Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/DoWPZtpC_HWnwGYFf_FzalBO300.roa
File: DoWPZtpC_HWnwGYFf_FzalBO300.roa (raw, json)
Hash identifier: WIbVE4iIQHDloWZiobD5nOBiotUirQnxdqGFBtG1XvA=
Subject key identifier: 0E:85:8F:66:DA:42:FC:75:A7:C0:66:05:7F:F1:73:6A:50:4E:DF:4D
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 019420D654B110A007CF64B341C057C7E31F
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/DoWPZtpC_HWnwGYFf_FzalBO300.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202284
IP address blocks: 31.13.184.0/22 maxlen: 24
2a04:bb00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:54:b1:10:a0:07:cf:64:b3:41:c0:57:c7:e3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e858f66da42fc75a7c066057ff1736a504edf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:39:9a:dc:35:de:af:18:46:24:a2:f6:23:47:
cc:00:0b:d2:13:63:2e:07:87:6e:84:b6:f0:a7:39:
3e:1d:9d:12:ac:0d:c9:a6:fe:e7:f1:e2:38:53:c6:
1a:6a:6f:d5:d2:fe:fe:67:82:6f:79:e2:72:12:ca:
6a:41:34:e1:83:bb:3c:28:c2:a8:25:f9:8b:3e:0e:
2a:21:01:6f:b3:20:9c:a0:56:c3:f7:6f:ec:e3:6c:
6c:46:2d:be:ea:5d:a1:da:95:37:c5:7d:08:a7:69:
04:f5:4c:66:44:e4:c5:7f:2e:39:98:8d:67:d0:96:
a1:e0:f3:86:bc:6d:d8:e3:24:4f:8b:82:8c:8f:7a:
0a:10:f8:39:c8:28:a5:55:83:f2:e9:f0:5e:d2:37:
8d:ac:1e:d7:32:ea:89:77:c2:25:62:ae:97:f5:4b:
9d:d8:81:60:72:3c:40:22:3c:36:f3:86:e7:6f:b2:
91:ae:0e:c3:57:e7:89:73:ac:53:5f:61:b3:55:3a:
01:f0:7b:b4:49:cc:03:d6:99:d5:21:5b:f5:31:22:
01:61:4d:e5:87:37:6c:4c:da:bd:5b:f6:dc:5b:ee:
12:54:60:38:83:5d:38:d8:37:ae:2c:91:e1:b6:56:
45:08:3a:fe:06:51:ce:39:62:cb:f7:1c:be:ea:cf:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:85:8F:66:DA:42:FC:75:A7:C0:66:05:7F:F1:73:6A:50:4E:DF:4D
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/DoWPZtpC_HWnwGYFf_FzalBO300.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.184.0/22
IPv6:
2a04:bb00::/29
Signature Algorithm: sha256WithRSAEncryption
7f:a3:d8:82:6b:bf:00:9f:4b:8e:a1:fa:5b:e0:d9:22:36:56:
ac:d6:f6:bf:03:c8:5b:f9:4e:04:37:91:17:67:e3:0b:34:f2:
93:4c:3d:a6:a8:38:91:39:55:63:fe:67:be:43:64:e1:11:d3:
3e:b0:9c:c0:2a:63:80:b3:5c:cd:11:f4:c5:23:99:a0:d6:e0:
d2:40:d8:6b:76:ad:be:8b:57:e5:14:40:90:43:df:74:a5:8f:
4d:ea:09:0c:b5:b1:79:f9:8c:3e:10:65:e5:45:b4:69:0d:ce:
10:e6:2f:bf:c7:dd:10:37:94:9c:74:1f:00:06:e8:c9:0c:9d:
fb:95:22:78:c1:3d:13:4d:45:94:8a:0c:48:6d:bb:a1:03:5f:
47:cb:c8:23:c5:58:4e:eb:e1:5e:99:a8:fd:35:20:26:0b:cc:
48:66:93:a4:c1:9f:3e:78:56:50:84:30:00:cc:48:5d:8b:d8:
9c:03:88:6f:ea:35:d8:a5:c4:04:1e:c8:ea:cf:dd:cd:a9:96:
48:f0:b3:8a:1a:d0:c8:8b:54:f1:9e:cc:e2:26:ac:13:d0:e1:
c3:b8:3d:eb:0d:7b:10:b0:9a:d2:f6:cf:be:db:02:d9:91:60:
cb:13:64:f9:6f:eb:d0:55:b0:9a:bf:11:53:ab:53:b1:dd:d4:
57:68:76:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:27 2025 by rpki-client