Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/DKKUdW46_6zXz80AQeVOjRiUJ4A.roa
File: DKKUdW46_6zXz80AQeVOjRiUJ4A.roa (raw, json)
Hash identifier: xKACAtSTQQnsNmsto4dOmpcxKzakaVi9kzieeQlXs5g=
Subject key identifier: 0C:A2:94:75:6E:3A:FF:AC:D7:CF:CD:00:41:E5:4E:8D:18:94:27:80
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 019422FB12B433EC1E73B8ACAFA791E670BC
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/DKKUdW46_6zXz80AQeVOjRiUJ4A.roa
Signing time: Wed 01 Jan 2025 17:47:47 +0000
ROA not before: Wed 01 Jan 2025 17:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49763
IP address blocks: 193.164.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:12:b4:33:ec:1e:73:b8:ac:af:a7:91:e6:70:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Jan 1 17:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ca294756e3affacd7cfcd0041e54e8d18942780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:0a:ff:d8:cb:04:a0:2d:5d:86:cb:f6:86:
e6:6f:30:3b:37:ab:31:06:57:cb:e4:5b:e3:5c:3e:
15:31:7b:c7:74:8e:90:d0:50:61:6c:30:65:36:33:
e4:bf:d0:9b:34:1f:ee:a0:2c:ff:3d:8b:3a:4d:d7:
a4:ca:af:ba:3c:36:c7:12:fe:2c:5c:bb:90:e8:ea:
e4:9c:b9:27:6a:8c:22:ea:07:93:7b:b2:15:df:8b:
b1:85:72:27:23:7b:d0:99:74:9b:28:5f:69:66:8a:
03:76:5e:80:3d:fe:25:c3:f2:79:79:99:62:14:f9:
b8:6b:5c:f1:0f:0d:93:2e:6e:00:9d:ff:63:3b:aa:
1d:a4:cb:b6:8c:8f:d6:19:c3:36:84:d7:cc:a1:92:
cc:e0:c2:18:a9:68:f2:22:95:aa:47:69:e5:7b:00:
3c:86:04:fd:fa:12:bd:80:d5:b7:bd:db:69:f6:b1:
3a:41:6f:35:5b:52:cd:c7:ab:ae:5a:15:2d:26:25:
6c:29:24:77:be:bc:bd:a6:e0:f2:a6:e0:56:e6:27:
73:28:c8:78:fc:29:c6:07:c1:b3:28:3b:ac:61:fd:
2d:46:b1:23:b1:89:84:86:5c:9b:50:58:7e:e7:9f:
45:f6:e4:3d:54:f7:c2:88:ba:81:f1:e8:89:b2:ff:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A2:94:75:6E:3A:FF:AC:D7:CF:CD:00:41:E5:4E:8D:18:94:27:80
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/DKKUdW46_6zXz80AQeVOjRiUJ4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.196.0/23
Signature Algorithm: sha256WithRSAEncryption
16:6f:18:b2:68:97:fd:fc:f0:cc:98:2a:5b:10:d0:88:61:13:
3e:c4:62:14:64:d4:25:e8:24:25:63:e6:14:4c:20:74:e9:4c:
72:3b:10:47:86:37:0c:52:24:c7:a7:45:f4:f1:b0:0a:0e:c9:
8a:9e:b3:a1:9c:9b:43:46:38:ed:dc:cd:67:ea:1f:e1:21:d6:
e3:6c:f6:1c:34:d5:dc:f0:9f:96:c9:43:b4:d8:fe:b3:25:53:
a5:a8:71:31:3a:c9:a9:77:c7:2c:13:e8:ff:30:9e:d9:fe:4f:
c8:03:55:9a:03:ad:d8:40:39:cc:f2:07:bf:a3:d0:4c:c2:5c:
1a:3f:f8:5f:c6:6f:31:c7:aa:e5:4b:f9:fe:0d:28:99:b0:2c:
dd:9c:8d:b1:b3:39:8f:b1:7d:53:e1:8d:66:8f:f6:cb:76:33:
38:1a:f8:54:22:47:f0:d3:b7:35:83:68:fb:a0:ca:e9:e2:70:
a7:1c:d9:1e:07:c6:f7:cb:1c:fa:7c:af:53:b8:77:86:2d:8e:
64:9f:29:0f:4b:ac:7b:33:4f:1d:b5:29:7d:57:fd:93:1b:c6:
d8:40:c8:fb:88:68:7c:7a:b6:66:68:62:c0:e7:18:89:7f:ce:
fa:c9:bc:fb:7a:16:48:6a:3d:88:fe:76:3a:6b:aa:50:3a:de:
bd:f7:9e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:04:01 2025 by rpki-client