Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/dnAa52jzMLokgprr8j83t7M0O7A.roa
File: dnAa52jzMLokgprr8j83t7M0O7A.roa (raw, json)
Hash identifier: RXb076NQLFmuO+ZHzSd4Sn5TggUypoGBas2+Hq6jEsg=
Subject key identifier: 76:70:1A:E7:68:F3:30:BA:24:82:9A:EB:F2:3F:37:B7:B3:34:3B:B0
Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial: 019421B22051AB823EFF837701EFFCACBE43
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/dnAa52jzMLokgprr8j83t7M0O7A.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12417
IP address blocks: 212.44.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:20:51:ab:82:3e:ff:83:77:01:ef:fc:ac:be:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76701ae768f330ba24829aebf23f37b7b3343bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:71:ec:9b:b8:9b:dc:dc:2a:89:02:8e:91:
2f:5a:79:9e:71:a5:1e:10:ac:bf:65:2d:d2:35:f3:
d8:b6:60:d9:32:b9:93:11:63:20:17:7d:ce:0c:67:
1b:34:c4:c4:b5:b8:61:68:e5:e3:97:ab:ba:67:47:
e0:a2:b5:ae:3c:33:8d:f2:b2:cc:4f:d6:4b:c3:c8:
95:dc:dc:8e:df:95:e3:0f:9b:5a:22:5f:f2:25:ca:
83:36:ed:d0:15:c0:9f:a8:84:34:8b:ef:79:2a:59:
50:92:26:e0:15:12:0e:46:e9:bd:72:0b:6d:36:4d:
94:32:3a:2a:c8:c0:8c:9b:c6:53:34:c0:4f:12:30:
1d:74:2f:bd:5f:66:99:6b:99:0e:7d:92:c3:ee:da:
29:68:bf:03:34:05:80:16:52:1c:84:bd:b9:86:70:
1a:10:36:98:ff:91:a0:82:49:01:61:ee:e7:08:4d:
05:3c:d7:9b:cc:97:6f:4d:12:73:87:f7:f4:f2:1b:
80:67:a7:66:c2:41:08:44:94:c8:cf:1a:da:dc:ad:
84:b8:3d:0f:10:ac:4b:14:0b:57:03:53:99:cb:4c:
13:62:38:b0:29:2b:87:79:f3:20:26:2e:ef:58:bd:
f3:d1:c0:05:57:20:c0:31:1a:62:cf:24:a4:98:e6:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:70:1A:E7:68:F3:30:BA:24:82:9A:EB:F2:3F:37:B7:B3:34:3B:B0
X509v3 Authority Key Identifier:
keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/dnAa52jzMLokgprr8j83t7M0O7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.44.127.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:31:7b:6b:6e:f0:62:b7:d8:a1:69:67:ab:9a:8b:a3:18:e5:
52:e4:69:50:86:47:af:29:8d:82:2e:5c:64:3c:9a:49:c9:e4:
17:94:b4:04:ed:2c:5b:3e:52:35:ac:ac:8e:31:f3:05:7b:59:
54:40:49:d3:e4:6d:1f:f7:91:9b:e5:8e:34:22:ab:d4:3d:22:
0f:bc:6f:ee:5c:ba:cd:ff:74:a1:e5:68:86:67:22:71:ad:8b:
b5:38:e2:35:dc:cd:f5:4b:6e:06:c6:d6:f0:a8:25:61:10:90:
bf:73:84:1a:02:d9:0e:d8:45:ab:4d:8e:04:d4:98:88:70:f1:
4e:96:3b:5d:9c:34:e5:c2:b0:60:af:68:59:e9:43:3e:c5:c5:
e4:16:59:55:24:97:fd:f2:b6:d9:6f:20:f4:db:c5:2a:34:08:
29:98:bd:3e:ac:76:15:46:53:c2:38:b1:08:92:6f:e8:34:e0:
e0:da:1a:81:79:e9:71:a3:3e:af:42:e7:d4:83:fc:1a:e8:1c:
ed:da:c7:79:95:72:28:87:92:31:87:1b:3e:76:d9:3b:97:80:
3b:b7:02:e4:66:58:d5:4e:cf:7d:1c:a6:70:b7:da:dd:fd:4a:
03:2a:d5:94:df:40:89:63:43:63:84:a0:41:3b:d1:94:a8:12:
89:1e:e6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:27 2025 by rpki-client