Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/dGxUQhmXosrd6snNM74Lqxgx6XA.roa
File: dGxUQhmXosrd6snNM74Lqxgx6XA.roa (raw, json)
Hash identifier: 9vHiXTHPhgjpbGVFJ6NuVl7cW85jEiPNxPoz0tnnkYg=
Subject key identifier: 74:6C:54:42:19:97:A2:CA:DD:EA:C9:CD:33:BE:0B:AB:18:31:E9:70
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019426D9F5A234E3C1E2A81F502F6C2203DF
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/dGxUQhmXosrd6snNM74Lqxgx6XA.roa
Signing time: Thu 02 Jan 2025 11:50:05 +0000
ROA not before: Thu 02 Jan 2025 11:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54339
IP address blocks: 91.193.253.0/24 maxlen: 24
93.89.211.0/24 maxlen: 24
93.89.217.0/24 maxlen: 24
193.109.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f5:a2:34:e3:c1:e2:a8:1f:50:2f:6c:22:03:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=746c54421997a2caddeac9cd33be0bab1831e970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:51:7c:74:0d:bc:5e:b3:5d:71:ab:cb:72:37:
a1:5a:85:7c:95:35:f1:3c:0c:bd:14:b2:29:b4:93:
d2:35:57:7f:f4:5d:5e:ea:a9:4f:2d:37:66:5d:da:
1e:b4:b8:b3:cd:b8:1a:21:f8:d1:97:6d:ef:d1:65:
08:5d:2e:3b:f4:dc:44:38:bb:c5:95:a1:78:3f:5d:
9a:df:fa:57:93:4a:e5:d2:40:a0:2b:02:94:b5:6d:
fd:9f:2c:5b:7e:81:e0:c9:9f:95:2f:b3:1d:4e:09:
3e:57:90:fe:00:0f:96:f5:e8:8f:32:92:98:8f:cc:
a2:3c:f9:cc:8b:8f:96:23:93:3d:47:95:8f:3e:64:
2d:8d:8d:b3:3d:ad:ca:0a:05:c4:6c:7c:9f:10:52:
e7:f2:0c:55:1d:02:30:1a:74:4b:46:93:dd:d7:77:
15:75:31:43:2a:f1:c3:4c:fd:a8:92:1b:61:f8:87:
bf:eb:d5:69:02:37:96:50:4c:aa:19:84:5d:fe:7e:
15:ad:48:b0:45:40:9c:b8:32:94:4f:41:4f:af:0b:
4c:3c:fb:5e:49:25:ce:46:22:3a:f1:55:af:87:5d:
45:ba:13:3b:26:31:c4:0f:52:52:1d:6a:94:8b:fb:
0b:53:78:ac:94:4e:3e:dc:73:e6:d8:72:4f:cb:bf:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:54:42:19:97:A2:CA:DD:EA:C9:CD:33:BE:0B:AB:18:31:E9:70
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/dGxUQhmXosrd6snNM74Lqxgx6XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.253.0/24
93.89.211.0/24
93.89.217.0/24
193.109.160.0/22
Signature Algorithm: sha256WithRSAEncryption
76:f6:f8:32:17:9c:cc:a4:50:3f:77:2f:2c:7c:2a:7c:41:ba:
89:0d:c6:cc:36:23:0c:41:9b:8f:25:e6:28:7f:c6:44:09:5f:
92:68:de:73:cd:a8:17:be:fe:80:48:ab:74:2b:8f:ac:b9:9a:
a9:b1:bf:f3:0e:fc:4c:0b:65:0b:5d:63:40:7a:d2:c0:04:da:
fd:4a:61:22:a0:6d:b9:75:59:5b:fd:b0:1c:ad:f3:54:7e:23:
41:6b:da:4c:ec:7a:e3:f6:59:87:53:59:09:a8:32:d7:78:3c:
36:03:ff:52:19:e9:6c:60:1d:d8:bc:82:a0:c8:0c:63:fb:46:
2e:2f:f4:51:48:df:58:f3:77:0e:9f:e6:bf:66:4d:aa:4e:39:
72:d0:22:52:7b:7b:52:2f:25:cf:11:99:36:50:16:90:4b:2c:
91:fb:f9:ea:13:99:af:3b:ff:5d:8c:17:ee:b7:13:76:d4:68:
05:82:65:09:60:53:a6:8e:80:25:3d:16:7c:1b:5d:a6:4d:86:
a0:aa:76:c7:8f:1f:e4:3b:01:a9:d3:36:a6:c8:5f:9e:4e:93:
a6:fc:b6:69:a7:1f:3d:fe:ba:36:4d:ed:9f:20:a8:a8:80:b3:
f3:37:33:45:57:b8:3a:32:c1:09:86:60:6c:d1:ee:94:a8:85:
2f:cf:04:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:12 2025 by rpki-client