Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/dKE9hADhrXXSj4bgsaxD3zPEySc.roa
File: dKE9hADhrXXSj4bgsaxD3zPEySc.roa (raw, json)
Hash identifier: AvIgleYfeC38PH06ZnFYrCFVOPzW3DwxItIktvn0fKI=
Subject key identifier: 74:A1:3D:84:00:E1:AD:75:D2:8F:86:E0:B1:AC:43:DF:33:C4:C9:27
Certificate issuer: /CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Certificate serial: 0195C851F882FFB45C97E92467A2B28126AF
Authority key identifier: 34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/dKE9hADhrXXSj4bgsaxD3zPEySc.roa
Signing time: Mon 24 Mar 2025 13:22:49 +0000
ROA not before: Mon 24 Mar 2025 13:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34309
IP address blocks: 5.102.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:51:f8:82:ff:b4:5c:97:e9:24:67:a2:b2:81:26:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Validity
Not Before: Mar 24 13:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74a13d8400e1ad75d28f86e0b1ac43df33c4c927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:4d:24:5f:90:7a:1e:ce:02:f1:03:c7:3f:
24:cd:38:02:4f:32:44:f2:eb:20:bb:16:3d:89:45:
9f:69:e6:9a:cb:ba:99:90:92:ee:df:e5:bd:b0:db:
06:fe:0e:c6:02:72:69:08:4b:f1:df:99:2b:90:12:
35:2c:99:6c:a5:3c:6b:52:8b:33:02:bc:51:a1:cd:
6f:34:02:7d:37:ef:6d:b6:4c:d7:fc:b9:ab:0b:c1:
63:27:42:2b:11:13:84:49:30:2f:40:66:d7:46:53:
29:89:26:9d:35:eb:ea:91:86:d0:4f:38:47:44:60:
1f:da:c8:84:b8:ee:e1:13:ba:ab:3d:21:54:4a:ed:
0c:ff:3f:88:ce:00:2c:d9:83:d3:94:3c:f5:aa:52:
8a:96:a0:ba:71:0f:1f:8c:ba:d7:00:aa:e5:d7:2c:
9b:46:7f:a9:14:ef:05:95:bb:62:2d:af:12:7f:28:
43:07:7a:9f:14:8c:d1:39:17:9f:59:bc:98:11:4f:
84:bf:8e:65:98:17:2f:32:54:bf:b1:90:a4:fe:1e:
07:82:46:a1:9a:73:62:6f:73:1d:c7:ad:dc:e1:43:
7e:f6:8e:2e:05:8f:08:7e:f2:c5:01:5e:3b:1f:1b:
e4:8f:b0:d4:a3:7f:3d:c1:dd:77:16:af:ab:05:c7:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A1:3D:84:00:E1:AD:75:D2:8F:86:E0:B1:AC:43:DF:33:C4:C9:27
X509v3 Authority Key Identifier:
keyid:34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/dKE9hADhrXXSj4bgsaxD3zPEySc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.32.0/22
Signature Algorithm: sha256WithRSAEncryption
af:36:fc:5e:a8:61:ff:4a:60:a7:d1:c4:c2:29:e1:b0:df:9a:
70:97:b3:fb:79:14:16:8f:f6:6f:a7:71:33:7c:df:d9:cc:db:
6a:c0:15:a3:b4:dd:01:f6:3f:38:66:06:b6:12:4d:c3:92:21:
6f:1b:89:bf:c7:bd:fd:23:db:30:78:b5:9c:58:bd:5a:79:60:
50:06:ea:fa:c3:18:5b:06:1c:af:7a:92:ff:70:ed:33:9e:0a:
13:39:3d:fe:a1:df:85:f3:33:42:e8:99:f7:09:4f:bf:c6:af:
3b:d6:d6:fa:4e:ac:e4:b1:ef:a0:36:b6:d8:66:06:fc:05:0c:
6e:a0:11:52:40:c4:8d:16:e5:56:7b:68:3e:9d:4d:f8:e2:ce:
13:36:b5:02:08:eb:54:3d:91:a8:af:62:41:00:9c:79:9d:b5:
a4:55:ae:2b:3d:d7:23:ad:bc:10:1b:cf:d4:c4:b6:f0:56:b1:
42:17:ed:18:04:3b:8f:b9:46:83:be:19:3e:41:39:a1:22:11:
25:c6:00:76:1c:90:68:ed:cd:27:47:70:0b:72:ad:2d:b4:41:
fd:d1:0d:44:2c:73:a0:41:fa:44:5d:87:04:25:d2:be:64:29:
7a:b6:90:09:7c:d7:ab:55:bd:a8:e8:b7:2d:d8:be:be:e9:bc:
56:c6:77:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:02:14 2025 by rpki-client