Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/DpbDGYuSSaWzzgrdz6W4vqNmmhw.roa
File: DpbDGYuSSaWzzgrdz6W4vqNmmhw.roa (raw, json)
Hash identifier: 5tkDlsov8OnandXExeM2ji6iL6ZbEP6tIh+Ua/rRIxk=
Subject key identifier: 0E:96:C3:19:8B:92:49:A5:B3:CE:0A:DD:CF:A5:B8:BE:A3:66:9A:1C
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01956C0853BF8048973DCC7A6A57CD396474
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/DpbDGYuSSaWzzgrdz6W4vqNmmhw.roa
Signing time: Thu 06 Mar 2025 15:17:19 +0000
ROA not before: Thu 06 Mar 2025 15:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 217.147.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:08:53:bf:80:48:97:3d:cc:7a:6a:57:cd:39:64:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 6 15:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e96c3198b9249a5b3ce0addcfa5b8bea3669a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:de:cc:00:e7:d9:6f:9d:79:e5:f0:76:43:
a0:98:6d:0b:49:f7:64:fd:d6:e2:2e:4e:39:8e:1c:
8e:72:47:18:17:a3:71:ee:3a:e5:11:95:0f:cf:3c:
6a:7d:23:27:f5:b2:ce:19:81:6d:75:bd:33:6e:74:
ff:a0:20:97:5e:80:c5:88:bb:55:bf:6c:fc:4f:e9:
a8:b7:3d:4c:17:9f:e4:e6:61:61:a7:72:5b:15:e5:
ca:25:a1:f4:fc:45:a0:fa:13:a2:be:a7:63:ec:c7:
99:8e:1a:63:df:2e:3d:13:5d:6f:12:39:b6:fa:63:
46:02:e3:c5:6c:76:a9:bd:21:d2:10:5c:5a:5c:68:
43:76:6e:1a:76:18:19:32:5d:c6:aa:ae:44:42:24:
3a:1c:97:f3:a2:3f:df:6a:e4:e0:84:af:79:a4:f4:
06:d4:91:2e:94:c4:c6:7e:f7:6f:dc:d7:3b:de:a6:
51:2a:0e:65:4a:bb:8a:9b:a0:20:3c:3f:37:d9:14:
15:b7:fc:92:18:71:a9:e0:ef:6b:2f:1d:09:2c:23:
a4:15:57:f8:65:60:66:e4:b9:51:eb:c6:15:1f:bd:
07:3b:0c:60:75:c4:d0:e4:90:0f:f5:a7:a2:0b:47:
45:15:bf:84:b9:65:3d:a5:5e:3d:24:d1:34:39:a7:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:96:C3:19:8B:92:49:A5:B3:CE:0A:DD:CF:A5:B8:BE:A3:66:9A:1C
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/DpbDGYuSSaWzzgrdz6W4vqNmmhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:3c:35:62:6e:15:a1:88:3d:8c:69:ab:87:09:78:c5:37:3b:
fd:29:22:8d:ca:2a:73:a6:9e:71:60:5e:4a:46:cb:7f:cd:f1:
71:24:70:a7:db:1a:b1:be:3d:9c:e1:c0:9d:e7:c4:8a:34:35:
01:f8:34:18:53:60:35:bc:df:b2:7c:d7:da:16:79:80:55:19:
c8:3f:32:35:af:1f:57:4e:5c:fc:d6:87:f7:d2:19:d3:b7:ff:
04:b2:57:02:0a:a4:0f:22:ad:56:5b:fa:29:f8:76:5b:55:93:
83:ee:f7:08:d3:93:30:96:5d:d5:5f:50:22:21:33:e7:32:04:
b3:01:92:ef:7d:f8:38:4a:11:60:c2:1d:94:cd:1c:a8:d8:23:
c3:af:29:91:8e:0f:5c:ed:8d:a4:06:20:77:e2:d2:86:ea:f8:
b5:64:be:50:59:7e:3c:7d:1b:5a:62:c6:51:f2:e0:1c:c1:85:
9d:ce:30:2a:87:f6:43:33:96:fb:56:8e:f5:e9:b2:df:0a:1e:
ba:ab:fa:87:ae:aa:20:08:c8:a6:26:43:a6:e7:49:c9:b7:82:
42:d5:ca:d8:16:e1:9e:4c:f0:97:e0:70:da:1a:1b:2e:37:81:
c7:ac:85:2c:68:cc:69:b6:3f:45:ca:4b:23:4b:19:ed:9a:e8:
47:f3:4d:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVsCFO/gEiXPcx6alfNOWR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjUwMzA2MTUxNzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTk2YzMxOThiOTI0OWE1YjNjZTBhZGRjZmE1YjhiZWEzNjY5YTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmbezADn2W+deeXwdkOgmG0LSfdk
/dbiLk45jhyOckcYF6Nx7jrlEZUPzzxqfSMn9bLOGYFtdb0zbnT/oCCXXoDFiLtV
v2z8T+motz1MF5/k5mFhp3JbFeXKJaH0/EWg+hOivqdj7MeZjhpj3y49E11vEjm2
+mNGAuPFbHapvSHSEFxaXGhDdm4adhgZMl3Gqq5EQiQ6HJfzoj/fauTghK95pPQG
1JEulMTGfvdv3Nc73qZRKg5lSruKm6AgPD832RQVt/ySGHGp4O9rLx0JLCOkFVf4
ZWBm5LlR68YVH70HOwxgdcTQ5JAP9aeiC0dFFb+EuWU9pV49JNE0Oacp5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA6WwxmLkkmls84K3c+luL6jZpocMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvRHBiREdZdVNTYVd6emdyZHo2VzR2cU5tbWh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ZMMMA0G
CSqGSIb3DQEBCwUAA4IBAQCLPDVibhWhiD2MaauHCXjFNzv9KSKNyipzpp5xYF5K
Rst/zfFxJHCn2xqxvj2c4cCd58SKNDUB+DQYU2A1vN+yfNfaFnmAVRnIPzI1rx9X
Tlz81of30hnTt/8EslcCCqQPIq1WW/op+HZbVZOD7vcI05Mwll3VX1AiITPnMgSz
AZLvffg4ShFgwh2UzRyo2CPDrymRjg9c7Y2kBiB34tKG6vi1ZL5QWX48fRtaYsZR
8uAcwYWdzjAqh/ZDM5b7Vo716bLfCh66q/qHrqogCMimJkOm50nJt4JC1crYFuGe
TPCX4HDaGhsuN4HHrIUsaMxptj9FyksjSxntmuhH802d
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:42 2025 by rpki-client