:09:84:b1:51:cc:31:6b:9a:
2d:71:cd:7d:ea:e6:65:8f:3b:53:cd:b1:ee:cc:04:d6:f1:21:
49:e2:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:48 2025 by rpki-client