Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DtMpVHUdF788FuBXvq0QQwGt3po.roa
File: DtMpVHUdF788FuBXvq0QQwGt3po.roa (raw, json)
Hash identifier: M3oKxYyTE05FBbHHiuYSLtmEoq8oH6I6pRb7nJWGSTU=
Subject key identifier: 0E:D3:29:54:75:1D:17:BF:3C:16:E0:57:BE:AD:10:43:01:AD:DE:9A
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01954C0E999E12CE6A7B3DBA9DCA51A38685
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DtMpVHUdF788FuBXvq0QQwGt3po.roa
Signing time: Fri 28 Feb 2025 10:16:19 +0000
ROA not before: Fri 28 Feb 2025 10:16:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9050
IP address blocks: 94.176.164.0/23 maxlen: 24
94.177.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:0e:99:9e:12:ce:6a:7b:3d:ba:9d:ca:51:a3:86:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 28 10:16:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ed32954751d17bf3c16e057bead104301adde9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:cf:ea:02:5c:6c:0c:45:62:c7:f7:69:53:
89:0a:c7:ca:c5:e3:4d:4c:87:12:4a:41:20:24:2b:
65:48:24:06:99:38:6d:98:4c:0a:46:7e:3a:22:0b:
9a:7d:fe:d6:c1:ed:98:e3:8b:9f:e3:74:3c:74:1d:
d4:39:ba:ec:01:d3:b0:06:dd:24:a9:59:2d:82:59:
6c:58:d7:29:c6:0f:4b:a2:cf:3e:0c:37:4e:92:ec:
f3:dd:b1:f3:41:83:b8:9f:1e:ab:55:72:7f:71:0c:
c3:ab:4a:90:35:3e:4e:fe:4f:06:bf:a5:ee:b1:df:
29:ec:d1:99:c6:ae:59:ca:78:d5:f1:95:b1:22:ab:
53:8e:ad:07:af:aa:bb:27:09:1a:eb:16:8f:72:1e:
4e:7c:63:8c:d2:27:5e:e6:76:91:ca:21:36:44:f1:
d6:e1:35:68:c7:3a:ff:73:3c:07:d9:a9:47:ab:c2:
5d:82:05:37:82:b6:42:be:d7:7c:46:7a:c3:f5:2b:
c9:65:f2:b6:e6:1c:ca:5c:97:b5:17:14:07:6b:cc:
64:f1:35:7e:7a:4e:24:0c:c3:54:16:54:fa:24:79:
2e:1e:93:38:92:dc:18:e2:8a:8d:b4:31:da:4f:9a:
3f:59:70:73:c4:f4:20:37:d4:03:32:a7:41:14:72:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D3:29:54:75:1D:17:BF:3C:16:E0:57:BE:AD:10:43:01:AD:DE:9A
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/DtMpVHUdF788FuBXvq0QQwGt3po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.164.0/23
94.177.107.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:44:c2:92:c1:49:1e:48:a6:c4:af:ba:bb:81:fc:a9:da:a8:
bc:4a:1e:18:d0:ef:1d:34:97:9f:3e:a2:59:76:35:c2:18:a4:
41:9d:43:59:98:79:8f:67:0c:34:37:36:58:33:62:8f:80:eb:
f3:71:88:33:9a:b3:0a:08:d1:92:92:4b:58:79:3f:b9:8d:96:
98:dc:3e:0e:15:9a:1a:c7:fb:7d:ea:f8:ab:e8:17:52:bc:cf:
98:83:13:f4:22:75:d6:01:95:64:53:7e:64:2a:58:dc:86:06:
cb:5a:b9:07:97:70:71:23:3d:c1:21:f7:81:18:a1:e3:41:55:
dc:06:2b:c9:13:09:c0:da:1a:16:80:81:b7:e4:5b:de:3a:0b:
35:7e:52:c4:9c:21:bf:39:f5:d7:b7:08:a3:e6:33:86:cb:4b:
f4:ad:ad:f7:2a:17:d7:21:5e:a0:55:3c:4b:f4:6d:4f:d2:bf:
3f:4f:38:5a:46:26:df:e5:e2:34:b2:ec:62:ef:1b:ee:e9:4a:
23:65:34:fd:b5:97:23:78:33:c1:0f:a6:04:ec:bd:1e:d1:1a:
43:1b:14:71:1e:8e:2e:72:f8:e4:6f:08:f3:b7:30:3e:68:58:
21:a1:3d:af:70:84:71:36:f3:56:5e:d1:0c:b1:be:eb:d3:ef:
dd:29:bf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:22:42 2025 by rpki-client