Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/DLWPEO_9yUOTEIMj72dvmq538V8.roa
File: DLWPEO_9yUOTEIMj72dvmq538V8.roa (raw, json)
Hash identifier: tZVtjz50VVvlvlPM3GswwaygVa7mn0i/tU1ESCZ6Cvw=
Subject key identifier: 0C:B5:8F:10:EF:FD:C9:43:93:10:83:23:EF:67:6F:9A:AE:77:F1:5F
Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial: 019420D6191690560AD16EBCB9AE7AA616C1
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/DLWPEO_9yUOTEIMj72dvmq538V8.roa
Signing time: Wed 01 Jan 2025 07:48:09 +0000
ROA not before: Wed 01 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12453
IP address blocks: 185.230.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:19:16:90:56:0a:d1:6e:bc:b9:ae:7a:a6:16:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
Validity
Not Before: Jan 1 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cb58f10effdc94393108323ef676f9aae77f15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:57:f7:56:8b:25:33:81:56:11:07:07:e9:
c3:79:a8:a5:a7:a1:7e:1a:80:49:15:b8:cb:3c:0a:
e8:d1:92:bb:1e:9f:b2:9d:af:81:42:59:2b:90:a6:
36:7b:83:e3:06:1a:64:1e:bd:f6:5f:4b:54:57:f9:
e3:83:d6:2c:8b:29:84:c8:9f:7f:ee:50:dc:42:93:
90:8f:ff:07:8f:f1:81:5c:61:61:de:88:77:aa:fb:
9d:e7:9e:4a:c0:26:7b:ca:3c:dd:33:13:47:3b:23:
b7:78:3b:fc:ca:bb:c4:04:fb:94:3e:a3:a2:4f:71:
60:f0:1a:22:cb:d3:0e:dc:a1:0b:f5:6f:81:bc:a2:
a8:66:88:ff:de:c3:08:6b:b1:52:f4:78:ca:fa:c9:
8d:cc:84:a8:2c:df:a8:27:6e:21:30:ea:d0:57:f5:
7f:5a:67:72:cc:f4:06:44:43:2b:b1:b0:72:ca:dd:
6d:1e:7a:b0:44:b6:b2:d1:15:f2:98:19:4b:a6:10:
54:63:9c:b2:67:0d:52:b6:b1:b9:8a:4e:73:1c:e1:
c4:3c:55:68:d6:ac:20:fd:37:2b:08:b5:47:0e:42:
c9:e3:ce:42:a7:dd:92:05:a7:d8:ec:86:03:ed:36:
93:69:79:74:ad:c1:74:0e:26:d6:0f:9f:20:03:0c:
96:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B5:8F:10:EF:FD:C9:43:93:10:83:23:EF:67:6F:9A:AE:77:F1:5F
X509v3 Authority Key Identifier:
keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/DLWPEO_9yUOTEIMj72dvmq538V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.132.0/22
Signature Algorithm: sha256WithRSAEncryption
57:1f:ec:d8:2b:f5:3a:fe:a9:5a:f6:48:c7:04:7e:f9:2f:97:
eb:b4:22:ec:de:47:69:c9:fa:56:8b:9a:c1:cc:98:7b:ea:53:
d1:05:d3:8a:e0:e6:6a:88:f8:6d:64:d4:5d:23:40:aa:7c:87:
b4:7d:d5:f4:5a:e6:33:db:bd:a0:a0:06:61:30:87:ae:0d:b7:
5f:a3:c2:77:9e:5e:97:26:34:1b:af:e5:b6:fd:0e:2a:3b:c5:
dd:03:f3:d0:0f:f2:55:97:5c:1e:91:6c:58:ba:47:02:0a:a6:
f9:cc:b6:78:e6:9c:fa:b8:59:39:bc:35:5e:91:be:c2:be:f9:
33:ce:01:d3:d3:49:b2:47:c0:15:c9:4c:fa:7b:33:8e:17:54:
8a:9b:60:ac:6c:18:2c:ab:27:9b:c7:c9:57:4c:ed:0b:48:56:
7f:63:bd:38:94:b8:a3:c1:46:6f:7d:29:16:87:ca:9f:b4:a3:
1b:e4:f4:a4:56:ee:e2:a6:93:91:2a:8e:ee:15:c4:ba:a8:8c:
c0:2d:f2:f8:1c:1e:82:ce:a4:a5:6e:28:1f:ee:1c:c9:c7:ef:
af:1c:e8:91:50:39:42:7e:5a:46:27:2e:8e:05:4b:22:75:6c:
9d:dc:1b:c6:cb:4e:15:fa:65:09:5c:4e:56:bd:88:c0:02:4d:
d8:8a:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:08:01 2025 by rpki-client