Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/DmdZirH8wcWnW5zYYUR5leLKxe8.roa
File: DmdZirH8wcWnW5zYYUR5leLKxe8.roa (raw, json)
Hash identifier: hx6zA2N9TKsc5Jie2Z1vdSmK9L1McLQ+3QD/drh38sI=
Subject key identifier: 0E:67:59:8A:B1:FC:C1:C5:A7:5B:9C:D8:61:44:79:95:E2:CA:C5:EF
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 0194236A148782A09D6B0DB1ED82C2757B91
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/DmdZirH8wcWnW5zYYUR5leLKxe8.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 82.206.8.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:14:87:82:a0:9d:6b:0d:b1:ed:82:c2:75:7b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e67598ab1fcc1c5a75b9cd861447995e2cac5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4a:26:8c:a0:ca:bd:25:4b:35:d4:7c:50:49:
e4:6a:37:2f:85:f0:9f:88:6a:66:86:f1:49:7a:62:
74:98:ba:8f:ea:ff:f7:8f:49:17:7e:a7:0f:ec:6c:
c1:93:0a:65:e0:02:dd:23:51:0d:7b:75:06:2a:a7:
97:15:44:48:3f:b1:30:c0:e7:48:84:09:23:54:2e:
be:63:2a:6c:72:35:96:ce:91:5a:8d:16:0f:df:91:
96:1c:77:13:dd:29:cf:24:13:62:40:0f:35:c2:87:
b5:d5:42:c3:f6:52:12:7a:cc:1c:f5:b4:bf:22:c2:
66:63:0f:c4:59:0c:cf:fe:8a:ac:3d:8e:b3:bd:ac:
6b:93:fb:c5:19:df:53:7d:45:a3:07:a3:03:90:a6:
49:33:d1:40:d4:7c:2d:fe:63:8c:db:86:4c:fe:fd:
c4:d9:07:43:00:f9:df:bc:19:3a:92:d6:6d:a1:68:
02:7e:91:5b:3d:b6:7e:c0:92:b3:1b:08:87:97:2e:
b9:b9:5a:cf:f4:5b:10:43:bf:d2:fa:82:3e:83:00:
62:e7:bb:29:d6:37:fd:50:21:84:2d:b1:53:ba:02:
b5:33:8d:39:ac:4a:49:37:52:b7:fe:16:61:92:a6:
f6:f2:54:58:6e:57:15:35:a9:30:68:6d:21:ff:d8:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:67:59:8A:B1:FC:C1:C5:A7:5B:9C:D8:61:44:79:95:E2:CA:C5:EF
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/DmdZirH8wcWnW5zYYUR5leLKxe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.8.0/23
Signature Algorithm: sha256WithRSAEncryption
83:dd:23:d1:bb:ee:e4:3a:9a:86:0c:3c:ee:b7:46:3b:87:02:
2f:45:96:b8:19:18:c5:a8:50:2a:1f:e6:1d:c2:6f:50:ad:a1:
ab:29:73:8b:ae:35:ae:ba:15:8e:8e:8c:c5:44:45:34:70:bc:
f4:86:b2:95:9e:fc:21:17:5f:34:97:6a:6c:bf:09:df:01:75:
6f:d6:57:00:f0:a4:69:d8:e9:d5:0f:f3:9b:1e:e2:31:46:d7:
c0:d8:4e:98:9c:3e:f3:04:35:89:44:b1:1a:6f:e2:57:e5:52:
31:58:fd:ec:16:a8:87:20:ac:10:f8:28:72:a3:67:40:e3:01:
7a:c7:51:65:6c:0d:7f:18:a0:bb:3f:07:f5:b8:01:0e:0c:03:
e4:b2:78:23:28:27:9c:b1:88:10:36:bf:f8:01:64:86:ae:83:
99:06:c3:d1:42:76:df:88:54:da:d4:bb:52:e8:c1:c2:3f:04:
c9:f2:cb:bc:3a:11:8a:7a:33:17:f5:44:5a:80:db:09:5a:20:
b5:22:3f:44:df:ee:07:85:ae:55:3e:ad:74:82:5b:78:1f:c2:
0a:b9:f9:01:3a:d6:94:9a:d7:f4:38:3c:54:38:8c:2c:5e:ef:
f1:c6:29:37:e9:22:18:c7:85:34:9b:41:13:42:ce:9c:51:1c:
86:b2:51:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:08 2025 by rpki-client