Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/DuTLHmPWVWziogaT97oFAa9mDRE.roa
File: DuTLHmPWVWziogaT97oFAa9mDRE.roa (raw, json)
Hash identifier: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=
Subject key identifier: 0E:E4:CB:1E:63:D6:55:6C:E2:A2:06:93:F7:BA:05:01:AF:66:0D:11
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 01942748651E7D06BD23F3202E2392B4F499
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/DuTLHmPWVWziogaT97oFAa9mDRE.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 192.94.58.0/24 maxlen: 24
193.150.189.0/24 maxlen: 24
193.150.190.0/24 maxlen: 24
193.150.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:65:1e:7d:06:bd:23:f3:20:2e:23:92:b4:f4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ee4cb1e63d6556ce2a20693f7ba0501af660d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:88:99:79:c3:66:15:fe:42:1e:cf:92:00:
8b:1c:83:af:93:ca:ce:df:0d:84:37:af:2f:57:e8:
8b:4f:e3:05:ce:34:57:59:83:0f:e9:80:71:0d:1c:
72:3c:24:8a:11:c7:d9:d7:20:34:ed:eb:a0:95:37:
00:f1:43:d6:56:ca:18:d0:da:3b:03:11:12:15:f3:
40:0d:97:29:81:4d:8f:9b:b4:0b:aa:6b:aa:7c:d8:
f3:de:07:a0:10:72:51:b6:66:e8:d4:4f:11:a0:6a:
5a:7d:53:8f:4e:c7:80:ed:a0:88:06:b6:b6:ed:42:
35:7e:bd:bd:dd:d5:6b:86:19:03:1d:14:e6:66:69:
23:94:be:e7:64:e3:c7:7b:10:73:4c:9c:f4:05:ae:
e8:62:4a:73:b6:d9:23:50:9e:a0:22:3d:9e:dd:ed:
82:0b:04:34:bc:5a:b9:29:dd:fa:37:40:0c:fd:64:
52:33:4c:7a:ad:6b:22:ea:25:6c:f5:cf:38:76:b6:
be:00:0a:a6:a3:60:2b:3b:13:7c:fb:a2:1b:8a:f9:
81:e5:28:49:25:c1:3b:9c:42:04:47:5c:fc:13:dc:
5a:9b:a9:33:e8:d1:11:3c:e5:f7:e9:aa:c0:33:57:
79:50:36:71:a0:c2:e7:5f:3a:6e:8c:72:6e:93:f9:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E4:CB:1E:63:D6:55:6C:E2:A2:06:93:F7:BA:05:01:AF:66:0D:11
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/DuTLHmPWVWziogaT97oFAa9mDRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.94.58.0/24
193.150.189.0-193.150.191.255
Signature Algorithm: sha256WithRSAEncryption
12:bb:e9:94:d0:25:27:67:b1:c5:7b:9d:bd:8e:85:70:b3:90:
9d:35:cc:95:ca:85:42:3e:d3:6d:a7:b8:22:7b:49:95:a4:2d:
53:af:05:be:f7:ba:95:15:b6:74:40:86:1c:64:5a:87:81:19:
2b:c2:95:ff:92:c6:a1:4c:ed:24:08:6d:9c:b0:57:e0:2d:c2:
3b:93:9a:39:fb:e5:7f:53:83:7e:9e:d1:0a:e0:8a:7f:88:1a:
11:40:d6:fe:38:5a:a9:f6:b9:1a:20:84:35:f3:75:22:44:60:
a1:95:d3:5b:1a:98:8b:40:9c:c1:5f:06:89:f8:ad:6d:a5:87:
34:9b:24:0f:b1:44:31:25:4d:88:94:00:05:08:97:58:8c:95:
53:54:13:cf:8f:31:23:89:1d:c0:27:e5:22:73:38:ea:e9:f0:
84:6f:4f:df:39:45:b8:a0:78:da:d6:ef:7a:ff:60:d7:3b:36:
81:99:c0:9d:06:57:ef:35:56:c8:59:99:fb:74:cb:61:0c:d5:
61:8f:c1:7f:95:15:cc:e6:a0:5a:ab:c7:b6:a7:0c:19:27:4f:
84:b4:a6:a8:62:1b:da:67:05:46:55:90:38:bb:7e:6b:69:2f:
83:9b:3c:01:fd:d9:cc:82:1b:05:24:84:5e:0a:9e:dd:13:f0:
80:0a:68:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:58:38 2025 by rpki-client