Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/DniqmtindUam8vj_sVzvh8icBDA.roa
File: DniqmtindUam8vj_sVzvh8icBDA.roa (raw, json)
Hash identifier: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=
Subject key identifier: 0E:78:AA:9A:D8:A7:75:46:A6:F2:F8:FF:B1:5C:EF:87:C8:9C:04:30
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 019424453DCB0F413053FF071DE4A8BE0D98
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/DniqmtindUam8vj_sVzvh8icBDA.roa
Signing time: Wed 01 Jan 2025 23:48:25 +0000
ROA not before: Wed 01 Jan 2025 23:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44416
IP address blocks: 188.239.192.0/18 maxlen: 18
188.239.192.0/21 maxlen: 21
188.239.200.0/21 maxlen: 21
188.239.208.0/21 maxlen: 21
188.239.216.0/21 maxlen: 21
188.239.224.0/21 maxlen: 21
188.239.232.0/21 maxlen: 21
188.239.240.0/20 maxlen: 21
188.239.240.0/21 maxlen: 21
193.228.2.0/24 maxlen: 24
2001:678:c7c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3d:cb:0f:41:30:53:ff:07:1d:e4:a8:be:0d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Jan 1 23:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e78aa9ad8a77546a6f2f8ffb15cef87c89c0430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:65:3a:2a:e7:4c:dd:68:93:6b:55:9b:4b:
b8:04:c1:02:71:89:e3:a1:76:69:40:5e:2d:97:0a:
92:bc:4f:ac:66:54:9f:82:30:ed:23:dd:0f:30:17:
05:be:01:8e:33:8c:2e:9e:2c:76:4f:da:19:cb:b5:
e9:0d:b8:4d:fa:23:b5:4c:e4:28:c2:46:d2:eb:af:
3d:b2:42:19:52:6e:2f:d1:ae:ef:82:a4:3c:32:99:
3d:3e:06:ca:af:79:6e:7f:86:e2:6c:cd:9d:e6:e5:
38:c4:3f:d8:4f:4f:35:f3:6e:11:7d:69:e3:c9:3d:
8f:fc:ae:9a:14:05:40:f0:95:cd:8e:8f:38:a0:54:
7f:42:79:5d:fe:12:e9:5b:b1:71:26:75:e1:26:c6:
84:55:4e:14:5d:78:83:76:e5:52:58:7b:8e:ba:c7:
69:36:9b:35:b0:f5:4d:50:29:f6:13:41:a4:f4:2d:
4b:9a:bb:7e:39:31:9f:91:1d:73:fd:28:eb:82:93:
3d:b3:54:1f:4b:f1:dc:b2:fa:29:a0:7e:b8:88:61:
9e:48:66:2c:5b:18:ed:8a:b6:9d:53:e7:a3:8a:9f:
b6:c2:95:73:be:9b:c3:c1:17:47:0f:49:aa:41:1c:
3e:11:a6:77:90:97:2c:06:a7:9a:fe:d7:69:99:bf:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:78:AA:9A:D8:A7:75:46:A6:F2:F8:FF:B1:5C:EF:87:C8:9C:04:30
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/DniqmtindUam8vj_sVzvh8icBDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.239.192.0/18
193.228.2.0/24
IPv6:
2001:678:c7c::/48
Signature Algorithm: sha256WithRSAEncryption
8f:7b:aa:69:ab:60:b9:06:33:a7:02:50:d7:f9:ac:53:67:fa:
8b:be:1f:6f:5b:e5:61:e5:36:95:24:ec:2f:36:33:f3:bf:cc:
6c:25:78:6e:a8:76:41:f9:b8:c0:2d:a7:dd:f2:6e:02:3e:82:
51:36:56:42:7c:6e:26:1c:c8:fd:d5:af:dc:9d:20:72:c2:39:
19:a6:be:2c:02:8e:56:71:b2:1d:a7:94:ec:4f:fe:ed:5d:6a:
0f:4d:d0:41:72:ea:2d:2e:88:1c:87:5c:69:ee:2a:dc:29:05:
3a:cb:f5:ba:f6:48:76:f3:99:5e:cb:82:fa:01:23:8c:8d:87:
8e:84:32:2c:61:b1:83:35:c3:47:ea:c8:83:40:30:51:8a:de:
53:2a:2a:c6:6e:00:fc:76:07:67:86:3b:63:c5:26:cd:84:c7:
6b:aa:fd:33:de:30:40:ba:ed:db:c3:1c:cf:a4:8d:33:00:d4:
56:b9:25:58:7c:a6:95:71:4b:2d:4c:19:b9:68:88:98:e4:57:
41:3a:56:5f:86:80:f3:43:57:ff:af:a4:38:cf:b4:ec:61:07:
0c:d8:b5:4b:46:12:71:d2:4d:1f:11:11:c5:8f:fb:4b:3d:44:
47:dc:ec:95:09:05:f0:ff:2b:0d:c1:84:80:f5:ed:ea:dd:b6:
2b:45:5c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:59:30 2025 by rpki-client