Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/DUbzn18jGSEKxQrX9oEazzWzSMo.roa
File: DUbzn18jGSEKxQrX9oEazzWzSMo.roa (raw, json)
Hash identifier: oU84UgRZeT9Minc4TzcGpKJzKJzdWVI+6vdlCTA5XRA=
Subject key identifier: 0D:46:F3:9F:5F:23:19:21:0A:C5:0A:D7:F6:81:1A:CF:35:B3:48:CA
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A58C1ED8C49470DA3504EF6981A36
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/DUbzn18jGSEKxQrX9oEazzWzSMo.roa
Signing time: Wed 01 Jan 2025 19:49:19 +0000
ROA not before: Wed 01 Jan 2025 19:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213363
IP address blocks: 185.114.226.0/24 maxlen: 32
185.166.236.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:58:c1:ed:8c:49:47:0d:a3:50:4e:f6:98:1a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d46f39f5f2319210ac50ad7f6811acf35b348ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:c8:c5:c6:7a:0b:84:e0:b7:2a:2f:fa:b2:
c8:a9:2c:da:91:bb:d6:de:7a:a5:68:6e:7d:07:cd:
88:b9:92:2c:73:ad:3f:1d:8b:91:06:09:94:7d:ee:
5f:8e:3b:24:50:ae:7e:5e:24:14:07:01:6a:81:9c:
ac:4b:d3:b9:ef:00:ba:e6:8c:aa:c5:54:df:4f:c7:
d4:86:a5:a4:a1:c4:e7:81:b1:d4:bd:cc:0d:40:39:
e4:31:be:f4:b1:be:5f:93:33:5c:3e:02:5f:95:8d:
56:63:a6:ab:3c:81:b8:27:c9:e1:6f:7a:90:6a:77:
78:97:cd:e7:74:55:01:bb:1a:68:b9:2a:c3:bd:a5:
d1:ca:61:20:9d:ee:5b:4a:71:aa:f1:65:d0:1b:5b:
14:03:6b:6d:b9:b2:51:e5:b8:46:23:3a:63:7f:b8:
78:f7:d1:a6:13:1a:32:8a:13:1b:9f:21:5f:dc:63:
69:b3:3b:12:71:d3:4e:89:11:26:8f:09:81:34:6d:
df:bf:e3:52:12:80:3c:02:bb:1f:8d:b9:ec:64:21:
27:38:a9:f9:6c:ef:f3:b8:35:f2:e4:de:22:e1:9b:
83:df:50:1c:5f:97:a9:ff:e4:3e:93:9e:f1:58:9c:
f9:56:46:af:58:0f:a8:7d:8d:97:27:c2:e0:a2:c4:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:46:F3:9F:5F:23:19:21:0A:C5:0A:D7:F6:81:1A:CF:35:B3:48:CA
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/DUbzn18jGSEKxQrX9oEazzWzSMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.226.0/24
185.166.236.0/24
Signature Algorithm: sha256WithRSAEncryption
19:32:26:93:c3:23:92:2a:e5:72:22:ed:0f:89:04:79:2c:58:
97:b0:a0:eb:d5:ee:51:09:f4:e2:70:9a:10:2a:cf:d2:c3:55:
6f:46:de:29:ed:5a:c5:0e:63:01:93:dd:8a:20:fa:51:9f:34:
d2:f2:ee:50:1e:6f:a4:18:52:0a:8e:92:fa:18:fb:f3:63:a9:
bb:5b:8a:06:29:c0:7f:6a:9c:57:6c:93:9f:b1:e0:1b:d4:cc:
b7:3c:a0:f5:17:49:a6:34:6a:0f:ff:7a:17:8b:9b:79:55:ef:
b1:b5:ea:f3:16:c0:47:7b:56:cd:ae:d8:fd:89:7b:0b:28:e1:
0c:a2:99:d2:3c:ee:32:26:a0:99:4f:71:1f:5a:f3:48:d5:62:
b5:9a:df:26:3e:8a:32:e5:23:34:8a:fe:96:8e:43:ff:e5:33:
e1:d6:43:cf:77:b4:c0:55:30:c6:9b:e1:21:4c:9a:e5:c2:e5:
30:25:5f:3e:17:82:a8:62:25:1e:09:6c:69:23:78:d9:18:2f:
51:87:b5:11:fb:af:21:89:3c:fb:df:ff:a5:44:9f:86:d8:d1:
3e:0d:54:fe:6c:36:5d:f0:37:2e:53:69:9d:53:6e:e2:fd:63:
61:b0:a4:5c:dd:c4:d7:4f:9b:ff:a0:bd:9e:3a:af:af:1b:09:
ee:f4:7c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:48 2025 by rpki-client