Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/dmDSPTcSu7sN8TWs4BFDWryNeRw.roa
File: dmDSPTcSu7sN8TWs4BFDWryNeRw.roa (raw, json)
Hash identifier: 9efe61MBeQCq4xTo5Tl7Cum9V4QZLg1tBtpVAkignwI=
Subject key identifier: 76:60:D2:3D:37:12:BB:BB:0D:F1:35:AC:E0:11:43:5A:BC:8D:79:1C
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0194AC0920254010D1D21C62650D444F99A4
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/dmDSPTcSu7sN8TWs4BFDWryNeRw.roa
Signing time: Tue 28 Jan 2025 08:31:06 +0000
ROA not before: Tue 28 Jan 2025 08:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35787
IP address blocks: 195.136.32.0/23 maxlen: 23
195.136.32.0/24 maxlen: 24
195.136.33.0/24 maxlen: 24
195.136.72.0/23 maxlen: 23
195.136.72.0/24 maxlen: 24
195.136.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:09:20:25:40:10:d1:d2:1c:62:65:0d:44:4f:99:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 28 08:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7660d23d3712bbbb0df135ace011435abc8d791c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b9:56:8a:57:e1:0f:f0:99:ae:17:69:68:66:
ac:b0:9f:4a:1d:44:db:48:f3:d8:b8:54:80:ef:a2:
34:65:f6:80:6e:d8:21:0e:f1:6e:7b:8b:e6:03:c6:
da:ea:0d:a2:5f:52:12:61:65:e7:24:dc:3b:5c:f9:
65:97:1e:e3:8d:03:95:90:f9:74:c6:1d:01:5d:d8:
70:4a:cf:12:33:ae:cf:3c:be:8b:72:0d:9a:70:a5:
a3:c7:c7:01:3e:4a:5f:bb:a8:fe:9f:92:fb:43:42:
cf:ad:25:6c:2f:9c:80:93:1d:65:34:e3:68:9d:e7:
3d:09:f6:fc:b9:c5:b1:41:64:76:40:1d:06:99:f9:
14:a7:d4:d2:b4:9c:87:53:a7:9e:a4:c3:d4:9c:50:
89:ac:c7:d6:4c:2b:00:e0:5c:3c:4e:f5:80:92:39:
d8:4b:04:7d:a4:d8:19:f6:c8:dc:d9:6d:8b:c0:24:
74:46:ba:f6:0e:12:7b:ce:20:b9:91:ce:7c:e0:ff:
7c:6e:ad:26:99:21:56:88:ac:5f:c0:85:99:39:bd:
5f:9a:70:02:58:62:28:38:4f:b5:2e:31:f3:e5:73:
df:05:2d:f0:1e:5b:6b:ad:01:63:4b:67:37:b0:bf:
75:62:d7:95:2e:7f:8e:43:7c:5a:0b:93:4b:f5:74:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:60:D2:3D:37:12:BB:BB:0D:F1:35:AC:E0:11:43:5A:BC:8D:79:1C
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/dmDSPTcSu7sN8TWs4BFDWryNeRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.32.0/23
195.136.72.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:5c:72:9a:f7:4a:dc:bf:4f:2e:ea:09:8b:9f:d7:b5:09:41:
5c:f7:d6:32:ef:64:8e:97:a1:40:13:8f:45:4b:30:f8:fe:f0:
01:a3:b5:16:6e:b4:27:d1:1c:be:46:a5:4c:28:33:88:a0:62:
c0:08:fa:78:39:43:9f:44:0e:35:cf:d2:0a:70:06:31:40:e6:
65:98:77:3b:7d:ff:07:37:5b:7e:d5:a6:35:c5:f9:55:29:be:
cc:a2:26:2f:63:93:9a:1f:26:8b:d3:85:e7:26:cd:04:51:bc:
15:74:54:32:f5:3b:54:07:8f:d8:c2:96:34:a3:bf:8d:67:c0:
f7:f3:bd:6d:ed:61:f5:f2:cc:51:57:a1:60:8d:83:a7:dd:d2:
2b:3c:04:99:af:fe:b5:08:17:53:75:7d:4c:72:bd:85:a0:94:
ba:ce:1b:00:1b:f3:be:21:07:98:03:11:ac:c3:49:69:07:7e:
43:b6:1e:28:56:d6:e9:32:01:d6:6f:bb:3d:d9:67:cb:8f:b7:
b2:87:01:53:7b:4a:37:a0:d0:8c:15:a5:60:09:ae:f5:aa:fe:
1d:84:27:84:0d:15:f7:aa:e4:92:b3:3d:bb:42:f5:70:f2:b0:
e6:42:c7:6f:98:41:8b:32:b8:6c:02:01:2c:f2:18:f1:5e:d4:
19:f1:c1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:07 2025 by rpki-client