Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/DGt82DR6xw_Ywh3-AvmkhvWCcVM.roa
File: DGt82DR6xw_Ywh3-AvmkhvWCcVM.roa (raw, json)
Hash identifier: Xe6PXCoxFN3TxuAuxssMLTkZiOn7w8CCGbAYJjxvzp8=
Subject key identifier: 0C:6B:7C:D8:34:7A:C7:0F:D8:C2:1D:FE:02:F9:A4:86:F5:82:71:53
Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial: 019423D6DD659226F89F45C2F79ACD8C188C
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/DGt82DR6xw_Ywh3-AvmkhvWCcVM.roa
Signing time: Wed 01 Jan 2025 21:47:51 +0000
ROA not before: Wed 01 Jan 2025 21:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 212.39.32.0/24 maxlen: 24
212.39.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:dd:65:92:26:f8:9f:45:c2:f7:9a:cd:8c:18:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Validity
Not Before: Jan 1 21:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c6b7cd8347ac70fd8c21dfe02f9a486f5827153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:d1:0c:d0:b7:63:ef:6d:85:7d:63:a3:d6:
20:88:6f:4c:a5:2d:6b:56:3b:d2:9c:df:c3:34:f6:
d4:62:33:79:98:5b:39:d2:14:27:d2:63:b5:44:bc:
64:b8:84:30:cf:4b:09:ae:94:19:25:00:a1:6c:e0:
8d:8e:63:56:92:9c:69:7f:e9:bd:30:3d:14:03:b3:
d9:5f:e2:cc:3b:63:11:48:e1:6f:c0:e9:dc:b0:b5:
47:92:a9:68:e1:99:a0:56:0d:8c:52:f4:49:4f:33:
72:59:e3:30:73:87:72:9b:e8:fa:a7:2a:f2:2d:5d:
ee:86:f9:1c:54:d1:1d:44:a5:cf:21:55:77:b1:70:
0a:67:2c:d4:e8:9b:5c:9e:7b:b6:53:a7:4c:8a:cb:
8b:9a:90:b5:55:13:f3:dc:0a:b6:9a:ec:0a:d4:9c:
9e:89:47:04:ff:3e:a2:02:1a:f4:de:fb:75:4d:a8:
9e:c4:a6:d5:a7:68:33:45:30:7f:c6:0f:30:20:2c:
21:8a:66:27:11:95:f1:51:f9:96:e6:07:09:c3:8a:
1b:8f:2c:e4:c6:0a:67:de:fc:27:7e:90:e3:72:e5:
b7:e7:90:0e:48:13:75:51:b3:26:86:fe:62:13:68:
00:00:c1:c5:12:63:e9:40:6b:8d:2d:8a:42:b8:f7:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6B:7C:D8:34:7A:C7:0F:D8:C2:1D:FE:02:F9:A4:86:F5:82:71:53
X509v3 Authority Key Identifier:
keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/DGt82DR6xw_Ywh3-AvmkhvWCcVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.32.0/24
212.39.34.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f1:2d:b0:e8:50:18:8e:e0:35:81:ee:d0:54:f6:d5:12:ce:
ce:12:ef:ed:ed:42:37:14:77:68:75:ab:da:8d:08:a8:28:18:
11:6e:31:20:28:59:35:b9:e4:b2:9f:bc:3d:07:91:83:ea:29:
1e:d8:33:bf:32:fb:47:25:67:cd:14:9a:1d:38:f0:d6:d8:73:
4e:0c:b2:94:49:c2:56:1c:bf:69:6d:fb:a0:66:55:77:55:3d:
9d:5e:64:50:b4:94:a7:7a:92:95:92:4c:e0:5c:01:02:6c:ad:
10:5e:a4:45:d6:b8:1c:d4:44:bc:29:c9:55:91:90:be:d0:34:
b9:08:0e:4a:8a:01:e5:a3:c4:d4:ae:f5:b9:e2:2d:5f:9b:68:
31:46:92:46:1f:97:d8:eb:73:af:54:10:86:91:83:f9:a2:88:
5e:32:c7:80:12:5e:4d:94:88:cb:3e:ca:0b:ed:ed:2d:d8:f5:
d3:f1:bc:e5:4a:2d:84:49:0f:65:d0:c8:7d:ba:1c:0b:d4:83:
2c:98:34:88:a5:af:a1:59:2e:b4:5c:98:a7:ec:54:77:86:60:
55:e4:14:cf:56:57:a3:44:ed:de:ab:d8:ab:28:7c:73:1a:f2:
1c:56:43:b8:91:93:68:c6:d6:64:72:28:89:f5:d6:e5:42:d3:
86:71:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:18 2025 by rpki-client