Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/dcyYzxG1C_w_nBNFlVJtruOvAh0.roa
File: dcyYzxG1C_w_nBNFlVJtruOvAh0.roa (raw, json)
Hash identifier: plCR5uHg69g6tAPVlizUtVtwRqfn4K3Hux+I6ZCYSag=
Subject key identifier: 75:CC:98:CF:11:B5:0B:FC:3F:9C:13:45:95:52:6D:AE:E3:AF:02:1D
Certificate issuer: /CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Certificate serial: 0194221FA662182CFE84049412AF153F90C3
Authority key identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/dcyYzxG1C_w_nBNFlVJtruOvAh0.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61427
IP address blocks: 194.88.13.0/24 maxlen: 24
194.104.123.0/24 maxlen: 24
2a05:e207:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a6:62:18:2c:fe:84:04:94:12:af:15:3f:90:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75cc98cf11b50bfc3f9c134595526daee3af021d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:6d:fd:8c:95:33:8e:e1:c7:7b:b9:06:95:
f5:59:19:13:19:ae:2d:26:46:4d:e2:bc:bf:3e:6f:
11:fc:d8:5b:f6:08:d3:63:a2:07:73:c5:68:2d:f3:
db:f9:a7:2a:60:91:84:a8:0e:80:a9:33:c1:9b:da:
d9:9b:29:2f:38:d8:66:38:9e:73:06:74:4e:e7:6a:
a2:a6:35:c0:31:2a:48:91:06:20:4f:d6:4d:e2:b4:
ed:6f:86:bc:99:16:07:47:3a:03:52:fc:42:37:fe:
25:d7:58:b7:0d:5f:b3:d1:72:64:ba:5b:91:8f:99:
85:25:b6:ed:58:fc:3d:8f:a3:c6:ba:c3:cc:a5:4e:
70:59:bf:d9:d3:48:7a:e0:89:37:7c:ab:9a:77:85:
e2:db:0c:9b:6d:9f:7b:ee:1e:c2:75:32:c8:38:09:
cf:08:72:65:c8:40:90:17:e4:6e:aa:c7:a6:30:4c:
91:86:a5:6f:90:42:9b:a8:65:02:77:db:7b:cf:87:
4b:43:99:3b:9c:e5:54:85:d5:b3:b1:a0:e9:75:64:
a2:02:98:93:43:7d:04:8d:f7:1f:2e:ff:f6:9c:56:
af:c3:b2:61:9a:e7:18:ad:93:a9:03:63:08:17:94:
9e:31:84:64:12:d2:db:d9:34:95:c5:b1:78:03:4f:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CC:98:CF:11:B5:0B:FC:3F:9C:13:45:95:52:6D:AE:E3:AF:02:1D
X509v3 Authority Key Identifier:
keyid:5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/dcyYzxG1C_w_nBNFlVJtruOvAh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.13.0/24
194.104.123.0/24
IPv6:
2a05:e207:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
8e:dd:e2:e6:f5:d4:73:81:fa:b4:92:eb:0b:aa:33:c9:9f:4c:
3c:e9:f0:75:52:cb:af:ee:2d:52:a4:5f:71:9d:71:3a:4b:66:
7e:18:55:5f:3c:b2:9b:ea:b0:c7:92:46:97:0a:e2:aa:50:dd:
e1:46:ed:6f:6e:ec:aa:fe:32:3a:67:8c:ad:da:bc:4f:b0:fe:
08:c1:a3:ce:19:04:e5:93:af:ed:d4:e0:1d:95:00:e5:28:d5:
99:36:52:ad:d3:66:73:57:4d:8b:78:e4:28:1c:79:dd:89:77:
f3:7b:4e:80:c2:3f:e5:11:cb:10:4b:24:5f:30:6e:7d:71:32:
3d:d5:c8:b9:8c:a5:d8:2f:a1:9a:a9:51:af:ff:be:50:cd:ac:
e9:ce:3c:0f:e6:33:2b:79:c0:d2:4c:31:67:10:a1:f1:b7:41:
62:53:9d:82:e1:c1:50:12:af:16:96:68:64:9d:ea:29:11:84:
b5:ea:59:56:bc:60:d8:31:da:7b:8c:52:42:f0:21:fa:67:47:
df:93:2e:d0:14:c7:e9:14:c7:16:71:7b:31:9c:6c:c2:ed:fc:
1b:a2:55:d3:28:57:76:91:f4:3b:a6:55:8f:d3:e7:01:27:4f:
3c:52:d6:36:4d:39:75:38:15:29:5e:65:39:2d:6f:06:20:b4:
da:20:69:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:31 2025 by rpki-client