Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/DLu57DZ9WcMMQAmctMKhjMYOA_8.roa
File: DLu57DZ9WcMMQAmctMKhjMYOA_8.roa (raw, json)
Hash identifier: AHuCNcId9Lo6xFcInpQkBT6Qmu0yRSdhlMD93oKCtcM=
Subject key identifier: 0C:BB:B9:EC:36:7D:59:C3:0C:40:09:9C:B4:C2:A1:8C:C6:0E:03:FF
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 01942521A9F2ED7BE615D728943F5EAEBAF0
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/DLu57DZ9WcMMQAmctMKhjMYOA_8.roa
Signing time: Thu 02 Jan 2025 03:49:10 +0000
ROA not before: Thu 02 Jan 2025 03:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29657
IP address blocks: 194.5.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a9:f2:ed:7b:e6:15:d7:28:94:3f:5e:ae:ba:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Jan 2 03:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cbbb9ec367d59c30c40099cb4c2a18cc60e03ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:71:39:bc:07:46:27:34:e0:c0:c0:d4:82:
fa:cb:9f:bd:ab:44:f9:d5:82:aa:56:43:59:42:76:
90:93:39:81:e9:58:f1:0b:df:90:6e:b4:06:a7:ba:
e9:93:64:c8:ed:ef:27:7c:d4:40:59:2b:66:da:84:
5d:70:b7:96:a2:a4:5b:52:8a:86:6c:97:ab:8b:7f:
4e:48:44:13:ee:3e:6a:35:6a:fd:54:cd:ea:35:36:
ce:33:c1:83:4d:5c:f6:a0:71:6b:f8:de:10:aa:a0:
52:22:d4:92:ea:70:29:d4:70:cc:fb:8d:e9:96:db:
eb:8d:28:5d:15:29:7f:c5:75:8a:92:e0:05:4b:76:
44:0e:c3:75:7d:cd:f8:e5:8d:a0:d9:c3:cc:10:fb:
9d:cb:98:21:cf:63:eb:bc:c1:8d:e1:b2:f0:8a:4b:
8b:0e:32:35:da:4d:09:df:fc:5c:81:31:94:d8:97:
e7:4e:9b:35:b1:c8:f1:ad:92:58:77:a6:f6:f7:98:
e3:32:68:9e:3b:24:05:1d:3b:45:fc:17:43:14:f1:
57:fc:d0:60:95:db:22:d0:84:10:e6:e2:d9:46:f2:
10:59:7e:8f:53:e6:53:cd:d8:e2:3b:c3:d7:5e:fc:
3a:de:b9:1c:1b:78:28:40:71:0d:7b:41:7b:38:50:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BB:B9:EC:36:7D:59:C3:0C:40:09:9C:B4:C2:A1:8C:C6:0E:03:FF
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/DLu57DZ9WcMMQAmctMKhjMYOA_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.90.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b4:0d:ca:44:57:c3:cc:07:a7:1b:bd:79:e2:3d:ed:3d:bc:
09:be:0b:36:f1:2e:2c:2c:b5:a5:f5:a2:e5:8a:31:73:12:8c:
65:96:2e:80:78:e3:a3:cf:2c:d0:c1:0b:83:c6:62:fc:33:85:
fe:04:8f:b6:01:fe:34:02:ec:87:fa:15:d9:d2:b7:1f:4f:99:
fe:e4:d7:5c:06:45:b4:3e:6b:61:63:f0:56:6b:8d:02:1f:f0:
1e:b8:9c:82:89:86:22:2d:f0:1e:3f:1e:bd:1a:b6:68:47:fa:
93:c4:1c:7e:ea:c3:46:f1:15:20:c7:5a:ac:55:cc:7a:d1:5a:
5d:1b:0c:d5:ae:bd:73:13:58:bd:ba:a6:ad:65:51:a1:f4:10:
11:bf:15:6c:00:be:ef:93:c6:40:56:dd:15:20:61:97:93:75:
f6:21:80:cc:aa:92:e8:64:c7:0a:cc:56:85:35:da:88:e9:2a:
97:dd:e7:0b:e6:69:ff:af:3c:ee:60:d0:0a:b1:a1:3b:02:1c:
68:bf:d4:fb:40:4e:29:d5:15:22:fb:e6:47:9d:4d:58:3e:c0:
0b:eb:5c:3f:2b:d7:f2:21:a9:95:51:a4:7d:48:24:c9:d2:94:
71:b4:e0:91:7a:11:1a:01:8e:b9:89:8f:6f:c8:69:f9:50:78:
9b:90:99:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:17 2025 by rpki-client