Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dF3f57PIUl-g_EiAlzgD1w28z4k.roa
File: dF3f57PIUl-g_EiAlzgD1w28z4k.roa (raw, json)
Hash identifier: HclW6AWsBl3M51tDeCiSDJTQLe7G3qNQzhM7QiMAJ4k=
Subject key identifier: 74:5D:DF:E7:B3:C8:52:5F:A0:FC:48:80:97:38:03:D7:0D:BC:CF:89
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748493D3D5DBC53EC9B1C7A952A11BC
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dF3f57PIUl-g_EiAlzgD1w28z4k.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29217
IP address blocks: 194.68.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:49:3d:3d:5d:bc:53:ec:9b:1c:7a:95:2a:11:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=745ddfe7b3c8525fa0fc4880973803d70dbccf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ce:21:fa:40:a2:88:4b:76:2e:56:cb:76:88:
98:c2:f0:59:ee:3f:7b:c3:6a:47:a9:a1:b3:c5:e9:
b1:70:88:e0:d6:6b:ba:cc:8e:06:22:80:fc:b3:ea:
28:87:03:34:18:5d:5d:ff:45:9c:9a:97:4e:48:e9:
20:89:56:e7:3e:08:d8:f4:f5:2e:ba:d5:e3:bf:74:
7d:98:21:6a:11:0d:43:64:b8:03:d8:f3:02:08:f3:
a1:ca:db:1f:cc:79:ae:3a:66:3b:41:e5:50:c5:09:
8c:56:a5:b0:d0:4b:cd:86:b7:79:c6:0a:d6:eb:df:
82:82:a4:63:bc:f0:49:d5:7c:c0:66:02:86:8e:9e:
80:2d:bf:58:46:27:60:13:9e:ba:fc:f6:a1:1a:c0:
6b:d4:f6:6f:90:e6:20:26:82:ad:95:0d:6a:1b:49:
03:d1:10:c6:23:7b:a0:60:a9:09:e2:c8:6c:30:39:
f5:76:69:9b:2a:2a:d5:b0:7a:6f:42:7b:ca:a1:a5:
31:1b:11:3b:68:fa:66:c3:96:d8:5e:5a:df:75:98:
16:51:18:27:c8:fb:09:e9:be:b9:cd:62:05:83:54:
0b:3d:5e:0f:1b:b3:8d:27:33:85:46:79:0d:14:fb:
49:03:a8:56:13:2c:c9:c1:a2:f7:f3:21:80:e3:58:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5D:DF:E7:B3:C8:52:5F:A0:FC:48:80:97:38:03:D7:0D:BC:CF:89
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dF3f57PIUl-g_EiAlzgD1w28z4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b5:29:7b:39:bd:0b:2d:26:de:bf:3c:31:96:7d:4d:92:46:
27:15:12:c9:15:63:da:4c:83:d7:bf:cc:4b:69:3d:e9:c4:bc:
85:f7:c6:36:f0:8c:95:1c:0b:20:35:cb:30:ba:3c:04:d2:08:
54:e2:0d:96:27:77:3e:a4:9f:d2:38:f8:ff:05:f7:b8:fc:b0:
dd:46:7e:4d:4a:d3:84:a6:43:81:22:b2:6f:5f:05:f8:13:b2:
b1:65:a1:3c:42:89:26:38:90:2c:00:a9:4c:78:c4:a2:54:c6:
89:71:f7:bb:1b:2e:3d:a9:67:41:79:65:c4:0d:ae:ff:ef:0a:
2e:ee:9b:f7:8d:61:26:ed:a8:69:e2:b6:b7:1a:f6:95:4d:c2:
99:f0:b5:68:a3:6e:f2:12:b3:1a:35:c8:16:61:96:0a:25:65:
aa:a2:07:24:fa:2c:67:0e:3b:01:17:90:e0:34:47:eb:e7:ab:
bd:4a:cb:3f:ae:57:30:73:37:5b:67:19:65:4b:34:7a:48:14:
6e:6f:90:75:82:03:08:14:dc:d8:e8:25:5e:76:b4:1c:7d:a4:
0e:bb:4d:1b:74:8d:9a:cb:cf:44:8d:08:bf:e9:dc:dc:23:bb:
aa:dd:ce:a7:89:5c:d4:6e:23:25:76:cc:e9:f3:8f:08:68:aa:
b8:e3:e5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:04 2025 by rpki-client