Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/DdMAiHPpaUdiJaulgJCaTJNPstY.roa
File: DdMAiHPpaUdiJaulgJCaTJNPstY.roa (raw, json)
Hash identifier: 1MztNNBjV/jkhR4q7Xdlzm2qpd1NO0KJNtsgIx1Usfc=
Subject key identifier: 0D:D3:00:88:73:E9:69:47:62:25:AB:A5:80:90:9A:4C:93:4F:B2:D6
Certificate issuer: /CN=0eba05422d4dd478c8f24b7f4302213bff8274f2
Certificate serial: 018D13D7EFB7501D450203D618F2FE0C9F4E
Authority key identifier: 0E:BA:05:42:2D:4D:D4:78:C8:F2:4B:7F:43:02:21:3B:FF:82:74:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DroFQi1N1HjI8kt_QwIhO_-CdPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/DdMAiHPpaUdiJaulgJCaTJNPstY.roa
Signing time: Tue 16 Jan 2024 19:55:35 +0000
ROA not before: Tue 16 Jan 2024 19:55:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 146.19.137.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:ef:b7:50:1d:45:02:03:d6:18:f2:fe:0c:9f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eba05422d4dd478c8f24b7f4302213bff8274f2
Validity
Not Before: Jan 16 19:55:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dd3008873e969476225aba580909a4c934fb2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:3c:8f:90:1b:a6:57:0c:1a:1f:e4:d9:74:
42:b8:39:34:24:4d:df:b4:fd:3a:f2:81:7c:1b:5a:
93:a7:ba:7c:5d:8a:1f:8d:25:94:ef:21:64:72:31:
2b:c9:a9:b2:c1:c4:04:5d:f2:8f:0e:f9:63:df:55:
dc:43:b4:14:73:90:66:11:4b:21:7d:2f:d1:30:87:
df:f2:ba:87:43:69:61:1c:78:71:be:57:a8:d8:df:
ff:6a:6d:ea:2f:9b:61:f1:cd:2c:59:35:1b:72:81:
9d:7e:3d:43:f4:47:21:3f:ce:d4:e6:f9:e2:a8:37:
c7:bd:a1:52:1f:73:b7:50:67:fc:59:70:71:ba:ba:
36:1b:34:5b:ac:e6:25:53:09:41:d9:96:72:fe:ab:
94:a6:e6:76:04:3e:b3:86:0e:7a:33:f5:4d:18:84:
50:e0:05:e5:8d:51:d9:1f:c8:9c:d0:8d:d7:2f:b8:
bf:9c:b2:58:ba:ef:45:30:77:29:32:72:58:c8:05:
20:1b:b7:dc:6d:c5:2c:7a:a2:ae:7a:be:e0:12:eb:
dc:42:1a:f0:6e:ff:b6:b8:25:68:8e:41:d0:eb:f2:
94:20:5e:8e:9e:1f:4b:1f:f7:b3:35:b6:74:79:0d:
5a:7b:4d:a1:d8:12:15:0c:37:82:0e:08:3c:37:a9:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D3:00:88:73:E9:69:47:62:25:AB:A5:80:90:9A:4C:93:4F:B2:D6
X509v3 Authority Key Identifier:
keyid:0E:BA:05:42:2D:4D:D4:78:C8:F2:4B:7F:43:02:21:3B:FF:82:74:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DroFQi1N1HjI8kt_QwIhO_-CdPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/DdMAiHPpaUdiJaulgJCaTJNPstY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8f2144-bde4-4650-9903-a72f7a292fb5/1/DroFQi1N1HjI8kt_QwIhO_-CdPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.137.0/24
193.3.22.0/24
Signature Algorithm: sha256WithRSAEncryption
24:3a:1b:0a:3c:88:9e:78:70:42:d2:17:1d:fc:a1:7f:a7:10:
50:75:bf:3c:9d:e7:87:4c:27:4e:c0:20:fa:d8:84:d6:7a:32:
df:0f:4c:63:c6:e3:c9:43:95:a4:50:2d:66:f3:00:22:c2:34:
56:69:22:0c:4b:2b:68:73:64:26:92:37:a2:43:4c:54:67:3c:
2f:69:85:bc:b6:df:dc:5b:b6:46:e0:17:bb:24:b9:27:e9:d0:
f4:6d:64:1e:3c:0d:11:30:ae:d0:62:6d:36:36:78:c5:1f:ed:
88:11:0c:77:5c:d4:8a:4e:e4:6b:9f:d3:5f:54:69:20:0f:03:
d8:f7:37:81:fc:7d:02:50:d1:30:56:ed:36:cc:da:81:51:3d:
4a:36:bf:fd:5c:f8:f4:45:97:97:d5:ad:7b:0f:0a:8b:ca:48:
1e:ef:c4:ae:fc:68:fb:2a:e4:12:a3:2c:18:d8:a4:6d:db:ae:
42:a5:99:f0:bd:d3:fd:91:cf:78:58:54:d5:58:0e:9e:ac:57:
8f:c1:58:24:1d:e7:0e:76:b4:e2:f2:a5:b2:c3:07:61:51:f6:
dd:0a:d5:c7:67:b5:09:96:13:5b:68:93:8a:f6:46:39:28:f1:
bb:34:5b:26:7e:a7:ee:df:cf:f8:c2:a4:fa:9f:77:d6:eb:5a:
86:7e:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:34:06 2025 by rpki-client