Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/DfnZMzRfopEnH2bDeBKNDNamggM.roa
File: DfnZMzRfopEnH2bDeBKNDNamggM.roa (raw, json)
Hash identifier: S3Q9ApuCGqU2ZYj0uBVCO23UhtK6iRmFAcmb65wISmE=
Subject key identifier: 0D:F9:D9:33:34:5F:A2:91:27:1F:66:C3:78:12:8D:0C:D6:A6:82:03
Certificate issuer: /CN=a652cb32c2c86696e35f9b78d5f18b362614b168
Certificate serial: 0194266BDB3FE78CBFCF91558D1452D239CE
Authority key identifier: A6:52:CB:32:C2:C8:66:96:E3:5F:9B:78:D5:F1:8B:36:26:14:B1:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plLLMsLIZpbjX5t41fGLNiYUsWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/DfnZMzRfopEnH2bDeBKNDNamggM.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47692
IP address blocks: 194.0.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:db:3f:e7:8c:bf:cf:91:55:8d:14:52:d2:39:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a652cb32c2c86696e35f9b78d5f18b362614b168
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0df9d933345fa291271f66c378128d0cd6a68203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:b0:74:24:9f:bd:a0:90:78:96:8b:2e:35:
f7:04:d1:72:72:5f:3f:5b:14:da:19:6d:36:c6:7d:
ea:cc:a2:98:fe:73:b5:1f:23:5a:e1:dc:cc:0d:7a:
c0:50:d4:ba:ee:57:81:3a:52:f5:ab:98:03:0c:86:
7e:82:75:86:46:06:64:3f:39:e7:cd:96:88:16:55:
46:ad:5f:a3:dd:05:39:ca:f2:28:69:01:cf:7e:58:
9a:dd:4c:91:07:e4:68:ee:32:46:1e:05:eb:03:63:
3e:da:dc:f2:9e:0e:cf:b0:e5:57:87:37:e0:0a:84:
ed:1a:09:3a:87:33:50:27:40:40:e9:d6:0e:42:32:
3d:f7:bf:d7:19:c5:54:6d:bb:83:c1:31:cd:5a:45:
79:ea:dc:b4:a3:4c:c9:6e:60:6a:e9:e0:b6:91:3f:
09:25:a8:7a:3a:bc:f5:be:4b:6d:2a:98:f2:a7:9a:
e6:2c:97:e8:ba:b9:b4:79:82:de:a3:bf:03:dd:33:
62:12:e3:3b:41:3b:5f:c6:57:5c:dc:76:ce:e2:44:
71:6e:f6:f6:6c:c0:1a:91:71:b0:ce:70:bf:65:ab:
71:35:8c:30:a3:c1:a9:4f:40:0d:47:6b:3f:63:8e:
de:99:e7:54:16:c6:6c:45:a1:18:40:b0:e5:18:32:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F9:D9:33:34:5F:A2:91:27:1F:66:C3:78:12:8D:0C:D6:A6:82:03
X509v3 Authority Key Identifier:
keyid:A6:52:CB:32:C2:C8:66:96:E3:5F:9B:78:D5:F1:8B:36:26:14:B1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plLLMsLIZpbjX5t41fGLNiYUsWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/DfnZMzRfopEnH2bDeBKNDNamggM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.201.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:26:8c:ca:ee:e8:83:51:9d:f0:56:b8:84:fc:38:94:e9:35:
06:f4:83:fa:24:91:1d:f4:b0:9d:af:14:48:32:f0:fe:26:a8:
96:3c:8b:eb:11:a4:65:fe:d8:79:a2:63:e8:34:ba:fd:c2:84:
e3:fe:a0:d8:d5:e6:97:f6:08:7e:c0:e9:da:bc:52:2d:fd:41:
0b:36:ec:70:f4:6d:d9:4f:d5:46:9b:a2:85:b0:34:ee:b6:95:
96:03:e6:da:65:b0:ff:15:ce:69:36:ad:20:62:99:c6:a1:87:
03:29:8a:e4:f0:84:90:26:b8:31:8f:88:a3:19:cd:41:da:05:
c8:78:01:71:b7:9b:0f:d8:62:6c:a4:54:b6:b6:fa:7e:68:52:
f8:8e:51:11:dc:28:71:8a:c7:7f:81:6b:1b:d6:92:47:be:2d:
b5:3b:f2:4a:92:d3:56:26:b6:e7:69:c5:6b:3b:b1:25:f3:a5:
f4:e9:ff:e7:7d:c4:e8:50:05:d1:00:1f:2c:1c:85:cd:9d:03:
a2:17:98:72:f1:51:d4:8a:c0:ca:67:f9:1a:aa:19:41:75:b2:
24:cf:e3:29:0b:41:a5:51:b1:7d:a4:0d:e1:98:61:48:00:c9:
43:2d:2d:4a:f1:44:63:e8:00:6d:7a:1f:f3:78:4d:7a:53:8d:
b9:8e:b6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:12 2025 by rpki-client