Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/Dv5aKJ2pDNq6PQejY9KYLcZgexI.roa
File: Dv5aKJ2pDNq6PQejY9KYLcZgexI.roa (raw, json)
Hash identifier: LTTZywdBBEaru6D3i2kCVgDeRzQz8voiBDF73OfU/U0=
Subject key identifier: 0E:FE:5A:28:9D:A9:0C:DA:BA:3D:07:A3:63:D2:98:2D:C6:60:7B:12
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 01941FFA6E9422B5C6CBF92350F61F9E9089
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/Dv5aKJ2pDNq6PQejY9KYLcZgexI.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215974
IP address blocks: 86.107.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6e:94:22:b5:c6:cb:f9:23:50:f6:1f:9e:90:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0efe5a289da90cdaba3d07a363d2982dc6607b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:4a:7c:ea:f8:91:c4:dd:bb:49:2a:82:74:
13:ef:2d:7b:05:db:fe:a4:bd:f7:6f:b4:14:fb:e6:
87:14:41:6c:d3:7e:1e:b7:4f:53:27:f5:1c:90:98:
7f:a7:ae:cf:e9:cb:f4:00:68:b6:53:e8:90:52:6f:
d2:26:08:8f:09:ed:16:32:af:e0:4b:0b:ef:44:20:
1c:e3:2d:99:e9:df:a7:2f:98:13:c5:40:09:63:10:
49:63:17:2c:94:43:17:59:ba:8f:8e:b4:32:47:0c:
f0:0f:4b:ff:f2:a9:06:b2:8b:42:9e:7a:ba:b5:6c:
1e:9e:06:8a:29:d0:9d:7d:63:02:42:a5:59:62:b2:
9d:0e:38:5b:ed:2e:3c:44:e0:bb:bf:2a:a3:c2:ba:
64:66:dd:55:63:2a:b4:9a:c3:b2:1b:ca:f0:1b:94:
72:08:c3:b5:33:f5:28:43:2b:54:57:7c:31:0b:38:
ed:33:ec:ec:8f:9e:26:fd:08:28:fa:06:f5:5e:6b:
5c:dc:f3:b1:3a:02:c3:7d:9d:4e:68:2d:c2:65:79:
50:69:60:82:f9:09:ae:f5:88:15:a9:e5:11:2b:c7:
b7:d5:9e:a9:8e:02:3f:15:cf:47:32:d5:f4:e7:b0:
05:be:db:78:38:1c:b7:b4:7f:77:44:d2:e6:3a:ef:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FE:5A:28:9D:A9:0C:DA:BA:3D:07:A3:63:D2:98:2D:C6:60:7B:12
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/Dv5aKJ2pDNq6PQejY9KYLcZgexI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.6.0/23
Signature Algorithm: sha256WithRSAEncryption
01:11:ec:5c:d7:84:eb:de:c1:29:5b:00:9e:e7:8e:82:4c:af:
8d:23:c9:d5:f5:40:be:45:e3:be:e7:2d:c4:cd:be:5d:4e:c8:
34:66:44:7e:88:89:a4:51:c4:7a:d8:46:f3:34:06:5c:82:2b:
e8:28:40:df:2d:3d:37:99:b0:9d:8f:5f:6f:a8:6e:a8:17:25:
ab:ac:e4:2f:a3:f4:1f:40:7a:23:fa:78:c7:10:3e:73:5d:a8:
95:5b:2d:41:c4:17:e4:cb:54:82:5a:26:7f:ba:79:8f:e0:9d:
de:c6:73:8d:7b:3a:ff:e4:b4:a5:a5:3b:67:3f:33:6b:7e:f3:
2a:f4:91:5c:d2:8e:dd:28:6f:e7:68:bb:f2:60:0d:d6:d8:07:
bf:69:0a:48:36:9f:66:7d:1f:72:76:fc:c4:b6:ec:7a:d7:a4:
2a:b7:8b:8f:45:bb:3c:3a:f8:f2:f8:08:df:2e:c2:3f:61:ee:
b8:be:89:65:93:58:1f:09:70:ef:58:94:c7:26:a2:d8:47:e7:
b9:e6:21:42:12:12:32:c9:06:f9:dc:c8:ea:b6:c4:30:2c:cd:
63:1f:db:0b:f2:fb:63:99:7d:64:77:10:e5:e1:7c:7b:af:dd:
9f:10:cb:e6:a5:a4:39:64:da:0d:ac:8d:a2:d1:72:1e:ac:16:
33:12:48:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:55:03 2025 by rpki-client