Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa
File: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (raw, json)
Hash identifier: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=
Subject key identifier: 0E:DF:80:D5:42:A3:A8:F0:20:9D:89:22:CF:9A:0E:17:72:8F:89:FE
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 019422FC3BA312EA9AB7F134D88C3AF5BC22
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa
Signing time: Wed 01 Jan 2025 17:49:03 +0000
ROA not before: Wed 01 Jan 2025 17:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35392
IP address blocks: 94.188.142.0/24 maxlen: 24
94.188.198.0/24 maxlen: 24
94.188.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3b:a3:12:ea:9a:b7:f1:34:d8:8c:3a:f5:bc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jan 1 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0edf80d542a3a8f0209d8922cf9a0e17728f89fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:2f:89:21:78:81:4c:f0:f5:3a:99:71:45:
c2:db:a3:8e:49:fb:ba:ea:18:f1:ec:50:6e:ef:eb:
ba:d6:ba:61:27:4e:01:14:0e:f8:7a:8e:34:9b:eb:
d3:83:1d:01:58:42:db:d5:bd:5f:33:70:fa:a6:8c:
e1:bf:52:1d:0a:1f:85:53:cb:57:33:f5:f2:e2:88:
7a:70:91:32:b6:f4:37:54:93:e9:e1:00:f9:28:77:
ce:3a:67:ed:87:44:22:a7:b9:b6:4e:1f:3b:96:0c:
e5:d4:57:06:5a:f3:fa:5f:a2:02:6c:07:4c:ea:8d:
ca:e4:50:d5:b8:96:da:82:d6:27:77:36:cb:3a:26:
be:8d:f7:3c:92:c8:32:d1:e8:63:97:ee:25:32:01:
03:92:ea:6b:90:a0:4e:f3:ac:49:e2:2a:9c:56:9a:
fc:ca:80:8b:9f:5b:e5:54:48:53:4f:4f:8c:19:ab:
4b:b4:41:db:dc:bb:64:23:6b:d1:52:90:37:65:04:
4a:89:07:04:10:90:82:9f:c1:5e:59:6e:97:15:82:
2c:d0:83:12:2f:e9:82:a3:e0:4d:2c:11:6a:ab:e7:
a9:94:74:a9:03:d1:0e:d5:20:45:5f:24:bd:3e:ae:
a4:b2:ba:64:10:3f:8d:63:4d:5d:53:88:c9:97:a2:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DF:80:D5:42:A3:A8:F0:20:9D:89:22:CF:9A:0E:17:72:8F:89:FE
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.142.0/24
94.188.198.0/24
94.188.220.0/24
Signature Algorithm: sha256WithRSAEncryption
84:dd:ec:7f:0a:06:2e:06:a0:8c:57:7c:7f:ed:dd:29:91:d1:
8e:97:bf:e4:f5:0e:5a:06:0c:79:f9:ea:ec:8d:1d:ef:aa:5c:
e5:ba:d9:bd:7e:cf:e8:be:3b:eb:4f:e4:e0:5a:cd:ed:6d:6e:
c5:23:a3:86:92:04:fd:fa:82:2f:eb:b0:76:f4:f5:fb:bd:6a:
36:10:85:ba:45:87:5a:98:78:6c:a2:3e:59:1a:b8:13:31:2b:
91:93:6b:99:01:65:67:26:aa:48:af:08:fe:d4:95:c0:de:73:
1d:e7:e9:60:d5:66:78:bb:e8:60:c6:4d:d8:69:23:d4:a6:4c:
df:82:62:53:5e:e6:b5:29:45:76:da:bf:5a:f9:62:dd:02:3d:
07:b4:09:9b:32:9b:c2:9f:89:d1:0a:35:39:3b:a3:cc:f0:17:
e1:f2:01:9a:b1:03:0a:f1:40:9f:e7:19:75:52:f0:a9:6f:c9:
0a:d7:ff:7f:81:ba:c0:5d:cf:65:9c:5b:be:b0:7c:d0:9b:c2:
78:4c:7e:04:ab:82:3b:28:25:bd:24:0c:f4:44:96:44:43:5a:
71:a7:16:9a:1c:3b:6b:be:9d:15:71:d8:e9:b1:26:1b:42:19:
0b:df:cd:c6:e2:22:92:ac:c0:2e:83:d7:fd:f5:09:38:e5:cf:
36:b5:b9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:02 2025 by rpki-client