Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/DyGONROpzLGlyewaFIelLWI6SMU.roa
File: DyGONROpzLGlyewaFIelLWI6SMU.roa (raw, json)
Hash identifier: zk6EZfL1mDi7cPDh2Zn1k+xfg8NPnR9xZPsqNNGumxI=
Subject key identifier: 0F:21:8E:35:13:A9:CC:B1:A5:C9:EC:1A:14:87:A5:2D:62:3A:48:C5
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD59879ED074AF48F7F1DE4D79A5F0
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/DyGONROpzLGlyewaFIelLWI6SMU.roa
Signing time: Thu 02 Jan 2025 07:49:07 +0000
ROA not before: Thu 02 Jan 2025 07:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51764
IP address blocks: 195.208.200.0/24 maxlen: 24
195.208.201.0/24 maxlen: 24
195.208.202.0/24 maxlen: 24
195.208.203.0/24 maxlen: 24
195.209.100.0/24 maxlen: 24
195.209.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:59:87:9e:d0:74:af:48:f7:f1:de:4d:79:a5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f218e3513a9ccb1a5c9ec1a1487a52d623a48c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:2f:79:c5:96:d6:92:14:13:2e:22:c7:32:
b4:d3:cd:ec:7f:07:8c:a6:38:d2:74:fc:19:6f:b0:
9a:ce:bf:03:51:df:26:37:0d:72:db:99:76:a1:e4:
fe:5f:b0:fa:06:93:b0:6f:b1:19:ab:25:ec:7c:ab:
2a:42:88:bc:15:8e:2c:49:93:1d:28:c9:4d:ac:5b:
4d:3b:21:69:92:82:84:26:48:b0:07:a6:15:f1:d6:
cd:b3:a2:dd:92:05:62:48:73:d6:7e:0e:60:ba:ea:
88:2f:e6:be:69:fd:b2:0d:7f:c4:57:d8:1d:4d:78:
61:71:08:b7:36:05:d1:bc:20:c7:ee:2d:97:fe:92:
cf:ba:64:5c:b7:4b:79:67:2b:a1:c5:bd:e0:61:c2:
b6:af:55:74:50:e1:76:d1:c2:db:05:02:1f:bb:68:
34:7a:7b:2f:57:88:bb:38:0d:db:29:52:b1:1a:e2:
dc:dd:67:38:f2:b7:a0:1b:06:27:c1:71:9d:b5:53:
97:07:e0:c4:d6:3c:9e:23:d3:dc:6e:d1:b1:28:ed:
e6:57:45:25:c0:9f:c9:05:43:27:d9:8c:23:43:e3:
2f:d5:10:e2:1e:7b:53:ef:9d:33:5a:9d:4b:0d:29:
80:75:e4:43:ec:64:31:f8:c9:5e:17:14:e8:8a:42:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:21:8E:35:13:A9:CC:B1:A5:C9:EC:1A:14:87:A5:2D:62:3A:48:C5
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/DyGONROpzLGlyewaFIelLWI6SMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.200.0/22
195.209.100.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:10:f3:40:60:fa:3d:6e:9d:78:9d:ab:96:ec:3b:a7:b0:72:
50:d8:29:56:b7:8d:20:f6:4e:62:db:c8:11:fe:ca:44:13:c9:
57:22:09:fd:65:b2:13:07:52:d9:ac:8c:ad:f3:66:2b:6a:27:
a5:7a:08:0d:de:1e:85:10:1d:6b:d1:75:fb:1c:6f:ba:67:d6:
24:77:7e:6f:42:b7:07:97:a8:bc:c3:5d:2c:0c:aa:ee:45:cb:
bb:2a:c7:fd:e7:df:1c:f1:d9:ab:56:db:ae:f9:9e:b3:ca:37:
db:ff:29:01:4e:c1:3c:b8:8a:3d:7f:8c:b4:de:72:a8:b7:d2:
5c:4f:f2:f9:e8:1a:55:76:73:64:f6:89:fe:d9:1d:0b:0c:de:
13:d5:a2:10:71:ac:ff:e9:73:3d:6f:39:7b:9b:88:c5:cd:12:
31:b4:28:43:dd:38:2b:e8:b6:3d:cc:86:db:ec:f5:c1:5b:23:
de:86:2a:4f:15:40:f6:40:b2:73:4a:57:d3:6e:c2:f2:0d:fd:
b2:3e:06:1b:e3:0e:ce:59:18:a9:8e:6d:d0:e1:51:7c:87:2c:
c0:c1:90:28:a2:ee:28:6c:45:f4:2e:d6:a8:75:48:28:89:6f:
64:b4:74:08:59:01:ff:2c:a6:66:c8:42:12:6f:4c:56:24:8b:
9f:fc:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:51:37 2025 by rpki-client