Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/0gaSfyJRbV56ttZg9F-YqH_DRGE.roa
File: 0gaSfyJRbV56ttZg9F-YqH_DRGE.roa (raw, json)
Hash identifier: T1yJweEHTNg3yzCf+2eFUQByYcpzztAF5N1iIm6RRlY=
Subject key identifier: D2:06:92:7F:22:51:6D:5E:7A:B6:D6:60:F4:5F:98:A8:7F:C3:44:61
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01954BD5D5AF2AF884828D9B267CF8CB876A
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/0gaSfyJRbV56ttZg9F-YqH_DRGE.roa
Signing time: Fri 28 Feb 2025 09:14:19 +0000
ROA not before: Fri 28 Feb 2025 09:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214481
IP address blocks: 185.244.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4b:d5:d5:af:2a:f8:84:82:8d:9b:26:7c:f8:cb:87:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Feb 28 09:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d206927f22516d5e7ab6d660f45f98a87fc34461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:39:cc:24:d3:f0:6e:3b:44:4b:66:9b:d3:
72:33:e0:ff:e5:d6:d5:ff:6e:23:4b:81:79:05:46:
83:4b:98:b4:63:7f:5e:38:d2:11:22:15:54:83:86:
72:49:9d:17:ea:6f:58:2a:58:08:ef:99:f7:3d:1d:
66:bb:ce:77:7e:5e:e6:66:49:29:25:bd:ee:d3:ee:
36:10:6f:5b:75:aa:3a:de:94:9b:f1:61:ed:63:97:
5f:ed:73:fb:17:7d:ea:07:3f:48:1f:06:f1:0b:13:
c8:b7:dd:1e:36:24:80:b7:cd:97:38:2c:e0:16:68:
1e:fa:58:7c:70:25:04:1d:56:b5:f2:6a:b0:73:72:
0a:5e:8f:ad:5c:b5:02:68:0e:d3:1b:81:e8:ce:e6:
08:b9:5a:44:47:91:92:b6:a0:c3:b7:e5:a3:c3:c2:
29:f5:f5:79:24:39:e5:9f:4f:ad:32:d4:bc:33:35:
c1:b9:4f:6b:98:f7:da:40:52:bc:05:1e:af:0d:05:
28:bc:30:b7:41:45:17:d1:b7:ae:d6:7a:bb:f1:41:
bf:91:69:c6:f9:9d:26:16:46:d4:79:0c:29:4f:f3:
74:e5:bc:42:e7:65:48:f2:cc:ec:67:02:2c:43:f8:
1c:d2:1b:2b:d1:06:cd:fa:75:b1:e9:7a:3b:b3:3f:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:06:92:7F:22:51:6D:5E:7A:B6:D6:60:F4:5F:98:A8:7F:C3:44:61
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/0gaSfyJRbV56ttZg9F-YqH_DRGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.25.0/24
Signature Algorithm: sha256WithRSAEncryption
58:db:a7:b3:ae:41:88:91:8c:1b:25:70:a9:f3:90:f6:00:d6:
cf:3a:c2:a5:ce:4a:cd:a8:5c:be:35:c7:24:87:40:7a:bf:4f:
af:a4:57:ee:7c:31:db:49:fc:b8:85:85:e1:fc:1c:40:36:d2:
90:70:2d:d4:67:5d:4d:1c:a5:13:f8:0a:83:73:f1:74:55:93:
0e:d7:87:90:f2:42:b0:1b:c4:c6:65:b4:8a:51:96:40:5f:eb:
bf:57:88:87:94:9e:78:a7:48:1c:a9:07:f6:8b:bb:1e:46:71:
29:0e:9c:65:93:2e:3c:dd:19:6c:51:29:9d:2e:2c:28:8c:87:
b7:60:ad:4d:70:d5:08:fc:32:bb:5d:d1:6c:8a:57:f6:0d:0c:
b7:a7:94:8d:5b:2a:5e:60:04:4d:92:db:75:b2:c3:1d:5f:3f:
cf:a5:8c:26:53:7c:e3:68:6d:db:33:bb:6b:f1:6a:52:d9:22:
b1:a6:78:5f:71:24:b4:4a:96:b1:d1:51:da:db:97:1f:02:19:
be:c8:8b:aa:36:21:08:e4:38:d1:b3:60:23:bc:0c:d0:33:b1:
fd:69:e7:65:76:c7:3a:e1:13:a1:ef:50:d7:16:4b:39:72:bd:
89:4c:f5:b7:3b:df:c3:6a:7e:17:74:8e:15:5a:eb:4f:3b:ed:
7c:f2:53:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:07 2025 by rpki-client