Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa
File: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (raw, json)
Hash identifier: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=
Subject key identifier: 74:F3:91:70:B3:CF:CB:BB:C6:3E:92:BB:60:ED:19:09:D8:37:48:B7
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 019422FC4297F0F969F48ECA1A2CEF5D6139
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212383
IP address blocks: 94.188.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:42:97:f0:f9:69:f4:8e:ca:1a:2c:ef:5d:61:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74f39170b3cfcbbbc63e92bb60ed1909d83748b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:cc:0f:12:de:80:dc:e7:22:ba:d1:d2:83:
6c:33:b9:e7:5e:65:8c:f9:de:8d:59:92:9c:68:6c:
1b:e1:fb:32:fb:12:f2:df:43:7f:f8:8f:ff:9e:b0:
da:13:95:c0:f5:3e:32:5b:50:67:17:30:19:d1:6f:
a2:c9:da:48:61:9e:6f:b8:43:ed:d5:3e:e9:29:df:
91:a1:bf:6b:70:c6:e5:ad:96:7e:69:8f:2d:e3:47:
e4:74:65:63:da:4d:80:f3:b2:00:b9:c1:92:92:78:
be:7b:87:3a:95:af:58:63:29:65:44:31:ec:35:f1:
ed:c1:32:b2:e3:5d:12:c7:54:57:12:21:69:64:8a:
3f:51:3d:d3:5b:13:2a:d0:31:d1:8c:1b:31:b3:6c:
84:1c:86:8b:97:da:d5:92:13:68:80:87:9b:a8:e1:
1c:9b:dd:4e:16:5e:e4:27:d0:8e:c3:aa:e0:6e:8f:
51:32:db:5f:39:45:00:9a:53:97:e7:0b:16:b2:42:
6c:d6:c8:1c:8b:b4:22:17:60:09:d2:27:ab:58:d5:
fa:8b:dd:d1:d7:2b:ca:94:53:5e:43:fb:9f:33:bd:
1c:83:be:57:a4:e4:8b:bf:e2:16:0c:f9:67:e3:aa:
4c:f6:7e:b8:e1:0b:8c:9b:d4:d8:17:09:2a:62:21:
e9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F3:91:70:B3:CF:CB:BB:C6:3E:92:BB:60:ED:19:09:D8:37:48:B7
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.249.0/24
Signature Algorithm: sha256WithRSAEncryption
00:26:2b:6b:8a:04:35:29:34:17:4e:80:48:3d:41:45:04:8a:
a3:12:91:82:d0:1b:2f:aa:34:e5:ac:42:e9:73:85:8e:9b:b2:
71:d5:0c:9d:25:f7:d3:05:b1:37:09:c9:94:14:cf:ce:61:c4:
4d:fd:61:b0:96:b1:4d:a1:21:be:a5:56:06:b3:97:57:0e:c3:
ce:8c:24:1a:7a:f2:58:ec:18:1b:63:56:53:05:3d:69:14:a5:
9f:62:6b:af:47:ec:32:b6:8f:65:5f:e7:75:0d:46:2b:87:09:
b8:76:e2:58:d9:1c:2a:4c:96:72:ca:d8:e3:12:fe:9d:da:ce:
48:04:cd:5c:aa:ba:65:03:11:09:1c:f5:a1:1b:4f:61:fc:ca:
ab:f1:a7:7e:32:ea:44:6a:8d:17:ae:86:dd:eb:8c:ff:93:8b:
7b:44:84:a3:9e:72:ed:4c:8b:63:14:61:b2:2d:14:01:ae:c1:
aa:f6:b9:7b:36:3f:c7:6e:54:ff:70:a2:53:aa:e3:da:fc:64:
ed:3e:13:c4:f9:4c:62:db:a8:a0:e4:0a:77:f2:ff:61:e2:45:
95:6d:00:cc:a9:4d:fe:f3:ab:a8:4e:e0:66:25:d4:15:a2:95:
3c:ce:88:09:3a:d2:82:17:6d:0c:0c:94:89:4a:c5:3b:35:ee:
6f:77:f5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:41 2025 by rpki-client