Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa
File: DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa (raw, json)
Hash identifier: cD2uBmETpIdrWKKJGmi5CrnlQnFYngKqgmK3aNdcBqA=
Subject key identifier: 0E:6C:55:D6:E7:CA:77:FE:42:52:D8:32:32:14:D1:DC:76:7D:0A:D7
Certificate issuer: /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial: 019421B2073546A292AFEE0B3AB76A479FC0
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa
Signing time: Wed 01 Jan 2025 11:48:22 +0000
ROA not before: Wed 01 Jan 2025 11:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211371
IP address blocks: 193.162.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:07:35:46:a2:92:af:ee:0b:3a:b7:6a:47:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Validity
Not Before: Jan 1 11:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e6c55d6e7ca77fe4252d8323214d1dc767d0ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fb:a3:12:f0:03:ec:fa:23:f2:6f:e6:9d:79:
7c:3b:bf:91:67:ef:67:1d:2c:a7:14:69:8c:5b:c4:
5e:58:dd:30:3c:a0:44:27:5a:21:e0:b7:5f:e6:ff:
12:a9:99:fd:36:eb:31:d5:e1:9b:c9:6c:91:47:3d:
61:78:54:05:08:12:20:7f:f8:9e:5c:4b:ec:6e:fe:
33:20:c9:78:37:a1:67:c0:cd:38:ae:a6:9c:7f:d9:
57:75:e1:b9:3c:fe:a1:0d:6c:2c:49:fd:d9:71:0c:
27:e1:de:f2:b5:17:44:33:62:6c:f0:1b:03:96:ad:
40:0a:e3:b0:8d:02:e5:ee:90:78:93:9f:27:a2:86:
ce:33:f1:04:7f:b0:6a:e4:b0:df:2c:9e:29:c7:d3:
8b:f3:78:34:5e:bd:40:90:82:20:13:4b:79:89:2d:
71:2d:fc:62:aa:40:9a:ca:14:90:91:72:71:f2:f4:
c7:a7:3c:f8:3c:fa:9a:cd:d1:37:20:b8:90:c7:67:
3f:0b:f2:52:d0:56:7a:86:89:98:d8:62:0a:a7:5e:
78:17:b4:04:8b:36:61:aa:18:6e:1f:c7:9d:c5:fc:
9e:e5:96:60:b2:de:77:8b:ee:8c:46:cb:bc:4a:f1:
2e:24:ad:08:bc:5a:ae:68:d6:49:f8:dd:e8:86:04:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6C:55:D6:E7:CA:77:FE:42:52:D8:32:32:14:D1:DC:76:7D:0A:D7
X509v3 Authority Key Identifier:
keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/DmxV1ufKd_5CUtgyMhTR3HZ9Ctc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.46.0/24
Signature Algorithm: sha256WithRSAEncryption
85:98:28:9b:bb:77:b0:3a:62:dd:22:4b:2c:b0:48:10:16:e8:
8a:78:47:74:71:dd:31:95:03:22:1a:61:de:09:c8:c1:9a:75:
01:51:86:52:16:06:26:b0:30:6f:84:83:0d:4c:c4:9b:03:a4:
86:8d:79:44:b2:f2:cb:28:da:38:b7:81:80:38:5c:a4:4f:8c:
28:11:ed:fd:77:30:95:d9:fe:f3:18:c2:e5:b7:63:8e:9e:28:
d7:7f:4b:ae:3f:9c:e9:70:04:99:61:92:21:7d:89:99:48:cd:
81:97:07:55:eb:0e:8d:90:78:5e:b8:09:74:aa:1d:fa:fb:8d:
46:59:5f:46:d0:ce:41:7e:2f:3e:12:5f:64:79:20:03:dc:c8:
7d:cf:33:1a:46:61:42:b1:23:d7:87:d7:53:68:f8:ca:95:e5:
a0:f0:28:90:5d:1f:b6:8c:e7:46:69:2a:ec:26:dd:be:e2:0d:
ba:60:a8:bb:48:e9:f1:56:d8:9e:66:0c:e1:34:a3:84:d9:46:
c1:df:9f:0a:cd:f9:16:aa:56:e5:da:0a:32:8e:6a:22:0d:6e:
0e:29:3f:7a:28:07:df:aa:71:28:49:55:e8:64:a3:9a:01:39:
40:20:f2:64:7a:19:73:02:aa:c6:37:d3:c8:e8:51:bd:74:1e:
36:86:27:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:32:47 2025 by rpki-client