Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/cDYl4HRF3_ati0nfWv1dK-2swbY.roa
File: cDYl4HRF3_ati0nfWv1dK-2swbY.roa (raw, json)
Hash identifier: OTls03WnzLoC47FlsuOyq7f3ICX9Ig4BTmnXXlT+vUY=
Subject key identifier: 70:36:25:E0:74:45:DF:F6:AD:8B:49:DF:5A:FD:5D:2B:ED:AC:C1:B6
Certificate issuer: /CN=dc84756dc772c06483249a987a3b1bc6e605e835
Certificate serial: 019422FAF111CFCF49098AA7DEC611A5E219
Authority key identifier: DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/cDYl4HRF3_ati0nfWv1dK-2swbY.roa
Signing time: Wed 01 Jan 2025 17:47:38 +0000
ROA not before: Wed 01 Jan 2025 17:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 193.160.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f1:11:cf:cf:49:09:8a:a7:de:c6:11:a5:e2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc84756dc772c06483249a987a3b1bc6e605e835
Validity
Not Before: Jan 1 17:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=703625e07445dff6ad8b49df5afd5d2bedacc1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:df:29:14:1e:11:fc:de:6e:82:f0:71:1c:
11:5a:62:ba:eb:aa:f1:a1:d5:82:52:b8:37:c8:ba:
d0:29:86:6e:d3:b2:f2:9a:f1:73:f2:bf:11:42:af:
e0:99:45:99:f5:2e:f9:b1:2c:4f:13:74:93:91:9d:
be:9e:26:06:3a:73:3d:9a:f5:74:74:3c:21:3c:ca:
f0:dc:d8:eb:c6:d5:79:c1:99:43:4b:28:b3:c0:c4:
19:19:04:fa:0f:1f:b4:0d:d7:4f:f7:96:e9:c6:7c:
7a:b5:00:62:2d:2a:4f:07:12:d1:1a:a0:7a:b5:a6:
ea:75:5a:d7:3f:7f:3c:9c:63:da:4b:2f:85:f8:09:
9f:c5:5e:78:de:fe:85:94:85:a3:38:91:23:4e:d6:
fe:e3:f3:26:99:c6:47:af:71:20:46:b4:4f:56:53:
95:36:17:73:cd:1e:64:ca:35:b0:1a:47:2e:ce:c7:
ee:7d:4a:59:ad:6b:15:32:a5:08:c3:36:0e:24:31:
b6:a9:d6:cd:2c:48:6e:7b:fa:20:51:27:4a:94:b9:
c7:98:4a:06:0f:0a:6a:2d:fe:c2:f4:ab:e5:26:56:
9d:d8:27:07:12:45:67:61:31:f7:be:ac:7b:e2:22:
62:da:6a:f6:44:37:dd:91:f7:de:3e:b8:ea:ac:7e:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:36:25:E0:74:45:DF:F6:AD:8B:49:DF:5A:FD:5D:2B:ED:AC:C1:B6
X509v3 Authority Key Identifier:
keyid:DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/cDYl4HRF3_ati0nfWv1dK-2swbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.80.0/22
Signature Algorithm: sha256WithRSAEncryption
20:9f:16:dc:6e:19:4c:5b:b0:61:e3:49:f0:fc:03:d1:ce:85:
f0:27:4c:4e:21:69:f2:f2:e4:c0:cf:7e:62:36:65:0d:d8:f4:
59:9f:9d:b0:97:69:02:46:87:7a:9c:26:69:b3:b3:86:9c:c2:
c6:39:1f:74:71:de:5d:66:2f:b8:a9:fa:a5:1e:4c:0f:2e:3c:
9a:d6:23:a0:7f:ef:97:81:49:20:91:f9:37:13:3f:fb:a4:0f:
9d:e7:d9:cf:a6:38:aa:e2:47:90:ce:05:31:93:11:f2:e6:5a:
1f:ec:8e:42:6a:cc:ee:d9:e5:98:07:f1:4f:cb:72:31:9b:30:
5d:fc:f6:dc:88:65:b9:61:12:91:de:fb:05:e7:c0:67:00:96:
f1:54:88:d2:27:ea:6d:c2:f4:11:82:07:0c:a8:26:06:9c:db:
6d:7c:a6:a7:05:2e:20:c4:dd:7b:b4:f1:b6:29:9c:d1:72:58:
c2:c3:20:84:ee:e1:fe:47:6e:c3:c4:54:c2:cf:1d:a6:15:de:
73:17:89:e0:56:fb:a9:72:98:91:c2:73:44:bd:80:44:4a:eb:
0a:20:d7:46:96:9a:48:43:54:5b:99:ef:a4:fc:e8:bd:65:a8:
70:f8:28:3f:c5:dd:4b:20:40:44:9b:7b:57:79:30:17:57:e1:
0e:a5:9b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:13:32 2025 by rpki-client