Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/dRFON_8KZhLV3A8FKdT60GP8fXU.roa
File: dRFON_8KZhLV3A8FKdT60GP8fXU.roa (raw, json)
Hash identifier: vZFsSXY8KKaWJVwCaYPPKczwOc+ZUmysk+xkANhTrsk=
Subject key identifier: 75:11:4E:37:FF:0A:66:12:D5:DC:0F:05:29:D4:FA:D0:63:FC:7D:75
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0194282561C033EB4A88A0C5FFD15F3019E2
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/dRFON_8KZhLV3A8FKdT60GP8fXU.roa
Signing time: Thu 02 Jan 2025 17:52:06 +0000
ROA not before: Thu 02 Jan 2025 17:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209007
IP address blocks: 194.145.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:61:c0:33:eb:4a:88:a0:c5:ff:d1:5f:30:19:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 2 17:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75114e37ff0a6612d5dc0f0529d4fad063fc7d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:57:0a:53:3d:a4:a8:04:1b:8a:de:b2:28:
49:d6:ff:3d:2b:f5:25:7a:34:c8:bb:ea:56:a1:aa:
bc:41:5a:2d:11:c1:46:bf:d7:18:7e:51:23:3f:e1:
52:51:53:0e:84:0b:45:ca:3a:19:f7:05:59:be:a5:
83:c2:54:09:bf:80:82:62:12:98:58:85:76:2e:f6:
a2:bd:1a:a0:e5:45:d8:8d:22:22:09:d5:c9:91:d1:
11:b4:ac:96:31:c6:11:60:59:07:30:87:f0:88:65:
b7:12:b1:48:30:e1:45:dc:cd:4a:97:67:56:68:a0:
64:2b:5b:b2:91:08:f0:e4:b0:17:0c:d1:07:81:11:
ef:c2:be:6d:ba:04:a4:06:4b:6b:86:c9:20:f1:bb:
03:06:d0:57:47:a8:91:07:cf:be:be:91:82:d7:e9:
e9:3a:75:33:65:8a:de:64:c2:74:f5:34:16:80:c5:
ff:11:9f:02:36:01:3e:2c:60:ae:1c:eb:ee:c1:ae:
80:fb:6f:b8:8f:c6:da:e9:6b:8e:6c:65:17:3e:f7:
40:ed:cb:9e:d3:fc:32:fa:27:c5:d3:da:3b:a2:80:
fe:cf:d0:57:a2:d2:93:c3:dc:95:94:c1:b0:d1:d5:
58:7b:3f:90:c4:ee:4c:ae:da:c3:85:59:aa:38:0e:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:11:4E:37:FF:0A:66:12:D5:DC:0F:05:29:D4:FA:D0:63:FC:7D:75
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/dRFON_8KZhLV3A8FKdT60GP8fXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.137.0/24
Signature Algorithm: sha256WithRSAEncryption
90:96:4e:e5:5e:ee:7c:79:20:29:58:be:36:4b:e3:fe:96:55:
b8:d9:53:21:49:8a:21:5a:9e:c9:20:f0:0f:89:d2:0f:37:5d:
96:56:cc:de:3a:32:b8:59:4b:f2:48:a0:a1:f3:f2:9c:4e:61:
28:db:d6:5e:3e:3e:3d:3e:aa:a2:c2:30:9e:82:cb:a5:3c:b3:
6a:cc:6f:81:2a:3e:b4:d3:4f:81:b1:dd:2c:a7:61:25:56:4b:
02:80:f2:e1:63:ef:36:38:f5:90:fe:11:05:fe:f4:f9:c3:5e:
09:93:12:42:c0:ac:d1:a6:3a:37:18:96:6f:b7:73:e9:2d:e1:
8d:e2:5f:a8:74:71:c7:4e:3d:c4:79:35:9e:36:a5:e0:32:3d:
f0:08:99:9e:a0:fa:75:05:26:07:f2:01:67:2b:c9:87:8d:7d:
b4:f7:d5:b2:5c:b7:f0:d0:e3:d1:a2:3d:62:c7:f5:0c:cc:e4:
3a:1c:55:ee:44:6b:3f:6a:35:55:8f:7d:a3:7c:a6:3c:48:a3:
c3:ee:d3:b2:c5:1a:b5:7f:14:70:42:50:47:e8:78:b3:0e:f9:
30:1e:b0:18:00:84:45:6f:39:f5:4c:dd:5b:bf:58:ef:d9:86:
24:be:9f:41:c5:54:4c:b9:8c:5a:bc:a2:27:65:de:70:98:25:
60:fc:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:45:44 2025 by rpki-client