Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89181b-a5ee-4eb7-959d-a6db4ad0153f/1/dQdmnxJgETNqghPz26MG4DxCZng.roa
File: dQdmnxJgETNqghPz26MG4DxCZng.roa (raw, json)
Hash identifier: TUggfP51TM46N4aLEREP2foZjc2doxccksA/8clysWs=
Subject key identifier: 75:07:66:9F:12:60:11:33:6A:82:13:F3:DB:A3:06:E0:3C:42:66:78
Certificate issuer: /CN=86649d785d47a0d2634d1d877609c8d609f44871
Certificate serial: 01870E19CC61D3D2C97024161C7C543F9655
Authority key identifier: 86:64:9D:78:5D:47:A0:D2:63:4D:1D:87:76:09:C8:D6:09:F4:48:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmSdeF1HoNJjTR2HdgnI1gn0SHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89181b-a5ee-4eb7-959d-a6db4ad0153f/1/dQdmnxJgETNqghPz26MG4DxCZng.roa
Signing time: Thu 23 Mar 2023 10:53:04 +0000
ROA not before: Thu 23 Mar 2023 10:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 185.252.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:19:cc:61:d3:d2:c9:70:24:16:1c:7c:54:3f:96:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86649d785d47a0d2634d1d877609c8d609f44871
Validity
Not Before: Mar 23 10:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7507669f126011336a8213f3dba306e03c426678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2e:31:db:b7:da:0e:6c:1f:f3:81:98:49:cb:
d1:33:e2:fa:6b:91:e5:4e:03:68:8e:fc:cd:3b:1d:
c3:44:2c:c2:7e:8f:5d:d7:3a:54:f6:39:b2:44:5d:
cd:85:90:b2:aa:9f:ba:f8:d5:4a:78:60:19:97:fe:
6c:fb:d8:b5:3b:60:63:4e:12:e6:95:d3:84:76:fe:
79:90:30:04:eb:fa:d6:3b:b7:ba:f8:fc:e8:23:35:
ca:ea:18:2a:8a:72:fd:a7:47:fa:e8:20:ae:e1:fe:
3e:16:df:cf:d2:95:37:29:ce:2e:ff:0b:d8:92:0a:
bd:7a:3d:98:05:a2:cb:01:74:24:59:50:df:11:cc:
87:37:00:59:3d:2f:a8:9e:7d:60:fb:4b:ca:a2:43:
a0:af:d0:b0:34:12:c4:11:4e:16:07:bd:7b:56:2e:
2b:fc:f7:46:da:e9:ff:ba:a5:d7:26:94:32:08:4f:
a7:a0:d6:70:48:7d:45:3b:60:67:62:46:bf:4a:15:
68:32:24:71:72:09:02:98:63:72:73:41:57:62:59:
e2:fc:08:ed:33:56:0d:42:28:c4:32:24:5a:ad:a5:
21:b0:60:15:af:1c:3b:66:34:cc:cc:bf:12:11:5d:
36:f3:c3:72:47:79:53:b7:cd:dd:5e:45:0b:25:8d:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:07:66:9F:12:60:11:33:6A:82:13:F3:DB:A3:06:E0:3C:42:66:78
X509v3 Authority Key Identifier:
keyid:86:64:9D:78:5D:47:A0:D2:63:4D:1D:87:76:09:C8:D6:09:F4:48:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmSdeF1HoNJjTR2HdgnI1gn0SHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89181b-a5ee-4eb7-959d-a6db4ad0153f/1/dQdmnxJgETNqghPz26MG4DxCZng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89181b-a5ee-4eb7-959d-a6db4ad0153f/1/hmSdeF1HoNJjTR2HdgnI1gn0SHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.215.0/24
Signature Algorithm: sha256WithRSAEncryption
59:10:5b:61:53:55:b2:63:2a:82:0b:d3:56:62:0f:ca:57:f1:
da:47:67:c1:0e:2e:96:a9:48:60:73:f6:52:05:19:0a:cc:83:
6f:ac:b7:01:0b:de:93:61:cb:5d:8b:82:b4:2d:01:aa:8b:6e:
c7:d2:d9:9d:12:28:7b:be:fe:f9:9b:f4:ad:60:ae:b0:92:63:
af:ec:63:8f:73:cd:fb:c3:e2:5a:62:4d:ea:ee:86:79:c3:7c:
2a:1e:0b:dd:33:a1:e4:db:96:3e:ff:d6:f3:c0:44:29:cb:54:
52:e1:a2:4f:09:bc:ef:63:89:4e:e5:d1:1a:af:04:15:33:2e:
64:8f:26:30:47:75:4e:6a:70:ab:60:e2:53:b8:a4:74:7e:57:
c1:cf:c7:0e:55:15:a3:41:e6:00:b4:78:28:08:c8:7f:af:59:
27:fb:98:76:0d:b0:7e:29:0d:f0:7e:4a:cb:a5:04:71:68:25:
e6:4f:ad:89:1b:f4:8e:db:bf:84:ed:e6:f0:b7:8d:38:5e:c6:
85:6e:ef:71:93:b8:50:89:98:b5:ba:b7:f5:8b:66:ee:1d:10:
a7:ba:c1:ab:7b:61:3c:f4:21:cb:fc:4e:f9:57:10:b0:a6:04:
87:7f:fa:aa:e6:c4:20:48:1a:ba:ef:7f:76:c6:e2:28:ef:dc:
65:83:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:10:13 2025 by rpki-client