Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/ddpb_wuKnMlAr7zHGIm8AB82iUA.roa
File: ddpb_wuKnMlAr7zHGIm8AB82iUA.roa (raw, json)
Hash identifier: B1F9vY9BeWV/mZWmkHXRYrhz+CLltzOE+dJil3lfRag=
Subject key identifier: 75:DA:5B:FF:0B:8A:9C:C9:40:AF:BC:C7:18:89:BC:00:1F:36:89:40
Certificate issuer: /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial: 019425FD9E720434E15951BF617FD717C5BA
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/ddpb_wuKnMlAr7zHGIm8AB82iUA.roa
Signing time: Thu 02 Jan 2025 07:49:25 +0000
ROA not before: Thu 02 Jan 2025 07:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24951
IP address blocks: 185.50.224.0/24 maxlen: 24
185.50.225.0/24 maxlen: 24
185.50.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9e:72:04:34:e1:59:51:bf:61:7f:d7:17:c5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Validity
Not Before: Jan 2 07:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75da5bff0b8a9cc940afbcc71889bc001f368940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:21:28:e2:76:79:db:69:b3:f0:6c:64:1b:
d3:95:2e:f1:11:fe:e7:a7:53:68:0e:81:ef:11:ea:
8a:3a:50:09:cf:51:3c:65:98:98:c4:10:e0:e6:45:
32:31:9f:0b:5e:14:b5:03:0b:56:71:63:06:f7:2f:
f0:07:08:0e:aa:a6:af:6e:d9:14:fd:92:13:dd:c5:
91:81:ed:9e:b6:43:7e:78:22:5b:ef:25:f1:3d:ec:
1d:be:aa:3c:67:5d:78:13:45:30:ce:25:8b:c4:b1:
a4:51:57:22:23:03:54:f8:a0:cb:1a:fa:1d:1b:74:
94:07:e7:de:d8:8f:da:8b:03:37:07:5a:ee:1a:19:
56:2f:72:f3:92:64:4a:2d:86:d5:44:dd:a5:f7:2c:
40:9e:8a:f0:cf:72:1d:3b:f0:18:39:ed:c2:b4:33:
d1:01:89:15:eb:bc:12:fd:59:57:12:33:1d:5d:9f:
1f:c2:4b:38:81:15:46:ce:a8:3b:62:51:e5:ee:4b:
3a:33:a1:4c:dd:8c:03:db:b2:97:0c:8a:48:ad:a7:
9a:12:52:73:df:99:12:15:66:5d:68:19:b1:82:ea:
ef:70:ef:4e:d3:80:40:7a:60:7a:ad:64:a6:98:9c:
34:af:d2:80:1a:cc:c0:50:8a:47:37:ad:56:10:7e:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:5B:FF:0B:8A:9C:C9:40:AF:BC:C7:18:89:BC:00:1F:36:89:40
X509v3 Authority Key Identifier:
keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/ddpb_wuKnMlAr7zHGIm8AB82iUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.224.0-185.50.226.255
Signature Algorithm: sha256WithRSAEncryption
57:05:dc:b9:5a:a7:11:9a:64:f7:b5:6e:6b:eb:5f:b8:b6:fe:
5f:96:58:37:6d:4b:f8:d3:77:8a:8b:b7:df:d2:36:b0:75:6c:
86:55:89:fe:05:4e:b7:8d:76:11:c6:4a:5e:5e:e7:e2:7a:f8:
26:ee:5a:a4:0b:96:d4:e7:b5:c0:e4:c3:ad:ef:b1:c9:d0:0b:
a6:0d:01:69:e5:ce:c0:a9:37:87:d6:39:2e:f2:29:aa:58:d3:
47:5d:9f:9b:f6:63:e5:c1:e4:47:72:e6:9b:a4:d7:57:39:5b:
f3:91:60:46:e7:6c:35:d8:7e:52:39:54:fc:31:94:71:d6:c5:
49:9e:05:a3:6a:9e:df:eb:55:4d:6a:48:ac:7a:37:d7:f8:0c:
df:60:e9:a9:54:a7:ee:4e:ba:68:cd:83:52:3c:7e:ca:3f:d0:
b7:5c:ce:5a:e8:94:70:fe:2f:43:fa:bb:02:fe:16:15:81:76:
96:cd:15:b9:ea:b9:a5:f9:07:e2:33:02:29:87:a5:79:d2:b1:
7d:b2:6e:22:2e:cc:45:b7:84:63:19:e9:20:c1:fe:f2:70:f1:
05:29:21:da:47:9b:4e:e5:f9:1b:99:70:22:5a:ca:9a:b4:5a:
e8:19:5e:b8:0a:97:2c:c6:6b:40:bf:11:23:f4:f5:4e:8e:d2:
62:ba:67:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:18 2025 by rpki-client