Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/1-dSijOlomtrsqkND-2jGvkzEh1s.roa
File: 1-dSijOlomtrsqkND-2jGvkzEh1s.roa (raw, json)
Hash identifier: vAMtZ2jKMP2IiV0cN+Yk3wrsh8M5v/wTw365APu16Sc=
Subject key identifier: F9:D4:A2:8C:E9:68:9A:DA:EC:AA:43:43:FB:68:C6:BE:4C:C4:87:5B
Certificate issuer: /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial: 0194266AB305CDF6C5928144CAAF75090F5C
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/1-dSijOlomtrsqkND-2jGvkzEh1s.roa
Signing time: Thu 02 Jan 2025 09:48:34 +0000
ROA not before: Thu 02 Jan 2025 09:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206119
IP address blocks: 185.233.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:b3:05:cd:f6:c5:92:81:44:ca:af:75:09:0f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Validity
Not Before: Jan 2 09:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9d4a28ce9689adaecaa4343fb68c6be4cc4875b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:c7:dc:f2:57:3e:f2:41:61:8d:f2:96:48:
a5:b4:25:27:c0:5e:45:cc:4c:da:60:2b:ee:e8:b0:
d9:91:f7:78:60:d1:b8:85:84:f3:e7:77:a7:1d:4d:
c8:3f:99:ad:08:88:26:8c:76:da:3f:be:b1:9b:0a:
30:ec:f0:78:5a:ac:a5:d9:42:91:92:a5:dd:d9:76:
2a:48:87:29:d0:b3:ce:80:4f:6a:f6:bb:e0:f4:9f:
59:ab:29:9a:db:68:ca:68:6b:28:5e:9e:4e:a6:b1:
51:5a:29:b2:b1:73:9e:da:b5:6c:7f:17:bd:1c:1d:
1c:10:6d:45:ef:6f:54:80:c9:81:15:7c:bf:a4:f7:
11:27:70:2a:1d:e5:13:af:4f:3a:f3:72:e8:db:cc:
00:10:bc:b5:8e:1d:4a:b7:ce:b1:b3:91:30:0e:56:
64:38:c1:50:1b:02:4e:ba:b0:87:cc:43:6b:41:4d:
28:3d:d8:0b:58:63:cc:1e:21:26:57:6d:98:b7:f2:
f5:7f:4f:85:81:86:b5:1b:d6:e4:32:31:0b:47:8a:
f2:23:2b:68:6f:10:24:7a:ca:72:d5:ba:dc:ca:e0:
ec:f8:0e:5a:54:d2:af:f8:e0:9f:aa:fd:de:87:97:
95:bd:bb:ae:ed:76:ca:59:2c:3e:7f:3a:91:4e:1c:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D4:A2:8C:E9:68:9A:DA:EC:AA:43:43:FB:68:C6:BE:4C:C4:87:5B
X509v3 Authority Key Identifier:
keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/1-dSijOlomtrsqkND-2jGvkzEh1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3a:e7:e7:8a:b7:e7:fe:5b:b4:b7:56:23:9a:7c:6a:99:96:
74:be:b8:98:61:bb:bf:d7:31:8a:1b:74:d5:3d:05:8e:68:40:
d4:32:08:83:55:77:3d:87:f2:9c:8e:78:73:b5:44:22:1d:ba:
83:0d:01:66:4e:e9:72:00:a1:43:d9:1b:08:1f:2d:31:c9:80:
5e:0e:4e:a7:70:07:8a:37:f2:18:f7:c1:db:2e:11:49:c0:ff:
55:0a:d1:31:15:15:61:ef:c7:fe:f7:3c:c5:a2:ef:65:ca:bb:
4e:30:67:f1:d4:e5:e6:29:fe:83:9e:7f:38:27:b3:1c:16:49:
e2:7d:9c:af:4e:06:2f:2f:6c:88:10:c0:3c:25:38:17:25:4f:
37:df:77:a8:f6:f9:a2:06:41:83:e7:ed:41:67:c2:d6:d3:8f:
10:d0:2e:0f:ef:1a:c1:9c:70:1b:a1:27:af:94:07:7c:77:f2:
60:16:c1:21:2b:2d:f9:8b:aa:b8:8b:94:98:76:77:31:c1:98:
ab:49:e2:79:47:61:99:3c:e1:c6:7f:c4:64:71:a2:8e:a1:03:
cc:89:d2:17:fe:b4:f7:e3:98:5c:4d:8a:9d:86:9a:8f:9e:5f:
c9:ce:75:f6:93:4d:fa:de:6b:cb:51:79:81:80:58:b2:9e:17:
e3:ca:bf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:21:54 2025 by rpki-client