Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/DfudKWBsua2Qw82vhg_Oro_4T98.roa
File: DfudKWBsua2Qw82vhg_Oro_4T98.roa (raw, json)
Hash identifier: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=
Subject key identifier: 0D:FB:9D:29:60:6C:B9:AD:90:C3:CD:AF:86:0F:CE:AE:8F:F8:4F:DF
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019427B5F27CD7752AB6D5AA171FAB115E04
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/DfudKWBsua2Qw82vhg_Oro_4T98.roa
Signing time: Thu 02 Jan 2025 15:50:23 +0000
ROA not before: Thu 02 Jan 2025 15:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35280
IP address blocks: 185.6.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f2:7c:d7:75:2a:b6:d5:aa:17:1f:ab:11:5e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jan 2 15:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dfb9d29606cb9ad90c3cdaf860fceae8ff84fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:80:1e:45:ab:ea:da:48:8e:64:8f:5f:c5:
51:57:6c:d5:1b:e8:cf:79:1b:35:c5:63:24:12:5c:
c7:35:1a:41:b7:ff:b1:bc:2d:a3:25:3f:24:1c:f4:
64:df:a5:90:53:28:e5:30:e1:1c:1a:45:ea:b6:38:
cd:b4:3c:80:b5:5a:0c:8a:f8:dc:5c:0f:1c:83:38:
7d:6d:22:cf:1e:31:30:5a:a4:ed:a0:fc:11:b2:45:
9c:ee:44:71:cf:b2:c1:e4:da:71:e2:da:2b:eb:cf:
14:56:d4:38:56:45:5b:7d:ff:e7:07:83:57:e7:61:
f5:7f:46:94:0e:09:35:74:3a:30:be:6d:a7:af:66:
c4:b9:85:5d:70:9a:6d:0a:8a:b5:aa:07:de:61:45:
2b:ec:98:10:cb:2e:88:27:0e:02:4f:43:b1:4f:70:
09:d4:93:fe:92:24:95:7c:dc:46:4f:82:19:5d:7a:
8d:2f:8e:2a:f0:5f:2f:78:4b:86:e0:33:86:d7:42:
40:ad:6c:3e:18:d0:39:6d:eb:53:7d:5a:98:11:55:
21:b9:66:49:83:cb:14:9d:1a:04:0f:66:b4:a1:87:
43:5c:51:6b:b0:2c:76:6a:e4:f4:67:76:26:e8:f7:
4a:87:5e:2d:55:b7:a2:35:a9:a5:de:5d:c9:2a:b7:
41:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FB:9D:29:60:6C:B9:AD:90:C3:CD:AF:86:0F:CE:AE:8F:F8:4F:DF
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/DfudKWBsua2Qw82vhg_Oro_4T98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.60.0/24
Signature Algorithm: sha256WithRSAEncryption
58:4a:85:ec:18:65:71:4c:ed:e2:7f:7e:26:1a:ee:03:8e:11:
7d:ea:77:e3:3a:b7:e5:9e:3a:56:7f:73:c0:65:e6:6d:04:55:
be:f6:8f:e5:a2:88:6d:b3:36:41:5c:4d:15:fd:2a:e4:31:53:
55:95:58:51:bf:e6:dc:f6:76:81:36:89:54:86:20:fc:41:5d:
54:2d:d8:0d:89:8a:c2:43:7d:0d:7a:7c:f8:09:1d:eb:1a:05:
0d:a4:38:c1:6b:a0:7d:eb:7b:d8:f7:3f:6c:27:9f:bd:5a:5a:
e7:2e:33:26:25:3a:4d:67:20:6b:a3:26:26:a7:05:93:81:88:
30:da:60:fb:4b:06:32:ba:7a:95:cd:9c:14:2f:4f:03:9e:7f:
8b:ad:51:f6:ef:99:e2:3c:79:7b:15:54:85:c1:9d:7f:3d:00:
f5:68:1e:15:2b:9f:86:cb:04:fa:60:9a:9d:f1:a8:05:96:4a:
ca:00:b3:e0:32:98:5a:0b:4a:9d:ed:b5:5d:14:a3:18:b7:f5:
32:93:4a:84:c7:99:b2:1a:e8:34:36:87:2b:be:5b:7e:f0:c8:
9c:93:b5:d6:a7:27:fb:41:f2:2f:16:b3:45:05:80:4f:de:c5:
b2:ad:c4:a4:ed:4f:7c:99:1d:8c:f7:9e:58:a9:28:f4:c2:db:
f6:d6:d4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:33 2025 by rpki-client