Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/DYecUh-DxqkXQO2e7g2xu3pUfow.roa
File: DYecUh-DxqkXQO2e7g2xu3pUfow.roa (raw, json)
Hash identifier: YUWrnAO2Gq94plJUaewAQTbWDDY7NY6O0vRYXx6edu0=
Subject key identifier: 0D:87:9C:52:1F:83:C6:A9:17:40:ED:9E:EE:0D:B1:BB:7A:54:7E:8C
Certificate issuer: /CN=555d742d527f9700cc0047d7d61bfd822878db1f
Certificate serial: 019427B4051D898C7A6CFCCC0E3D208BF273
Authority key identifier: 55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/DYecUh-DxqkXQO2e7g2xu3pUfow.roa
Signing time: Thu 02 Jan 2025 15:48:16 +0000
ROA not before: Thu 02 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44075
IP address blocks: 194.147.156.0/22 maxlen: 22
194.147.156.0/24 maxlen: 24
194.147.157.0/24 maxlen: 24
194.147.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:05:1d:89:8c:7a:6c:fc:cc:0e:3d:20:8b:f2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555d742d527f9700cc0047d7d61bfd822878db1f
Validity
Not Before: Jan 2 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d879c521f83c6a91740ed9eee0db1bb7a547e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:51:29:cb:c6:d9:c4:46:b5:b3:56:4a:7c:
8f:ef:70:22:82:97:b9:08:b7:25:c1:42:b6:35:49:
dd:d3:d5:cb:18:29:fb:64:31:77:9e:93:d4:bc:39:
38:6d:d5:40:18:1d:13:b7:dc:7d:c1:18:47:e7:cd:
db:69:bf:a0:e1:3a:e5:6b:83:aa:ab:3c:73:ee:1c:
6b:92:83:8c:6e:09:95:2c:66:66:fe:9a:16:3b:12:
6a:72:0e:16:80:cf:83:45:fc:cc:29:ca:4f:52:41:
d6:65:95:bf:ff:36:cd:f8:23:84:2d:d1:03:0f:1c:
dd:93:35:bc:c4:d2:9a:f5:f8:a1:d6:aa:e1:a6:d3:
04:e2:bf:d3:10:92:4a:b6:5d:e7:40:af:95:ca:c0:
6c:be:c3:05:85:fe:5f:c1:b1:84:f5:54:89:7f:b5:
1a:a0:08:95:a4:fb:1c:f9:15:0a:d3:bf:4d:cf:f7:
da:24:d4:a8:20:2b:27:cf:87:60:34:cf:0f:cb:bc:
6f:8a:d0:76:b6:33:b0:c4:ff:07:29:5e:35:e3:a1:
5a:e6:d7:d1:b7:a9:76:2d:0e:9a:cd:18:0e:fc:48:
e9:29:f1:0b:f3:db:53:de:ba:32:b8:49:04:0e:87:
c2:65:1a:03:7b:0f:63:80:3d:46:6a:43:bb:73:cc:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:9C:52:1F:83:C6:A9:17:40:ED:9E:EE:0D:B1:BB:7A:54:7E:8C
X509v3 Authority Key Identifier:
keyid:55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/DYecUh-DxqkXQO2e7g2xu3pUfow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.156.0/22
Signature Algorithm: sha256WithRSAEncryption
74:7d:80:d4:85:6e:8a:09:e3:98:b6:5d:a7:fb:84:a2:2e:6d:
cf:a3:0f:73:51:a7:f6:ec:f7:de:3b:f3:a1:86:be:c8:32:23:
a7:72:95:3a:ea:c7:4c:f1:30:bd:f1:d8:7e:d9:2f:2c:4b:ec:
b5:ff:a6:81:74:8d:2e:86:6e:44:80:55:d5:27:12:71:45:4e:
a1:9d:f6:40:15:e3:40:19:20:3b:13:29:0b:80:5e:48:d6:6e:
fe:e2:cd:81:58:0b:91:4f:3c:9d:25:0e:67:87:1f:7a:2c:f1:
c5:54:6c:46:ba:15:4f:64:24:f6:70:50:9c:20:2f:8d:97:0b:
ff:16:8b:99:53:80:cb:f8:f8:b7:d6:67:0b:67:fb:3f:5f:e0:
8c:d4:bd:e1:91:d2:41:45:03:4c:6f:c3:93:28:b2:da:d8:23:
81:98:c8:06:f8:25:fc:3d:3d:64:c2:80:c0:a3:09:f2:51:82:
94:0e:41:14:68:23:a0:10:a4:5c:ef:11:f7:f6:e1:b4:26:a8:
04:21:57:f2:47:28:39:37:43:3d:6d:a6:97:0a:c5:2f:88:d4:
22:cf:1a:bf:61:32:08:5c:52:1b:21:4a:4e:ed:ae:3a:f8:bc:
4f:20:c1:0a:10:14:3d:5f:6b:a7:ce:ec:40:82:03:cf:66:1d:
fe:56:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:29:53 2025 by rpki-client