Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/dx1DsNdC0zzf80gFyxTg9VFR8p8.roa
File: dx1DsNdC0zzf80gFyxTg9VFR8p8.roa (raw, json)
Hash identifier: wJSJefvy6pAquwxe0d0SzcWI3aTdl65uj7QEQlUElKE=
Subject key identifier: 77:1D:43:B0:D7:42:D3:3C:DF:F3:48:05:CB:14:E0:F5:51:51:F2:9F
Certificate issuer: /CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4
Certificate serial: 01946A6F9B49056BB93079F96564A1206146
Authority key identifier: B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/dx1DsNdC0zzf80gFyxTg9VFR8p8.roa
Signing time: Wed 15 Jan 2025 14:48:06 +0000
ROA not before: Wed 15 Jan 2025 14:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50355
IP address blocks: 193.24.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:6f:9b:49:05:6b:b9:30:79:f9:65:64:a1:20:61:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4
Validity
Not Before: Jan 15 14:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=771d43b0d742d33cdff34805cb14e0f55151f29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:79:7d:46:fd:ef:9f:98:9e:32:f6:c4:b5:
dd:0f:19:bf:f4:58:fd:d9:63:0d:97:f2:13:6d:c2:
4a:c0:cb:ee:eb:13:7a:c1:08:53:bd:01:db:be:9b:
4c:01:4c:d4:c1:7e:c0:6f:f7:89:6f:67:26:c1:00:
51:09:9f:4d:2a:77:00:b2:1b:04:6d:1d:bb:10:2c:
e8:69:e5:1c:5f:f3:77:a5:c9:31:c4:59:b8:92:46:
ac:ca:6c:b0:ad:40:71:1b:9f:ab:fb:df:60:3f:be:
b9:7b:8e:a4:b1:ea:b7:f3:14:89:61:4b:c4:0a:e1:
8c:fb:4d:02:57:34:f4:dc:cc:98:e3:05:69:fc:36:
ec:4a:89:e9:9e:de:14:d2:9b:9e:9b:a5:48:5e:60:
54:ea:63:7c:47:dd:a6:d6:40:c2:cb:e7:56:1c:a6:
e4:1b:06:4d:f9:e8:e7:b4:42:44:70:a0:1e:f3:c9:
37:bd:12:89:b6:24:d5:87:96:e8:4a:fd:d5:27:67:
8e:36:9e:3b:69:39:a0:ec:40:5b:1b:eb:0b:04:6f:
c9:a0:ac:f4:0f:37:e6:aa:af:7f:23:21:b9:3c:9a:
12:8e:3a:16:f8:f0:a2:d0:25:e6:00:11:06:c0:46:
6e:4b:e4:57:b1:5b:2d:41:4b:dc:34:f1:dc:f8:69:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1D:43:B0:D7:42:D3:3C:DF:F3:48:05:CB:14:E0:F5:51:51:F2:9F
X509v3 Authority Key Identifier:
keyid:B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/dx1DsNdC0zzf80gFyxTg9VFR8p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.14.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a4:d0:12:09:7b:d2:d4:07:f6:e0:e7:fa:c6:84:b9:ca:92:
dc:97:d8:e7:ad:68:92:6f:c2:f5:07:17:dc:75:16:00:b4:0b:
d0:b0:a2:e5:04:33:1a:80:f0:68:5b:49:a6:f7:5a:2d:80:7c:
f9:35:ce:22:2b:0e:cc:db:58:2b:5e:70:bf:75:23:8a:5c:a9:
f8:16:f1:76:c8:73:80:3b:31:58:30:58:3a:d8:2e:34:b6:45:
79:c8:f1:36:bf:45:61:0e:ef:cf:2c:26:f0:1c:e4:e4:13:8d:
1b:db:1f:5c:4c:27:13:ad:5b:cd:92:61:cb:47:e9:ab:3f:fd:
77:c8:b0:35:24:cd:52:d7:3e:7c:c1:b0:cf:b2:06:f7:24:51:
05:0d:e0:4e:c6:9d:00:06:f4:f9:f8:75:c6:4a:24:32:ee:26:
2b:01:74:e3:5d:de:21:80:3e:60:53:38:65:cd:80:16:5f:fa:
69:d6:19:ab:f3:e5:a0:62:fe:fd:bd:f0:64:aa:b8:75:55:e7:
75:77:48:2d:c2:c0:56:98:1f:4e:5b:a7:2d:64:96:29:90:94:
a2:f3:f5:56:5e:92:31:90:92:76:a2:c5:c8:68:ae:f4:e4:ef:
f2:40:15:1e:c4:5d:31:10:c0:ab:f9:3e:89:99:3c:4f:d5:91:
32:38:ef:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:08:30 2025 by rpki-client