Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/DReP9bc0zwfbsr8Nie7Lz--WV3I.roa
File: DReP9bc0zwfbsr8Nie7Lz--WV3I.roa (raw, json)
Hash identifier: bjq88usQ48nTatb5B4QsLmgQZv99AHE50C/OVUr97Og=
Subject key identifier: 0D:17:8F:F5:B7:34:CF:07:DB:B2:BF:0D:89:EE:CB:CF:EF:96:57:72
Certificate issuer: /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial: 0194266A311E78BE693FE500BE75B14B45E2
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/DReP9bc0zwfbsr8Nie7Lz--WV3I.roa
Signing time: Thu 02 Jan 2025 09:48:01 +0000
ROA not before: Thu 02 Jan 2025 09:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12815
IP address blocks: 193.17.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:31:1e:78:be:69:3f:e5:00:be:75:b1:4b:45:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Validity
Not Before: Jan 2 09:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d178ff5b734cf07dbb2bf0d89eecbcfef965772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8d:0d:96:6b:46:0d:8d:a1:ed:b4:23:65:d8:
34:1a:62:e3:9d:7c:bc:00:db:a5:33:eb:f4:07:c0:
4d:98:90:5b:94:e5:25:9e:bd:3d:8e:a7:19:77:68:
bc:65:87:6c:58:32:ad:3b:0d:0e:e1:06:1a:66:e7:
5b:92:29:a5:e9:e7:99:2c:4e:4d:66:37:d9:1e:14:
c8:37:82:b1:07:39:e3:a6:ab:10:99:c0:3b:a2:7e:
9b:d2:14:58:46:68:e3:39:70:eb:6e:33:9c:86:27:
8c:29:6b:c9:ae:77:56:47:fe:92:25:9e:1b:22:21:
12:ac:9e:c2:bb:a1:29:3b:31:e6:f6:ae:ee:3f:d4:
2c:06:5f:f5:5c:bf:e7:f7:24:82:a8:75:f0:13:85:
fe:8c:43:e2:67:ae:1a:0b:15:6d:29:18:18:bb:16:
ba:09:1f:24:13:32:b7:44:db:ee:a1:4e:ec:ef:3d:
e0:60:bd:44:ce:52:43:15:94:6e:56:ac:db:ae:dc:
74:7d:75:a3:a2:0e:12:80:b9:a1:e9:ff:85:1e:65:
4c:02:36:37:a3:d9:e9:1e:e6:a4:fa:71:37:49:a9:
91:aa:34:e3:6a:65:4c:55:f2:14:d2:15:2c:59:e7:
49:a6:9d:87:85:4e:bd:5f:6a:a5:d4:e7:ac:9b:75:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:17:8F:F5:B7:34:CF:07:DB:B2:BF:0D:89:EE:CB:CF:EF:96:57:72
X509v3 Authority Key Identifier:
keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/DReP9bc0zwfbsr8Nie7Lz--WV3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:de:6c:87:87:71:2a:ef:00:37:dc:6e:39:a2:30:fb:2f:72:
94:ea:76:6e:cf:ce:ca:6d:41:43:7f:78:16:63:c4:ca:f4:43:
02:af:ad:8c:3b:cb:96:99:d9:77:81:ca:8d:d1:a3:2a:c8:f8:
ae:50:bf:e7:98:59:d1:b3:c3:25:d1:7d:93:94:c5:72:d9:2c:
02:76:ba:69:39:2d:a1:2a:5a:80:52:4e:12:14:fe:c4:52:b0:
18:df:01:bd:15:fc:f3:53:8e:e5:22:f6:31:cf:55:ad:16:94:
8f:20:27:70:a0:8e:3a:1b:4e:ac:c2:b4:00:53:d3:38:3d:4d:
cd:6c:c6:cb:0d:71:2a:a7:8a:3e:70:02:2c:83:88:44:91:bb:
bd:23:d6:55:fd:8f:65:47:7b:5a:57:47:b4:bd:58:24:d4:61:
19:3c:35:87:e7:0c:9f:d3:bb:5c:ce:cd:5c:bc:3d:59:f4:64:
84:07:07:e8:ab:63:7b:7e:7c:cf:8e:e8:68:ad:6d:32:5f:74:
eb:91:d1:2a:77:6b:d4:d6:5c:8e:a1:1f:91:86:ee:c3:d6:90:
e2:2c:f0:29:c7:4b:56:8c:6c:c9:e1:27:9a:26:df:36:bf:c0:
da:55:0a:56:54:7f:e3:35:a0:00:6e:a4:19:20:15:66:41:ed:
fb:dd:9e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:24 2025 by rpki-client