Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/do9dYsi01p_gskDqka_aWzBeblM.roa
File: do9dYsi01p_gskDqka_aWzBeblM.roa (raw, json)
Hash identifier: N73BDHO5jUzn0AqA3e/e5QO6fCrBzOK2d6KF/JhTnQ4=
Subject key identifier: 76:8F:5D:62:C8:B4:D6:9F:E0:B2:40:EA:91:AF:DA:5B:30:5E:6E:53
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01B60B8E
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/do9dYsi01p_gskDqka_aWzBeblM.roa
Signing time: Thu 27 Jan 2022 09:01:07 +0000
ROA not before: Thu 27 Jan 2022 09:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 178.159.94.0/24 maxlen: 24
185.238.90.0/24 maxlen: 24
185.238.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28707726 (0x1b60b8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 27 09:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=768f5d62c8b4d69fe0b240ea91afda5b305e6e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:03:ae:eb:b8:10:40:05:c2:42:75:81:8f:
d2:e7:91:d3:fa:09:2a:10:af:85:59:85:77:f5:3a:
ee:c3:db:66:e2:dd:e3:6c:09:ef:ab:5e:65:cc:c4:
98:90:d8:0a:de:56:6c:17:cc:6a:45:c1:58:a0:0c:
58:ea:7c:1b:3b:be:9f:f1:2f:90:f2:cd:17:81:7f:
d6:13:b9:ab:65:15:22:de:1f:7c:98:9c:c5:9f:9f:
80:94:33:10:62:b0:d3:b9:99:92:47:75:a9:c4:41:
c5:45:23:d4:4d:da:37:a4:6e:29:a6:6c:30:96:27:
4b:1b:65:43:64:d8:6f:10:29:e5:68:24:54:7a:86:
85:31:c7:07:d9:4f:b4:0b:cb:5f:4e:d2:16:a1:78:
59:ee:d3:82:5b:23:31:92:f3:0b:5e:66:1f:b6:b5:
f3:45:e9:ef:fa:7d:70:0a:1d:66:df:bf:4b:9d:f1:
26:54:a1:39:59:b7:39:b6:f3:d4:da:a1:aa:0b:29:
b0:63:18:12:89:79:7c:0b:f3:8a:34:d8:f8:8d:e6:
9b:aa:37:5e:43:e9:f4:91:4e:cc:bb:09:c9:dd:b2:
77:65:dd:bb:6c:cb:2e:5e:e7:92:e0:e8:a2:8a:be:
5d:c4:72:38:f5:16:33:79:8c:9f:ef:5f:c1:5b:72:
e0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8F:5D:62:C8:B4:D6:9F:E0:B2:40:EA:91:AF:DA:5B:30:5E:6E:53
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/do9dYsi01p_gskDqka_aWzBeblM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.94.0/24
185.238.88.0-185.238.90.255
Signature Algorithm: sha256WithRSAEncryption
d2:59:f2:45:06:20:9a:54:38:77:87:ce:0b:22:16:2d:ff:aa:
d5:d3:55:52:7b:61:04:64:58:16:d4:60:0b:d4:d2:64:f9:26:
f3:8f:9c:9e:b3:e2:08:41:15:d3:2b:97:72:43:eb:33:5c:15:
fd:0c:cc:47:55:80:09:c5:31:a0:08:a2:8c:ff:b9:e8:35:b7:
44:08:0a:89:94:7e:fc:98:34:28:e0:3c:4a:9f:95:84:4c:6c:
fc:bb:07:2e:18:c5:0e:ea:07:77:52:df:38:24:d7:39:f7:d4:
90:44:00:4f:b3:c4:a3:d7:ea:1f:36:77:95:af:34:c9:2b:0b:
23:3c:5e:4d:91:99:99:55:78:3a:65:27:07:14:f3:42:7e:8e:
80:f2:a8:d4:c0:1e:7a:50:b1:54:eb:e2:16:a4:9d:7a:38:f3:
f5:c2:30:16:8d:5a:15:d6:12:7e:a2:f9:fc:ce:a9:7f:85:06:
c7:82:2c:46:f3:85:2c:ce:a5:45:fe:cc:7a:e0:f7:fc:ad:8f:
24:8e:d4:d2:df:e6:55:b3:64:4d:48:55:64:84:a8:a4:87:82:
a3:45:cb:fc:fe:63:81:7d:84:27:e9:19:cd:bf:17:9c:50:ec:
74:de:e3:35:15:14:5a:fb:b1:31:43:57:2b:6a:5e:b6:7f:7f:
2a:25:72:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:06 2025 by rpki-client