Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/DQnS1tnQnd97U1BmP1oL5JTufUo.roa
File: DQnS1tnQnd97U1BmP1oL5JTufUo.roa (raw, json)
Hash identifier: wiUK574UXDBemm+CsOTP5NNyjTNPEWH+aYzA5a9BDb4=
Subject key identifier: 0D:09:D2:D6:D9:D0:9D:DF:7B:53:50:66:3F:5A:0B:E4:94:EE:7D:4A
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 019425222CAF6F9BD7AA6B34DC60A3B583DB
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/DQnS1tnQnd97U1BmP1oL5JTufUo.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 83.168.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2c:af:6f:9b:d7:aa:6b:34:dc:60:a3:b5:83:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d09d2d6d9d09ddf7b5350663f5a0be494ee7d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:d2:52:6a:f8:6e:78:fe:65:aa:7a:44:57:
9c:b4:55:5e:24:be:1a:a2:5f:a4:7f:9c:f0:47:09:
68:2d:67:60:26:e9:ec:de:85:20:af:69:37:24:b9:
e7:08:d1:21:c4:ac:33:6a:d7:ee:df:ae:ea:5d:5c:
69:b1:43:fc:b5:d4:84:7c:8d:9d:3c:ee:fd:4b:cc:
db:03:78:af:08:30:77:65:bd:c7:d6:cc:d9:65:6f:
81:ca:76:7f:06:76:78:38:4d:08:ef:b7:2d:3d:78:
fe:27:e7:30:20:50:7d:cf:1b:67:e7:56:3d:ce:18:
5d:49:07:19:43:ea:5d:4f:cc:f4:12:53:73:cb:4d:
85:20:7e:03:ba:2e:7b:04:e5:64:68:4c:07:93:aa:
04:8a:3b:84:22:50:0d:ca:d7:c9:94:95:2f:2d:6d:
ae:17:80:6a:f7:69:e2:49:da:8d:95:eb:b8:b9:f1:
9d:2a:84:38:bc:4e:39:2a:61:3d:ed:cc:6b:2c:f1:
da:70:9d:d7:86:a5:b9:f2:2e:e9:23:c1:7f:d7:6c:
f0:77:20:a2:f8:c8:62:b4:62:55:2f:5b:43:c7:e1:
c5:ab:63:af:2c:fa:9b:c5:04:cd:39:8b:70:86:3e:
30:44:e6:3b:72:86:a4:42:97:56:90:15:fa:af:9b:
0b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:09:D2:D6:D9:D0:9D:DF:7B:53:50:66:3F:5A:0B:E4:94:EE:7D:4A
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/DQnS1tnQnd97U1BmP1oL5JTufUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.168.124.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:4d:ca:26:26:a2:59:68:73:38:06:60:44:35:bc:88:8c:f4:
cd:5c:66:a1:a6:e4:84:d5:31:16:e0:e9:15:b8:cb:17:bf:24:
e8:27:46:8f:8d:21:e7:e4:84:05:fa:a0:35:79:9a:f6:7f:be:
61:90:7c:ee:2f:a5:33:6a:37:c5:30:42:92:2e:55:36:4c:71:
5a:d1:c4:aa:ac:b3:6d:07:1c:79:44:3f:f6:8b:ab:77:c4:9d:
40:b7:71:13:71:67:0f:03:92:e6:b6:39:1c:23:56:95:bc:c9:
5b:b6:30:41:97:3d:e4:19:c9:16:0c:83:79:70:dd:c4:37:b0:
c8:97:ad:33:86:d7:ea:03:e5:f7:9f:fe:30:21:4b:1b:92:23:
bb:01:9d:0e:86:a7:2d:e2:c8:32:83:e3:ec:25:66:0c:58:ac:
37:dc:f5:ea:ba:fe:0c:3e:d5:ea:b0:14:b6:79:8b:72:88:21:
f8:03:ee:a6:76:77:7f:ed:ba:66:5f:55:79:53:28:bc:57:fa:
97:bd:01:0c:ce:af:42:d9:d0:91:17:2d:23:0e:1c:8b:a3:e2:
3d:68:36:83:d6:13:da:28:26:50:90:5b:84:4d:b1:a1:5c:d0:
53:a3:28:cb:a5:11:66:f6:a8:01:30:25:9e:7a:2e:55:e2:9f:
2c:d5:2b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:21:05 2025 by rpki-client