Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/dkZNbopwMIyrpNTLtKS1BEFrSe4.roa
File: dkZNbopwMIyrpNTLtKS1BEFrSe4.roa (raw, json)
Hash identifier: WHiCQDL82pBvjlz/Bz6xK48gzCLCBs8LyNMasCyQoiU=
Subject key identifier: 76:46:4D:6E:8A:70:30:8C:AB:A4:D4:CB:B4:A4:B5:04:41:6B:49:EE
Certificate issuer: /CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Certificate serial: 01941FFA406BEEF6F919DDCFBE361F84EF22
Authority key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/dkZNbopwMIyrpNTLtKS1BEFrSe4.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15600
IP address blocks: 185.73.120.0/22 maxlen: 24
2a05:41c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:40:6b:ee:f6:f9:19:dd:cf:be:36:1f:84:ef:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76464d6e8a70308caba4d4cbb4a4b504416b49ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:8c:04:4a:66:5e:67:44:6e:4c:f4:21:b6:
ce:5a:5c:46:da:ea:00:41:6c:e9:a0:eb:0a:7b:ce:
17:2e:20:b8:5d:98:00:f2:84:63:4e:5e:d3:63:44:
f6:1d:00:a4:92:2b:c0:dc:df:8f:db:10:bd:09:7f:
8a:d0:a3:d2:49:9c:21:1e:d0:62:75:e8:ef:b4:a8:
ae:8a:1d:14:23:bd:6e:05:8e:2e:2b:77:9f:0f:09:
c0:aa:92:a9:51:49:1c:7e:b4:eb:50:5b:81:d8:0e:
a8:5d:1c:fc:9d:9e:30:6d:c1:17:ea:a5:4e:4b:0f:
85:65:59:a0:f3:54:90:71:14:99:29:6c:bf:c1:09:
9a:e2:f6:8a:05:49:2b:03:1d:73:bf:a2:6c:4a:20:
43:4a:a6:00:13:5d:6f:ea:05:c7:e3:e1:d2:6c:2e:
81:58:51:4e:aa:82:35:8a:b0:48:ea:62:e9:7d:6a:
3b:83:22:dd:de:16:c9:f9:11:06:16:81:4f:d6:6a:
c9:08:b1:c1:16:22:41:07:ea:c5:07:67:83:29:1e:
86:ce:58:04:e9:f9:74:b0:86:dd:85:44:7f:1a:db:
06:90:82:ff:7a:d6:d5:bb:88:c6:db:43:73:c7:da:
12:f2:6a:ae:dc:da:47:e9:3b:75:1d:82:23:34:21:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:46:4D:6E:8A:70:30:8C:AB:A4:D4:CB:B4:A4:B5:04:41:6B:49:EE
X509v3 Authority Key Identifier:
keyid:ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/dkZNbopwMIyrpNTLtKS1BEFrSe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.120.0/22
IPv6:
2a05:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:89:1f:9a:21:1a:0f:3f:0b:be:c7:0a:aa:98:84:61:63:d0:
c0:5b:2f:57:c6:ea:24:1d:70:27:80:e0:e6:a0:36:86:e1:c9:
fd:d7:cb:87:fa:00:8b:75:e0:00:67:74:30:e6:b2:17:f7:fd:
04:a2:9f:9e:ba:b9:87:e8:28:32:15:52:cb:66:3e:0c:bf:78:
1d:c3:21:81:2d:f1:9e:23:6b:bd:94:9c:97:e7:8a:e4:49:3a:
d6:ea:f6:35:5e:5f:e7:b6:e5:70:13:b1:35:da:46:f6:2b:a6:
7f:08:e6:a8:4a:8a:39:de:2b:27:e2:68:1f:8f:92:9f:69:59:
03:c8:d9:b2:ab:d4:ce:4d:79:57:d5:8b:10:8e:35:c4:fa:5c:
0b:51:06:ab:9d:42:85:95:9b:c9:bc:ec:cb:73:4a:0a:fe:f4:
ab:ad:1b:3b:47:4a:12:ee:64:b8:5b:50:04:e1:fd:e4:2f:88:
60:75:f1:77:98:83:b9:d0:e4:97:bd:95:2f:06:1c:af:22:c7:
c5:ed:24:03:86:28:10:7f:61:85:36:63:21:db:6d:9d:12:7b:
fb:36:48:eb:56:6a:fe:e7:be:5a:1a:58:57:34:c1:05:d7:1a:
e8:d5:e3:5c:ad:54:d1:f2:f5:b8:65:93:52:6c:16:a0:13:06:
cb:e8:d6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:18 2025 by rpki-client