Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/33DDywxXELna01DvyBG6K4OCumY.roa
File: 33DDywxXELna01DvyBG6K4OCumY.roa (raw, json)
Hash identifier: EsYBtIHA+hqoobRdv5KvY0vtx5XM1QlHRSf1TKnaAQU=
Subject key identifier: DF:70:C3:CB:0C:57:10:B9:DA:D3:50:EF:C8:11:BA:2B:83:82:BA:66
Certificate issuer: /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial: 0194221FE9D28EE14764B3F36BEB0197B85B
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/33DDywxXELna01DvyBG6K4OCumY.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207199
IP address blocks: 185.232.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e9:d2:8e:e1:47:64:b3:f3:6b:eb:01:97:b8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df70c3cb0c5710b9dad350efc811ba2b8382ba66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:80:40:e4:de:6e:ab:e5:af:a9:7c:f3:47:
5a:b8:bb:0d:4b:7c:51:4d:54:0e:8e:22:c1:44:60:
ec:8d:80:43:8f:13:fd:01:b3:75:5d:f5:a9:67:d3:
12:cb:b0:bc:3d:bc:05:df:51:7d:3c:e2:27:3d:17:
23:02:31:09:0b:d8:8a:6d:1a:ec:db:e6:d3:e2:8d:
6e:05:7b:1c:18:4f:cb:22:b0:3f:99:f7:b5:7e:3d:
a1:7f:b2:e5:d0:fd:5d:0f:76:f6:39:e7:c2:ee:c9:
f7:7b:b8:cc:9a:5e:cf:30:ed:66:84:85:02:21:57:
17:3b:e1:13:57:f8:62:ed:ea:22:98:60:45:0e:c2:
5f:a2:72:6b:23:e6:a7:8f:85:94:47:49:c1:5e:90:
68:64:70:b2:5d:89:8c:47:f2:21:6d:1d:88:b6:3d:
24:32:4d:a7:b5:66:ed:92:e1:11:af:ef:11:d2:85:
05:4d:51:0a:01:17:29:08:db:bb:f2:4e:7a:9e:73:
cd:7f:df:7f:02:f0:d9:37:ea:36:80:19:c1:bb:7c:
04:29:5d:4b:e8:2f:0a:ae:c7:4c:03:06:3f:3f:3f:
cb:df:87:55:9d:5a:cd:37:94:a9:ea:51:71:94:fa:
c2:6d:57:ab:dc:6a:4f:e5:27:37:cc:2f:63:d1:bd:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:70:C3:CB:0C:57:10:B9:DA:D3:50:EF:C8:11:BA:2B:83:82:BA:66
X509v3 Authority Key Identifier:
keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/33DDywxXELna01DvyBG6K4OCumY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.148.0/24
Signature Algorithm: sha256WithRSAEncryption
92:53:0d:d4:67:4c:8c:a9:45:34:c9:77:f3:87:7f:01:77:09:
c4:54:06:b9:d8:ed:9c:71:d2:77:02:b3:97:04:b3:f0:38:c9:
5e:59:cb:72:09:e9:7d:1b:1a:4d:7b:97:f5:01:cb:cb:81:8a:
72:23:b0:18:37:66:dc:c0:7b:cd:d7:83:17:f3:63:92:fe:a4:
53:15:88:5e:74:2c:92:d1:a1:56:b2:fa:4e:3a:27:f6:9f:45:
3c:46:19:8e:2b:1f:60:bb:eb:b2:b7:e0:a0:40:4d:4b:26:40:
c6:94:0e:0e:d5:db:10:f7:00:a4:c6:d5:32:76:99:5a:a1:23:
d8:0f:b1:e9:da:30:90:12:6f:4f:fa:a8:6b:8c:d9:de:43:ef:
d7:c7:ac:e5:06:ba:f1:6d:39:82:8b:a3:3e:cd:42:70:40:15:
f7:8a:13:2b:87:a0:cd:dd:4a:d3:15:93:21:8f:23:27:86:63:
97:ba:a6:8b:66:4e:26:4f:4b:39:90:a0:e7:8d:c4:b4:f0:2e:
ef:ef:64:53:10:d3:fa:9f:61:76:59:12:74:86:55:f0:37:48:
a2:64:d5:57:da:ab:5c:86:85:dd:68:0d:bc:ac:c4:a6:2f:fe:
a3:1f:ff:88:e9:63:46:85:09:c9:6c:06:91:e2:ce:1e:dd:b9:
92:89:3e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:46:03 2025 by rpki-client