Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/DO4NR30_qTDQ12dntujJYhJiEF4.roa
File: DO4NR30_qTDQ12dntujJYhJiEF4.roa (raw, json)
Hash identifier: YkEsVW4p0QgX8jOB/eSe/cc29fF6iRKLD24F5tfXWNM=
Subject key identifier: 0C:EE:0D:47:7D:3F:A9:30:D0:D7:67:67:B6:E8:C9:62:12:62:10:5E
Certificate issuer: /CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Certificate serial: 01856FA7109E47B095C84C610C1EF2A079A9
Authority key identifier: 10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/DO4NR30_qTDQ12dntujJYhJiEF4.roa
Signing time: Sun 01 Jan 2023 23:24:57 +0000
ROA not before: Sun 01 Jan 2023 23:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206754
IP address blocks: 185.194.112.0/24 maxlen: 24
2a0a:4a40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:10:9e:47:b0:95:c8:4c:61:0c:1e:f2:a0:79:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Validity
Not Before: Jan 1 23:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cee0d477d3fa930d0d76767b6e8c9621262105e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f5:42:2b:e3:c3:51:32:59:1a:85:02:bb:03:
1b:19:0d:19:30:e4:d9:5d:f5:dd:c8:04:0d:d0:c1:
1b:45:b0:b3:f3:21:ee:4d:e9:13:e8:ea:a1:d6:e2:
0f:7c:8e:83:0a:a5:bb:d3:53:af:f1:7f:63:e5:d4:
35:fc:9a:0f:92:e0:3e:b6:b5:8e:2d:e2:6f:79:6f:
83:09:42:20:8d:a4:c6:a4:28:fa:06:07:a5:23:5c:
0f:a6:06:eb:9c:c1:4f:cb:fc:e8:3f:4b:f0:bd:75:
7e:ef:30:34:c2:fe:21:6d:07:eb:7b:e3:7a:5b:3b:
d1:61:81:9e:46:43:74:f5:dd:7f:0f:33:94:e7:28:
e6:5e:d7:a9:bd:b2:ea:41:90:2f:5e:56:2b:32:39:
4a:b6:67:a0:8e:3c:92:c2:69:d8:e3:8f:af:95:72:
95:ea:8b:f5:06:93:34:77:07:a8:45:b7:3e:0a:26:
27:23:97:9d:e2:e7:f4:ec:8a:39:b3:87:1b:ac:cf:
82:04:b9:90:bd:ac:e4:73:78:7e:29:3c:06:13:fc:
ee:be:97:d9:13:e3:73:ee:35:81:43:2d:50:5b:6b:
51:79:0f:df:ad:fc:75:7c:1e:fc:c0:65:d5:b2:b6:
c0:92:fd:2e:ff:f6:cd:cf:dc:60:df:ed:ad:23:9d:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EE:0D:47:7D:3F:A9:30:D0:D7:67:67:B6:E8:C9:62:12:62:10:5E
X509v3 Authority Key Identifier:
keyid:10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/DO4NR30_qTDQ12dntujJYhJiEF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.112.0/24
IPv6:
2a0a:4a40::/29
Signature Algorithm: sha256WithRSAEncryption
6c:ac:7b:ab:ca:68:8f:2f:34:89:cd:6e:73:01:8a:e7:3b:d1:
15:d4:85:13:b1:ae:61:fb:bb:85:15:c4:e1:3f:f3:73:0d:ac:
08:58:16:9a:4f:18:f3:fe:0b:7b:cc:0a:78:ba:3b:3a:05:29:
0c:af:98:44:ec:44:4d:75:d8:57:80:46:d8:2b:85:e8:07:34:
98:6f:62:9a:c8:c2:0a:4f:c0:62:85:49:c7:f0:9f:7c:36:05:
e8:88:50:7d:b3:2c:2c:21:ec:d6:05:30:0a:00:dd:0c:ec:26:
f2:4b:15:f0:0a:6a:c3:08:b1:0e:c7:dc:13:ef:96:6e:c6:70:
11:f7:26:6e:fe:97:06:4b:90:c4:4e:86:54:bd:1b:59:4c:b0:
1e:8c:01:12:b1:59:da:cb:08:87:d8:d1:57:94:64:96:d0:20:
87:a9:8b:5b:d3:01:c4:3a:9e:31:13:7d:66:c4:5b:fc:ee:b4:
bb:61:3c:8e:39:9b:d1:9f:b0:cb:90:af:55:39:f1:4d:63:94:
a8:74:bc:55:75:11:ba:40:21:15:5f:2f:1f:44:b5:19:1a:97:
92:3b:b9:3e:bd:02:19:a1:7f:67:20:9e:b1:93:fd:d8:81:4b:
1b:33:d9:be:c3:5c:c6:df:c1:9b:00:99:75:53:6f:69:1d:4b:
be:18:f7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:48 2025 by rpki-client