Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/dumiLPj8dIgbkOu_ODKjUhmF_rM.roa
File: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (raw, json)
Hash identifier: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=
Subject key identifier: 76:E9:A2:2C:F8:FC:74:88:1B:90:EB:BF:38:32:A3:52:19:85:FE:B3
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 019423D6DB19CD6AF39C45963C8EFBB963FE
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/dumiLPj8dIgbkOu_ODKjUhmF_rM.roa
Signing time: Wed 01 Jan 2025 21:47:50 +0000
ROA not before: Wed 01 Jan 2025 21:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206570
IP address blocks: 185.179.200.0/23 maxlen: 24
213.179.210.0/23 maxlen: 23
2a00:1d23::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:db:19:cd:6a:f3:9c:45:96:3c:8e:fb:b9:63:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Jan 1 21:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76e9a22cf8fc74881b90ebbf3832a3521985feb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:c4:15:84:7a:a8:3c:b7:3a:c7:3f:7a:7a:
4a:55:08:ab:38:28:2d:78:f7:c0:9b:58:2d:4e:99:
e3:02:fd:2d:eb:66:99:35:f6:9c:08:5a:0a:bf:90:
9b:35:2b:29:99:df:39:30:1c:7d:8a:e5:7c:f7:92:
74:4b:51:06:76:95:c1:46:44:8c:98:6a:f1:d4:f2:
9b:b5:da:44:8f:b4:be:9a:44:a9:34:4a:54:72:4c:
75:a9:a3:3d:28:d1:78:cd:7f:cd:f3:77:02:47:ce:
79:32:c2:34:7a:fa:a5:d3:05:9f:81:03:32:a6:ca:
ce:de:e7:04:8a:22:82:0a:9c:84:1d:3d:94:fe:8d:
c0:3d:e1:10:bb:b6:1c:45:ad:0d:46:08:a7:89:0b:
dd:c8:59:96:4c:1d:40:7f:49:cd:9a:bf:cc:7f:3f:
f8:e8:ab:0b:a1:5a:a8:a9:7e:8b:90:80:37:cd:a6:
3c:28:f6:49:b0:18:60:23:b4:d3:78:04:d0:8f:c4:
ba:8b:08:ea:00:63:9f:40:48:0e:2f:b7:2d:c8:b2:
4f:37:7f:85:53:57:ed:1e:0a:91:a1:cb:93:bb:ae:
54:0f:0b:66:30:be:e5:90:13:ef:27:39:b7:8f:b7:
4e:97:9d:a1:12:b6:02:1d:d8:06:48:ac:80:6c:c1:
a6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E9:A2:2C:F8:FC:74:88:1B:90:EB:BF:38:32:A3:52:19:85:FE:B3
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/dumiLPj8dIgbkOu_ODKjUhmF_rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.200.0/23
213.179.210.0/23
IPv6:
2a00:1d23::/32
Signature Algorithm: sha256WithRSAEncryption
3b:88:32:3f:f7:cd:31:2d:b1:0a:3f:07:a8:0c:53:c6:b0:3e:
d4:81:82:12:17:3c:81:92:5d:b8:8c:54:65:da:fd:c9:ce:55:
79:60:1f:47:91:a2:f6:d6:ea:98:86:44:5e:52:b9:08:0b:f0:
21:ad:51:52:d8:59:bb:32:52:b4:c5:47:f5:1f:16:2c:d4:94:
b7:8f:4b:4b:fa:02:c9:b3:b5:4d:85:05:6d:59:f6:18:ac:5b:
e6:05:db:3e:4d:c3:8e:a7:14:6f:1b:eb:9a:70:1b:e9:8c:ef:
73:6b:b3:0f:e3:cf:58:3b:b5:ce:a6:45:7e:b1:80:57:1f:a3:
b7:11:b5:a4:e5:ea:22:69:a7:04:ea:57:d0:c8:8d:78:24:41:
4c:2f:01:1c:cf:85:b0:fe:88:8e:50:5a:f8:72:a8:cf:b9:56:
17:c5:cb:ac:af:84:cd:c2:55:93:63:98:a7:46:bb:92:17:dd:
ca:ec:5b:c3:bc:0c:13:ce:af:2f:22:1b:21:43:73:0a:ee:f6:
2c:ea:47:3a:76:63:f2:7c:aa:8d:54:98:55:48:c5:5e:8d:01:
12:c9:54:c8:83:6b:6d:b2:f4:aa:6b:46:21:e3:63:f9:db:bd:
d1:8c:f9:cc:54:46:fa:4a:9c:3f:3c:48:5d:66:02:50:f9:c8:
7c:19:b4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:22 2025 by rpki-client