Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/DlqdIQI6FVQl-ro8neXTyjOh5dE.roa
File: DlqdIQI6FVQl-ro8neXTyjOh5dE.roa (raw, json)
Hash identifier: lZ3g7pVM/XY8ky+nHkBqbreA/7Px6G51zVJ1/JDPng0=
Subject key identifier: 0E:5A:9D:21:02:3A:15:54:25:FA:BA:3C:9D:E5:D3:CA:33:A1:E5:D1
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B56EE692D3616D766685AED4065DB1
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/DlqdIQI6FVQl-ro8neXTyjOh5dE.roa
Signing time: Thu 02 Jan 2025 15:49:49 +0000
ROA not before: Thu 02 Jan 2025 15:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208167
IP address blocks: 194.28.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6e:e6:92:d3:61:6d:76:66:85:ae:d4:06:5d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e5a9d21023a155425faba3c9de5d3ca33a1e5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:85:e7:c9:76:70:e0:2c:41:12:e5:fb:7c:d7:
88:63:fa:15:39:1a:cb:9b:95:51:0a:ce:7f:79:45:
03:ad:ac:cd:fb:4a:88:a6:c6:64:33:2f:24:27:09:
78:a0:3c:ff:fc:08:c2:52:8c:17:3c:f4:66:ab:46:
c4:ed:be:7d:3b:08:d5:74:db:96:a1:35:84:7d:05:
f5:95:6f:12:34:97:a8:54:0f:09:09:86:30:af:25:
ee:86:9b:e6:41:27:b4:7f:d0:dd:6c:8e:72:51:3b:
95:33:e7:f0:1e:b1:f7:16:dd:6d:f7:1d:d7:72:9e:
5e:6e:94:85:c9:78:01:2b:0e:6f:91:f0:f2:d8:bb:
62:e5:82:a5:6a:8a:3e:30:97:8e:37:71:f3:4f:bb:
4c:36:26:6b:f3:50:eb:ad:7c:f9:ca:04:2f:78:e4:
ae:17:e5:37:ba:26:a4:68:40:fb:bf:be:8f:e5:79:
40:0e:4f:92:53:d1:53:b5:8c:90:1a:9b:55:7f:77:
94:d8:14:d3:7b:a6:27:48:d3:4f:85:7e:f1:71:b1:
41:70:eb:7f:1b:6a:7a:05:83:2b:f1:2a:92:61:f9:
2d:ed:68:ae:65:0a:c7:80:39:e8:7b:c1:6c:f9:dc:
7b:5c:33:22:d4:61:a9:36:ad:93:97:96:2a:a3:46:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5A:9D:21:02:3A:15:54:25:FA:BA:3C:9D:E5:D3:CA:33:A1:E5:D1
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/DlqdIQI6FVQl-ro8neXTyjOh5dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.227.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3d:8c:b8:6a:22:3b:c7:4f:c5:dd:eb:15:e5:23:ab:c2:91:
c2:7a:9b:c6:3c:51:5e:84:19:84:22:96:fc:4c:e3:4a:12:26:
88:a8:bc:a7:16:ae:6d:03:16:9f:43:81:a9:57:80:ad:9b:53:
c1:46:46:87:d8:eb:ba:d0:a0:9e:ad:e5:87:39:60:d4:21:cb:
db:3c:b3:28:9a:17:18:92:be:2d:9d:1f:ea:80:99:e0:30:f5:
0b:f4:91:11:05:7d:5f:bb:67:82:40:c4:a0:11:43:07:8d:49:
ef:27:96:d0:5d:11:c4:66:fe:11:fe:31:40:81:bc:59:77:77:
ec:6c:c6:dd:16:bc:87:b1:9e:28:66:51:ec:79:63:45:35:df:
e5:45:be:71:02:86:26:ce:47:91:93:da:e5:a3:52:35:1a:d2:
7f:e5:7e:6f:48:ee:c4:05:05:8e:d7:5c:c5:c4:c9:93:20:63:
fc:fb:e7:cc:17:6c:ff:b2:98:72:90:b0:bd:e5:23:6f:42:ce:
83:11:b2:02:08:19:fd:36:e2:1b:ea:e3:84:a1:18:25:f7:c2:
6f:7a:e6:f5:b3:c9:df:10:22:e6:b8:f5:60:cc:de:3d:d8:d3:
17:1f:9d:c2:90:cc:1d:a2:b2:44:c0:5b:68:63:ab:13:b9:86:
e4:10:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:51:34 2025 by rpki-client