Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/DaccjHojB95-TCoADZK32YMFyKo.roa
File: DaccjHojB95-TCoADZK32YMFyKo.roa (raw, json)
Hash identifier: ihqtrBhocSRh86RahK6DG9qn8vgDTCS7AhN7/gul0Fs=
Subject key identifier: 0D:A7:1C:8C:7A:23:07:DE:7E:4C:2A:00:0D:92:B7:D9:83:05:C8:AA
Certificate issuer: /CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Certificate serial: 0194258EE8E3D47CDA6F2B1F0891603F156C
Authority key identifier: 77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/DaccjHojB95-TCoADZK32YMFyKo.roa
Signing time: Thu 02 Jan 2025 05:48:30 +0000
ROA not before: Thu 02 Jan 2025 05:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211111
IP address blocks: 185.159.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e8:e3:d4:7c:da:6f:2b:1f:08:91:60:3f:15:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Validity
Not Before: Jan 2 05:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0da71c8c7a2307de7e4c2a000d92b7d98305c8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:ba:dd:49:0b:e7:f7:27:4c:aa:29:44:c2:
ca:11:5c:88:12:34:32:23:7e:9f:eb:05:47:19:87:
67:0e:dc:7e:72:8a:00:34:27:b5:51:57:6d:54:e9:
80:a8:e8:75:8d:15:08:0e:a2:34:28:de:c0:a9:59:
6c:b2:40:e1:37:47:70:8b:a5:ac:12:f4:2c:25:8e:
f4:15:7a:c8:bf:55:e2:79:db:cc:44:99:7b:6e:e1:
04:65:4b:df:fa:7a:2d:70:eb:fd:25:83:3f:6b:34:
d9:b3:18:e7:ef:b1:3d:0c:36:51:32:42:93:5c:3c:
20:21:91:7c:cb:06:c5:45:8b:87:1f:de:f8:02:4f:
08:ff:aa:24:61:b9:16:d2:a9:ac:12:c8:68:f3:22:
71:0d:4f:7c:66:bc:17:67:8b:87:10:42:fe:04:67:
b1:8d:45:7f:64:07:ab:76:47:9e:77:e7:a0:3a:38:
0a:97:7e:94:8b:42:98:a9:ec:d1:ed:ba:29:23:c8:
87:f0:1a:eb:ed:be:9b:06:ce:b6:2b:dc:74:00:99:
7e:97:ef:2b:2e:f8:ac:b1:c9:5d:88:76:6d:bb:16:
b2:ce:d6:3d:b2:d1:e2:17:38:a6:8f:3b:ec:98:9a:
6b:4c:d0:3f:77:38:b4:da:f5:b7:38:9e:4e:54:cb:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A7:1C:8C:7A:23:07:DE:7E:4C:2A:00:0D:92:B7:D9:83:05:C8:AA
X509v3 Authority Key Identifier:
keyid:77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/DaccjHojB95-TCoADZK32YMFyKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.87.0/24
Signature Algorithm: sha256WithRSAEncryption
73:27:d5:97:55:2d:e8:0d:af:ee:97:a2:0f:f4:8a:ac:7e:f2:
4b:cd:16:48:7f:1a:55:9b:1e:1e:2c:d7:99:a4:e1:63:59:e1:
35:f7:fc:cc:43:7b:c9:c8:7f:52:ce:dd:ae:fd:d6:da:3b:ba:
31:a6:9d:68:85:d1:77:e5:17:c8:4c:92:3e:39:3a:76:b2:10:
3a:fd:0a:c2:02:e9:68:d4:7b:8b:02:6f:94:96:ba:24:ad:88:
0d:46:7a:78:b6:09:43:a1:3e:73:dc:f3:17:2c:f3:5c:95:c8:
cd:60:74:53:42:5d:81:53:11:e4:a4:cc:3f:a5:e9:89:79:e7:
d2:38:49:4c:b7:dd:4d:37:91:a3:0a:6b:d6:17:76:b2:14:f1:
76:af:af:8d:c9:8f:b2:bc:3a:6c:95:18:aa:16:68:84:be:50:
de:4d:f6:74:8a:ed:3b:6a:df:66:9f:ea:1d:22:28:da:9b:ff:
f8:6f:7c:d8:2f:4b:c7:65:0b:a3:1c:ad:c6:f3:cd:ad:4e:f2:
02:93:77:ec:38:b7:b2:2d:28:0a:5a:e2:80:6d:ca:1b:55:31:
80:a3:18:1f:f3:36:56:c7:cb:f4:0d:b0:81:d2:c9:d5:c8:77:
df:1e:a9:48:de:96:f1:b3:29:d2:c7:ef:2b:13:bf:d4:41:09:
b7:55:35:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:39 2025 by rpki-client