Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/Dp9S7DtPUM200gi6O6yBPEaasas.roa
File: Dp9S7DtPUM200gi6O6yBPEaasas.roa (raw, json)
Hash identifier: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=
Subject key identifier: 0E:9F:52:EC:3B:4F:50:CD:B4:D2:08:BA:3B:AC:81:3C:46:9A:B1:AB
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019427B5853A84115DCD6D664A0D18C5D0F7
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/Dp9S7DtPUM200gi6O6yBPEaasas.roa
Signing time: Thu 02 Jan 2025 15:49:55 +0000
ROA not before: Thu 02 Jan 2025 15:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 194.62.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:85:3a:84:11:5d:cd:6d:66:4a:0d:18:c5:d0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jan 2 15:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e9f52ec3b4f50cdb4d208ba3bac813c469ab1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:27:6a:b3:c2:c1:b7:dd:93:6e:6b:96:50:
c1:d9:24:ad:7f:dd:75:76:f8:c7:d4:48:fd:11:e9:
d7:71:aa:90:9c:17:b0:2d:69:d5:65:8d:70:7e:94:
f7:e7:bf:9b:99:73:8b:ab:82:71:8c:39:7e:7c:31:
a3:d2:11:61:8c:63:cb:dd:5a:47:98:dc:63:16:46:
e9:26:e7:1c:35:17:a2:9d:84:66:23:11:4f:7e:a5:
69:b4:ae:62:c0:88:3a:da:24:26:ad:26:4b:1a:25:
43:e7:45:5e:0e:53:2a:3a:e5:ff:1c:5b:35:42:81:
51:88:d5:e6:ee:c5:59:1d:ac:b1:32:b7:18:c7:e0:
c4:63:74:3d:4c:38:d8:df:6f:e3:28:24:3a:97:8b:
dc:c0:ad:b6:7d:83:a7:8e:3d:fd:91:47:90:54:3c:
0f:02:3d:4a:7f:8a:7d:bc:4b:1e:f8:36:0b:af:09:
68:cd:64:f0:1d:f0:73:7b:33:af:69:f0:f4:b3:b8:
29:f7:cc:ca:ea:7e:1e:a7:d7:46:06:09:89:d3:9e:
9b:36:d2:71:15:0a:a7:4f:7e:89:d0:7c:1a:d7:13:
f8:51:45:bf:f1:7a:53:0b:22:b5:e5:8f:11:e7:21:
c6:31:04:d2:d5:8b:53:2a:55:93:28:f8:2d:e5:2f:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9F:52:EC:3B:4F:50:CD:B4:D2:08:BA:3B:AC:81:3C:46:9A:B1:AB
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/Dp9S7DtPUM200gi6O6yBPEaasas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.107.0/24
Signature Algorithm: sha256WithRSAEncryption
89:9f:fd:96:80:e0:5f:26:bc:fa:3f:4e:46:b8:da:92:ff:ad:
46:66:5e:4b:63:0d:49:06:40:57:a6:41:e7:86:4e:9e:12:0e:
d3:47:aa:a8:31:2d:37:d5:b1:75:f8:68:48:94:82:c8:09:73:
55:50:5c:23:a6:93:ad:36:04:3f:4a:55:d2:d5:3a:40:e5:4a:
60:52:b9:a3:d4:55:52:b7:dc:c9:2b:86:7b:bf:73:e2:37:0c:
f9:b4:6c:83:3f:9c:b3:4f:17:1b:57:20:e4:eb:b1:e7:d0:a6:
24:27:d2:c6:dd:26:7f:0e:27:01:e0:b0:f3:68:08:3c:0a:46:
d4:19:b2:9a:a4:de:f1:19:eb:e5:03:40:04:35:4e:9b:e0:85:
00:5a:79:fb:65:60:9c:0b:50:fe:6d:f7:c8:2e:05:b1:cd:ba:
cc:86:cd:46:cf:18:86:81:a0:57:30:b9:e4:08:33:a6:02:e4:
4b:8c:31:00:dc:78:2b:34:a9:7f:61:d2:94:57:c1:6d:c0:ef:
58:74:e9:fe:eb:c6:1f:b1:ef:d8:03:4f:27:39:01:19:c4:0e:
da:79:6d:f8:34:2e:b6:b5:86:a2:b7:a2:e7:44:e9:7e:8b:e8:
05:2f:7a:54:74:4c:49:f0:38:30:2b:14:9e:7d:e0:ab:89:42:
90:63:ad:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:38:17 2025 by rpki-client