Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/dkL-icE6gq78C7DesQUCkZbkiGU.roa
File: dkL-icE6gq78C7DesQUCkZbkiGU.roa (raw, json)
Hash identifier: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=
Subject key identifier: 76:42:FE:89:C1:3A:82:AE:FC:0B:B0:DE:B1:05:02:91:96:E4:88:65
Certificate issuer: /CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Certificate serial: 019421B1E9A0DCEA7F098A3C82AD908A82EB
Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/dkL-icE6gq78C7DesQUCkZbkiGU.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 194.26.104.0/22 maxlen: 22
194.26.110.0/23 maxlen: 23
194.26.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e9:a0:dc:ea:7f:09:8a:3c:82:ad:90:8a:82:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7642fe89c13a82aefc0bb0deb105029196e48865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:1f:70:06:07:c5:ba:25:30:f8:d3:a6:9d:
ad:c4:a4:f1:14:7b:fe:9a:d6:92:cf:6f:36:a7:ec:
82:e6:4b:25:3b:76:69:ea:d4:bb:e4:65:90:49:68:
6a:14:d1:f6:c7:01:a9:29:a1:c4:78:e1:55:17:5c:
3b:6c:fb:f1:17:1b:5b:bd:5a:d1:2d:6e:1c:12:28:
9f:72:76:36:cb:94:66:00:d7:7f:0f:d4:e6:59:d5:
70:4c:a7:0c:66:a9:dc:c4:9c:9a:dd:b2:87:3b:cc:
ae:49:bf:32:93:b8:0e:99:1d:34:3d:7e:49:bc:0e:
ba:ce:17:75:05:ac:6d:b2:94:17:f7:64:06:64:c7:
f1:0e:ea:32:f5:cb:52:6f:7e:b4:f4:e9:b8:b8:7d:
65:3b:60:e8:5d:fc:c5:88:90:3e:15:62:f1:f1:91:
74:93:bf:34:8f:52:4e:b0:c3:aa:90:1e:77:82:65:
5f:27:46:8a:0f:32:97:79:66:ff:7b:ab:df:f0:e1:
b9:fa:cb:31:e8:06:78:18:35:ca:6f:fc:e1:6f:eb:
72:ee:45:de:75:df:e5:a6:b9:71:3f:1a:0a:0b:e8:
ec:83:6c:e3:de:ae:6a:47:e2:0f:bf:98:2f:f4:29:
65:49:31:85:e4:6a:0f:1f:c7:27:f8:cd:60:ee:28:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:42:FE:89:C1:3A:82:AE:FC:0B:B0:DE:B1:05:02:91:96:E4:88:65
X509v3 Authority Key Identifier:
keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/dkL-icE6gq78C7DesQUCkZbkiGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.104.0/22
194.26.110.0-194.26.113.255
Signature Algorithm: sha256WithRSAEncryption
55:96:f4:b8:85:50:64:b2:b9:ce:6b:b5:e8:5d:4b:93:1f:5e:
84:bc:60:39:38:d6:d8:91:ec:13:7d:98:2d:c9:0e:7d:0c:77:
4d:2f:3a:4b:c8:64:d2:37:d4:0d:54:d1:c9:bf:5c:92:b9:68:
f4:d2:c1:f9:e6:af:73:74:c9:93:25:b0:9a:07:a4:70:96:31:
3b:ea:6b:f5:cd:dc:36:2e:1d:22:ee:08:54:5b:00:36:9b:75:
b4:d1:7a:b2:66:94:65:1c:48:0d:7b:35:6b:51:87:04:12:93:
7d:e6:3a:57:60:19:9f:01:72:6e:f2:cb:7c:69:b6:eb:0f:74:
af:a3:04:1a:aa:91:1e:8f:25:99:9c:fb:f2:c4:9c:be:8f:35:
e5:18:f8:ed:7e:04:9b:a1:65:97:42:86:48:18:fc:31:cc:da:
95:19:35:93:70:7e:5e:2b:18:49:58:19:d9:66:13:0a:4a:2b:
01:fe:31:4d:0c:80:37:d6:0a:45:ed:1e:f1:4b:4d:4a:18:5e:
ad:bd:86:5d:e0:39:89:3e:fb:ba:6d:a7:55:3b:1e:a5:a9:51:
58:f5:0b:6b:dc:1b:3c:5f:9d:10:ff:84:5e:88:fc:a6:6d:40:
2b:cb:76:03:df:21:ed:c0:5b:fc:63:dc:05:8c:eb:a9:d8:bd:
d9:bf:7c:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:29 2025 by rpki-client