Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dc2g-kIH50S7LA2o26AVsv4LItA.roa
File: dc2g-kIH50S7LA2o26AVsv4LItA.roa (raw, json)
Hash identifier: anV8AfiZnJM+uW7z2xYGvooxLoCl6L/cGFCY34WgBTU=
Subject key identifier: 75:CD:A0:FA:42:07:E7:44:BB:2C:0D:A8:DB:A0:15:B2:FE:0B:22:D0
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7EC85DCA0E66E6E1B45AC30E9CE27
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dc2g-kIH50S7LA2o26AVsv4LItA.roa
Signing time: Wed 01 Jan 2025 21:49:00 +0000
ROA not before: Wed 01 Jan 2025 21:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216334
IP address blocks: 212.22.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ec:85:dc:a0:e6:6e:6e:1b:45:ac:30:e9:ce:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75cda0fa4207e744bb2c0da8dba015b2fe0b22d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:85:b6:f4:49:62:c9:89:a1:e0:6e:8f:c3:67:
15:ae:08:d3:b5:94:dd:c8:7f:60:40:fe:e9:e6:79:
97:d3:9c:62:ff:ae:8f:93:ef:b0:5f:f7:5e:36:e0:
09:7d:3c:02:a9:32:3a:46:1d:bd:f9:7c:09:15:ad:
be:4a:5b:1d:6f:a8:e1:31:ab:53:00:37:7a:23:57:
12:84:95:03:d4:0e:55:f8:5c:d2:47:b1:10:d3:41:
81:5c:f3:36:1a:96:5b:65:fa:43:8e:e9:90:cb:e1:
fc:22:00:df:e6:a5:f0:fa:0c:7d:e1:85:94:40:72:
b7:98:d6:7d:2b:a6:cc:12:33:11:da:5a:90:5a:c3:
88:64:43:83:78:06:97:5e:d5:8e:ea:8e:5f:a4:5f:
e5:89:86:1c:a3:94:5c:1a:04:63:66:fa:b4:b7:c9:
83:13:c0:03:00:d0:e1:4c:7d:fc:32:d8:bf:cd:39:
50:ab:ec:18:98:b4:66:17:7d:29:b6:ee:40:a4:2a:
8f:cc:4a:6e:3e:48:a5:43:a7:6d:81:e9:19:05:9a:
fc:83:23:87:a5:e4:13:ff:96:49:97:a1:5d:34:1b:
47:0d:c9:f4:17:37:78:51:f7:1a:eb:79:59:a1:24:
38:d0:79:e0:51:9d:fb:37:e9:e8:2b:ed:98:d2:c3:
2e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CD:A0:FA:42:07:E7:44:BB:2C:0D:A8:DB:A0:15:B2:FE:0B:22:D0
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dc2g-kIH50S7LA2o26AVsv4LItA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.90.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ac:f7:6d:2c:e2:6a:df:47:1b:a0:9c:8a:10:42:f8:bc:2b:
cc:f7:1e:94:28:af:30:b2:4b:a3:b3:d3:2b:d5:bb:6d:04:2e:
8d:51:15:d8:45:52:a9:9d:0e:02:0e:29:f9:36:c5:b3:e4:a9:
19:ad:0d:4f:de:5f:dd:a8:15:43:30:fd:63:1c:bd:7b:c3:30:
a2:a9:fa:43:ec:78:c4:44:c3:c4:37:16:67:07:1c:c3:b4:f8:
07:ac:22:e9:4b:76:38:c5:78:f1:1d:30:28:2e:32:85:5d:ce:
12:6b:42:b7:eb:93:54:f3:c9:0b:d0:93:ae:cc:97:e0:5e:6e:
e8:fe:aa:db:2d:73:c3:be:27:54:99:50:e1:17:34:e5:e0:24:
32:90:b1:a1:67:22:9d:c2:c4:1c:73:00:26:4f:73:ee:5e:c7:
1e:da:66:09:c7:d1:d2:cd:b9:7f:9a:26:41:52:1b:4d:46:7f:
a5:e0:f8:80:dd:53:1d:84:58:3c:70:8a:d4:73:7d:36:b2:52:
07:e8:43:d8:f6:b5:75:7c:d7:6f:4d:bb:ea:14:f9:db:f3:ee:
38:7d:cb:05:c5:b0:44:de:af:a9:7f:ad:4b:da:65:25:46:a1:
14:03:c5:86:61:31:d9:de:ad:b2:6d:13:92:c4:45:5c:0c:8f:
3d:84:56:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:03:52 2025 by rpki-client