Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/DujgrKmrgV8xwj_6lcbB9bHCo5o.roa
File: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (raw, json)
Hash identifier: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=
Subject key identifier: 0E:E8:E0:AC:A9:AB:81:5F:31:C2:3F:FA:95:C6:C1:F5:B1:C2:A3:9A
Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Certificate serial: 019426D98CA2C9BE0460FF4C3115BD8BAA2C
Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/DujgrKmrgV8xwj_6lcbB9bHCo5o.roa
Signing time: Thu 02 Jan 2025 11:49:39 +0000
ROA not before: Thu 02 Jan 2025 11:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212196
IP address blocks: 87.239.176.0/21 maxlen: 24
2001:67c:2b28::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8c:a2:c9:be:04:60:ff:4c:31:15:bd:8b:aa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ee8e0aca9ab815f31c23ffa95c6c1f5b1c2a39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:55:3b:55:d7:1a:2b:82:06:a1:e4:0d:81:
34:6f:1e:25:65:af:b4:a6:46:c6:a5:60:e6:7e:a1:
c8:2e:b0:80:26:6c:89:12:20:51:07:93:f3:fe:95:
2e:79:56:de:7a:ca:2a:c5:3d:71:70:c3:87:f0:0f:
ed:14:d8:22:60:28:dc:8d:a9:0f:79:5a:65:fa:31:
e8:8e:f5:37:bb:74:73:65:39:d5:d4:45:07:8d:0a:
52:6a:54:da:c3:0e:98:1e:72:b0:f8:a4:37:54:2d:
06:9f:21:d0:65:64:dc:73:75:c9:0f:a2:10:fe:a9:
70:5b:98:7a:35:ff:33:a4:e0:d1:e5:89:f9:91:0b:
0a:06:c5:9d:54:f3:3d:1f:f1:9a:b9:7c:c6:78:88:
55:40:0f:49:36:65:46:aa:53:f1:12:7a:c9:95:d3:
bc:48:33:d8:c1:ea:24:0d:c5:0b:1c:4e:de:e4:fc:
ab:4f:87:c0:d0:88:2d:4d:ef:75:52:06:f8:2b:44:
24:ab:f7:b6:48:d3:f0:64:e4:68:22:53:f0:dd:c0:
e5:0b:d4:ef:35:6b:e7:55:5f:b3:22:e2:96:c3:d6:
95:f1:91:76:85:4a:7e:e7:bb:b2:08:2e:7c:fc:a0:
d0:11:d5:24:b3:4e:18:44:51:91:f4:de:9b:36:f3:
68:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E8:E0:AC:A9:AB:81:5F:31:C2:3F:FA:95:C6:C1:F5:B1:C2:A3:9A
X509v3 Authority Key Identifier:
keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/DujgrKmrgV8xwj_6lcbB9bHCo5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.176.0/21
IPv6:
2001:67c:2b28::/48
Signature Algorithm: sha256WithRSAEncryption
07:b4:b6:15:1f:f4:ae:04:b4:18:99:b4:55:03:ae:8e:12:d3:
a7:3a:48:1c:5b:07:25:db:6e:a0:e3:5c:82:01:cc:ce:3d:0c:
7d:3e:03:9c:fb:10:5b:ee:5e:a4:d2:f8:79:51:df:3f:80:92:
f7:c6:87:bf:f3:fa:64:f7:72:e0:cc:d8:33:6e:a3:99:c6:6f:
12:9f:9d:e2:f2:a9:e1:30:13:66:7e:24:a3:c4:4b:51:db:bc:
25:cc:6d:09:96:af:17:80:d7:59:88:33:e4:ef:e9:bf:b9:5a:
63:65:77:ab:4b:22:48:0e:a1:2b:49:6f:6e:6f:29:4f:48:20:
73:c4:7d:9d:f9:16:a6:7b:e4:27:06:9d:f2:63:f3:75:f2:24:
a8:ae:ea:e7:37:eb:11:af:a1:c2:9f:f7:fc:eb:c3:b1:9b:b5:
51:b1:fc:2c:53:32:9f:2a:18:00:db:90:17:e5:9f:7e:97:9f:
71:ed:6e:88:64:5d:0b:67:da:d2:da:18:64:72:4d:34:6a:41:
90:43:f1:6d:a0:e1:a0:72:9f:be:29:42:48:37:cf:63:a3:a1:
90:de:13:46:af:45:e4:f6:49:bd:93:62:b3:1e:a9:e7:b0:38:
cc:9e:1d:ee:7d:42:96:6a:51:a1:f8:f1:bb:87:be:8b:b9:6a:
8c:8b:92:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:09:33 2025 by rpki-client