Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/DgNI8nc_Uu5Ukue3eStWkVuXKms.roa
File: DgNI8nc_Uu5Ukue3eStWkVuXKms.roa (raw, json)
Hash identifier: jDCU1x0uqOGLfCOxgfkoXTgYPd7jMEh29DDGccjgEjc=
Subject key identifier: 0E:03:48:F2:77:3F:52:EE:54:92:E7:B7:79:2B:56:91:5B:97:2A:6B
Certificate issuer: /CN=a5cae6a01d854abdf9256dcc2429617d55f03bd9
Certificate serial: ED2C90
Authority key identifier: A5:CA:E6:A0:1D:85:4A:BD:F9:25:6D:CC:24:29:61:7D:55:F0:3B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcrmoB2FSr35JW3MJClhfVXwO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/DgNI8nc_Uu5Ukue3eStWkVuXKms.roa
Signing time: Wed 11 May 2022 22:02:03 +0000
ROA not before: Wed 11 May 2022 22:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 185.187.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15543440 (0xed2c90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cae6a01d854abdf9256dcc2429617d55f03bd9
Validity
Not Before: May 11 22:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e0348f2773f52ee5492e7b7792b56915b972a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:9e:1e:64:3f:da:39:6c:a4:97:60:fe:b9:
b1:80:35:86:59:d4:97:83:8d:07:df:88:75:ed:fe:
bf:2e:55:33:dd:15:0e:dc:87:21:6d:ec:11:00:80:
ef:7c:84:27:44:df:21:22:23:3f:0b:ae:80:75:81:
1c:44:ce:ee:bc:61:ab:c1:d1:42:41:f7:b2:09:9a:
e2:26:f8:d0:73:dc:da:6a:34:c2:31:60:55:4e:7d:
a6:b4:45:f3:67:a6:c8:31:14:26:4c:83:c3:dc:08:
d1:62:fc:f5:09:b0:91:f0:f6:72:2c:4e:8f:b8:0c:
ed:b0:78:5a:f9:74:52:75:a0:75:86:65:c9:31:c6:
5d:0c:81:02:5c:a9:39:b8:5a:bb:c9:02:49:78:56:
c8:2d:4f:9b:96:02:f0:4b:3e:79:e1:31:0d:83:35:
41:eb:51:fa:3d:d1:9e:68:12:f5:1f:4c:e9:c9:b1:
de:95:81:0f:71:0a:03:f6:82:8d:af:f4:0a:3a:c6:
34:ac:ae:c0:b4:76:98:9b:ab:77:14:38:44:53:c5:
ec:0c:53:eb:32:e4:5d:36:79:e2:44:d8:ac:e9:73:
b5:fd:f4:3b:49:f1:89:5f:4d:2c:f2:ad:62:31:ba:
5a:b2:38:60:37:b7:d5:6b:88:47:00:42:65:ef:32:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:03:48:F2:77:3F:52:EE:54:92:E7:B7:79:2B:56:91:5B:97:2A:6B
X509v3 Authority Key Identifier:
keyid:A5:CA:E6:A0:1D:85:4A:BD:F9:25:6D:CC:24:29:61:7D:55:F0:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcrmoB2FSr35JW3MJClhfVXwO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/DgNI8nc_Uu5Ukue3eStWkVuXKms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/pcrmoB2FSr35JW3MJClhfVXwO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.18.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:0b:e0:a6:9a:39:36:c3:1d:fe:b3:1a:af:3d:07:72:c3:21:
7e:5e:1a:1f:89:f1:bb:ba:56:bc:a3:d7:ef:a4:a3:0b:40:fa:
5a:64:07:7f:79:a4:c3:23:d1:90:7b:86:8b:6e:e7:2e:42:72:
d6:1a:cd:6b:01:ce:c3:29:d5:4a:a2:10:5e:a3:c2:bc:1b:89:
58:db:95:15:74:0a:69:57:72:ff:3a:4f:e9:0b:20:b1:19:bd:
2c:b2:ab:43:55:be:bc:f2:1d:62:ac:5b:9a:48:34:0e:34:d9:
82:ff:70:1a:cd:cb:3d:aa:a5:3f:84:1b:35:85:f9:61:70:cb:
1a:9b:bf:90:34:ea:b8:1f:e8:b6:72:1f:3b:c4:e6:1f:86:ea:
c9:15:e9:62:a2:af:cd:db:43:16:f7:64:54:57:56:af:45:7c:
97:95:45:7f:0a:5b:4b:2c:50:f8:84:af:a1:1f:f3:00:7b:d6:
68:ec:e7:49:24:e3:4b:f4:92:a9:c6:ab:87:af:05:9b:20:18:
99:41:3f:2a:4c:6b:2a:c9:4f:04:63:e2:91:4a:ad:5b:12:e0:
9c:37:31:54:3c:85:ce:49:27:cb:72:2b:82:cd:8a:41:9d:4a:
0b:43:d8:5c:a7:12:a0:51:f4:d1:82:79:0a:f0:21:05:7a:4c:
3c:33:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:49:10 2025 by rpki-client