Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/DWd1OJAlcB2kSAEMao72mBJOdXY.roa
File: DWd1OJAlcB2kSAEMao72mBJOdXY.roa (raw, json)
Hash identifier: AUWrMkI+mL2Ml+jd7sUK/SrRZUJ6V8L3ibna7HmKGhM=
Subject key identifier: 0D:67:75:38:90:25:70:1D:A4:48:01:0C:6A:8E:F6:98:12:4E:75:76
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 01942143B8AE4D6D493CBA2C802C9A6024D6
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/DWd1OJAlcB2kSAEMao72mBJOdXY.roa
Signing time: Wed 01 Jan 2025 09:47:53 +0000
ROA not before: Wed 01 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.209.208.0/24 maxlen: 24
185.209.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b8:ae:4d:6d:49:3c:ba:2c:80:2c:9a:60:24:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Jan 1 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d6775389025701da448010c6a8ef698124e7576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d8:43:a3:72:94:4d:ad:9d:33:85:31:15:1a:
1d:3c:85:58:8e:ee:83:83:79:c2:53:a1:7c:fc:55:
2f:6c:e5:12:60:29:ae:0b:63:ce:29:7b:ee:ef:d2:
68:be:4d:c5:04:b7:cb:8e:f3:bd:19:11:63:de:23:
ec:1f:64:8b:2e:e5:02:e3:33:6b:95:a2:2f:d2:21:
66:dd:78:e7:ad:45:85:77:60:13:3f:5f:00:6c:d2:
b8:3c:0a:43:1c:64:45:a2:e0:cd:32:64:6a:8c:0f:
78:8c:8d:28:06:b5:2b:e5:ff:83:31:14:07:14:b0:
25:97:31:ac:21:74:a3:35:d2:f2:7b:07:a9:ce:ac:
7b:e7:4f:cb:d2:89:11:ca:d3:f6:0f:92:f4:de:8b:
92:38:05:a0:07:d7:c9:0c:ba:4a:b6:29:25:cd:8f:
99:8c:07:1f:e1:8f:a8:24:25:67:ba:4e:f0:17:ba:
74:8d:20:8f:0b:20:1d:4c:c3:2e:f8:e5:4d:67:45:
e8:8f:2a:a4:7b:f3:99:80:d0:e0:88:10:61:cd:a2:
5e:f3:b1:11:95:7f:a3:0d:60:70:fc:95:4d:c7:d9:
9c:c9:c4:4c:6f:52:3e:6f:e4:9a:fc:36:d3:44:39:
c6:a1:62:d6:20:a7:23:58:2a:f0:a1:03:6b:71:df:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:67:75:38:90:25:70:1D:A4:48:01:0C:6A:8E:F6:98:12:4E:75:76
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/DWd1OJAlcB2kSAEMao72mBJOdXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.208.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:89:dc:cd:1e:af:aa:ee:db:a0:e1:a7:f4:45:61:3d:19:bd:
ce:27:7e:ed:0e:9b:e3:cf:00:f7:0a:ee:4d:cb:1f:a4:f5:0f:
c9:04:7c:b9:07:e0:a0:68:5f:d3:7b:5b:d4:ac:da:74:fa:24:
45:36:0e:dc:f2:d5:49:27:61:6c:5f:a7:a0:ae:58:8f:07:b5:
f3:87:f5:82:51:04:ee:17:f3:1e:16:95:e8:4e:b0:44:7e:95:
fe:4d:b1:f0:cb:96:7e:60:aa:b3:1c:c3:8e:31:1c:8a:a8:20:
0b:83:96:46:12:03:41:1e:ef:9e:22:86:1e:e2:53:e1:7a:e0:
74:eb:e0:49:3c:d2:4a:02:51:a1:a2:e2:9f:79:ac:af:50:e9:
89:f0:be:44:8d:67:eb:4f:c0:08:55:16:fa:01:12:54:e8:fd:
5c:81:c4:b8:74:ee:01:bd:9f:fc:ae:43:bd:cd:a0:c9:70:f8:
59:18:34:03:8f:62:eb:ad:aa:03:60:1a:37:c5:39:24:3f:e7:
17:3a:6d:4f:56:7e:82:33:29:6e:7b:65:cb:cb:23:f9:49:f7:
13:84:a8:0b:52:8d:d6:99:33:12:b7:b9:22:1e:5a:73:d6:2e:
e5:be:48:93:4a:e0:c8:ac:7c:ff:4c:b9:f3:58:45:8c:36:ff:
e3:91:8d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:22 2025 by rpki-client