Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/DUeztC_9OSU5_baS7RpA8PIrChA.roa
File: DUeztC_9OSU5_baS7RpA8PIrChA.roa (raw, json)
Hash identifier: nC0NIfkO+km6NTJ5hH8jMs/CXJYU2lhmZlogyR2BxZI=
Subject key identifier: 0D:47:B3:B4:2F:FD:39:25:39:FD:B6:92:ED:1A:40:F0:F2:2B:0A:10
Certificate issuer: /CN=7a3862134f141365ef887902e6057c28b2829c9d
Certificate serial: 019421B1BED5FB84F35E8315361D35AE4242
Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/DUeztC_9OSU5_baS7RpA8PIrChA.roa
Signing time: Wed 01 Jan 2025 11:48:04 +0000
ROA not before: Wed 01 Jan 2025 11:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 194.124.232.0/23 maxlen: 23
2001:67c:1984::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:be:d5:fb:84:f3:5e:83:15:36:1d:35:ae:42:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d
Validity
Not Before: Jan 1 11:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d47b3b42ffd392539fdb692ed1a40f0f22b0a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:2e:10:aa:6e:1d:07:37:e3:1d:f6:71:91:
47:83:64:e4:8d:3b:45:0c:d8:79:c6:a9:07:d4:72:
94:f9:23:81:34:4f:37:f2:f5:31:51:b0:66:78:d6:
c7:32:27:cc:dd:92:70:bc:84:5f:c5:30:f1:d3:15:
3f:d6:fc:c7:a8:f4:56:15:b2:fa:35:0d:0a:5f:57:
74:ad:20:b2:1c:47:9b:9c:8d:98:b5:8a:85:c6:a3:
47:14:1c:2a:0f:df:b8:a4:c0:e6:92:3d:74:8c:11:
f8:1f:d9:8a:ec:74:26:f2:9b:8e:3a:03:db:d8:82:
61:03:2f:e5:89:5b:ed:ce:d4:48:65:89:7a:e7:ae:
02:fd:4d:33:15:5e:92:e5:25:89:1b:59:cd:17:b0:
10:18:91:26:34:f7:a6:53:22:c1:71:b3:70:50:61:
52:9f:ac:7f:c3:a0:a5:82:af:51:fc:26:b9:95:a3:
34:5b:6c:3b:dd:ff:07:fd:71:91:47:22:18:03:d9:
04:f5:12:3d:56:0b:df:cc:2a:c9:48:3b:d3:39:40:
c2:7a:08:ce:c4:81:fb:f3:58:d9:4d:bc:f9:e7:66:
43:0b:51:91:16:5f:a7:91:97:a3:b5:d8:ea:33:cf:
04:c1:8c:12:91:b4:75:6c:13:af:96:ac:18:43:b2:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:47:B3:B4:2F:FD:39:25:39:FD:B6:92:ED:1A:40:F0:F2:2B:0A:10
X509v3 Authority Key Identifier:
keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/DUeztC_9OSU5_baS7RpA8PIrChA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.232.0/23
IPv6:
2001:67c:1984::/48
Signature Algorithm: sha256WithRSAEncryption
71:a1:5e:ff:7e:94:8b:95:03:64:ea:f3:ab:98:fa:8a:52:58:
4e:ff:76:83:f2:34:10:6f:7a:03:30:cb:22:81:80:0f:eb:8a:
d6:2b:11:c1:e5:bf:46:e3:fa:eb:28:dd:5a:e2:73:2f:d5:6c:
89:1e:55:b5:c6:bc:27:c7:58:67:55:d4:26:31:58:b0:0f:53:
8b:94:77:54:25:57:5d:cc:44:e7:8a:b5:ac:77:65:f6:ac:8c:
65:63:b7:17:3f:20:fd:10:9c:ad:71:45:8d:3e:fe:d4:05:f8:
ec:48:16:6d:ae:70:11:73:a1:d2:9f:c9:0e:08:49:48:76:df:
5a:0d:36:fc:83:54:76:17:1f:db:77:cf:44:c1:af:f9:27:42:
a9:cb:b9:ab:45:0d:6d:87:56:5d:a8:a5:f2:49:0b:27:58:c3:
25:61:43:06:a1:b8:c5:86:a2:a5:bf:44:12:13:9b:3d:9a:7a:
83:f8:a1:22:db:c2:05:05:83:78:67:0c:8c:83:9a:4a:c9:a7:
d8:f1:16:c8:92:73:56:b8:33:af:37:48:ac:5b:e4:03:78:8a:
08:74:43:0a:61:cf:f1:d9:3b:83:7f:ec:69:e2:39:59:93:a2:
eb:9b:81:86:64:45:0b:b1:b4:ec:df:dd:57:2f:4d:8e:c2:12:
e0:a4:60:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:17:09 2025 by rpki-client