Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/DO5JxSipVW_jSyusVYE1KNyV5oM.roa
File: DO5JxSipVW_jSyusVYE1KNyV5oM.roa (raw, json)
Hash identifier: fTaf/BSF7U37w4OYShE1QwyUlpAokZv3Xb6JIFlzFT0=
Subject key identifier: 0C:EE:49:C5:28:A9:55:6F:E3:4B:2B:AC:55:81:35:28:DC:95:E6:83
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 0194228E43E301546F9CB9454C8486B5E4BF
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/DO5JxSipVW_jSyusVYE1KNyV5oM.roa
Signing time: Wed 01 Jan 2025 15:48:56 +0000
ROA not before: Wed 01 Jan 2025 15:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49882
IP address blocks: 91.208.28.0/24 maxlen: 24
193.105.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:43:e3:01:54:6f:9c:b9:45:4c:84:86:b5:e4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Jan 1 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cee49c528a9556fe34b2bac55813528dc95e683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:70:f1:07:9d:d8:21:d6:0a:e0:b7:03:fb:
89:12:49:9a:6d:af:31:2f:dc:b4:5a:4b:6f:20:f1:
17:e9:61:dd:d8:b3:35:db:a5:91:eb:2b:b8:82:51:
ac:52:d9:ad:cf:f0:5d:a0:97:d9:64:e5:94:56:c7:
5e:0c:a6:1c:3a:4a:61:73:56:40:53:62:24:f6:7a:
d4:86:f0:f2:79:6e:8f:c9:0a:79:00:29:94:cb:15:
b0:b3:a6:94:1c:67:12:20:20:0c:d7:ca:c3:58:b6:
b1:e0:0d:97:ce:0a:fa:67:56:2d:76:24:e9:d1:79:
a2:8a:20:60:56:ed:33:9f:aa:1e:ec:29:17:0b:b0:
4b:da:5e:4c:0c:41:4e:51:6f:0a:e8:a6:28:4c:21:
b6:33:3c:76:15:b1:f7:f3:6a:2b:d6:a5:7d:e9:82:
93:08:06:0f:51:17:4b:d7:7f:80:fd:0a:62:9b:68:
ea:65:5d:ca:3b:73:0e:c1:43:20:02:11:54:df:94:
00:77:66:dd:72:ba:78:ff:70:fc:d6:f6:83:a7:33:
15:69:fc:b2:de:cc:57:66:20:67:19:29:7c:d4:8e:
4d:2e:5e:dc:d0:bf:93:bd:71:22:c3:95:de:69:8a:
a6:12:58:8a:c4:23:7f:2c:be:be:29:d0:7f:6a:be:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EE:49:C5:28:A9:55:6F:E3:4B:2B:AC:55:81:35:28:DC:95:E6:83
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/DO5JxSipVW_jSyusVYE1KNyV5oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.28.0/24
193.105.47.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:a5:c9:e9:e9:9d:5c:b3:11:f6:79:8f:e1:08:7a:51:7c:5a:
27:38:b3:74:a0:92:d2:b6:c9:cf:c8:b3:a6:a5:69:dc:95:b2:
f9:57:90:7c:15:18:4e:33:b4:40:0d:ca:f6:d6:b5:9f:77:d1:
7e:b4:e5:cc:92:f0:0d:5c:19:e4:c5:5f:f2:0c:47:87:d3:44:
23:9c:ad:4e:b5:65:cc:62:c8:9c:05:4e:99:12:ba:1d:c2:5b:
66:34:bf:a9:a1:5b:55:ab:66:89:c4:99:bf:a2:53:c1:ff:7e:
f6:d4:47:e2:6e:83:57:55:00:63:2a:78:89:0c:95:ef:f9:fd:
bf:dc:04:5b:68:c6:4d:f2:18:a1:9e:2f:45:fe:b6:1d:02:77:
09:b3:78:97:7b:a5:0f:83:4c:ba:1d:ee:c7:7f:74:ec:62:7e:
0c:51:b1:03:db:85:f1:0f:c1:52:7f:95:26:ca:de:b9:ce:03:
4a:99:53:cf:1c:5f:96:2e:27:d8:21:a9:0e:4b:d3:45:92:e2:
28:c1:56:06:a2:61:98:5e:5e:b8:ce:bf:b9:fc:a0:9e:ea:2d:
92:b1:f7:09:dc:51:0f:9a:63:58:0a:32:4f:9a:27:a8:68:f0:
9c:90:03:31:97:07:f3:34:0a:68:98:9c:bd:f4:c9:3d:18:8b:
3e:cc:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:11 2025 by rpki-client