Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/dwcCv3NEUpRe93cGQfH6rS5MV7Y.roa
File: dwcCv3NEUpRe93cGQfH6rS5MV7Y.roa (raw, json)
Hash identifier: OY8DB8zNrqB08e7HMISDjm3V1bYY43WD+P/6q41oOCE=
Subject key identifier: 77:07:02:BF:73:44:52:94:5E:F7:77:06:41:F1:FA:AD:2E:4C:57:B6
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746B9FA81A1C0D38862F49C18A155ED
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/dwcCv3NEUpRe93cGQfH6rS5MV7Y.roa
Signing time: Thu 02 Jan 2025 13:48:54 +0000
ROA not before: Thu 02 Jan 2025 13:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213245
IP address blocks: 188.132.211.0/24 maxlen: 24
188.132.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:b9:fa:81:a1:c0:d3:88:62:f4:9c:18:a1:55:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=770702bf734452945ef7770641f1faad2e4c57b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:cc:26:a6:4d:38:49:5a:23:03:46:d4:cf:
06:f2:20:51:c9:0f:1e:0a:a0:13:1b:b5:46:8a:f9:
03:93:2e:0a:54:73:f2:49:a2:63:dd:80:60:05:b4:
0e:f6:49:6b:c8:e8:d5:e7:d3:3f:e6:9c:ac:08:db:
32:0d:64:71:aa:ff:b3:ca:bf:a6:1a:7f:23:8a:77:
e9:8d:90:20:08:fd:fb:e0:7d:0f:f2:00:b2:f5:f6:
dc:75:a0:b2:7f:de:2a:67:5c:12:ec:0c:a9:a8:ba:
0f:2b:d1:a8:57:f1:dd:17:7d:f7:75:e3:74:92:ba:
1e:12:02:1f:16:f3:da:af:64:b4:c3:0d:db:6d:ba:
af:cc:a8:44:ff:04:39:00:b7:09:6d:9f:63:ea:73:
69:fe:7f:c8:12:8b:cc:63:de:63:c6:a2:a7:2e:c7:
2c:41:1b:d0:14:bf:ea:6b:04:84:bd:79:b2:e9:9e:
30:43:f8:75:76:29:7c:3a:e2:7e:c0:d6:47:29:c6:
a6:e4:ea:b9:98:ef:dc:d9:d5:da:10:f9:57:f5:87:
19:19:34:40:9a:d4:cc:34:ed:96:f9:fb:b7:33:f4:
38:c5:2c:09:3c:f0:a7:7a:81:39:c3:49:89:0b:cd:
1d:78:85:c7:bf:d7:06:a7:8d:aa:be:85:f7:e3:03:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:07:02:BF:73:44:52:94:5E:F7:77:06:41:F1:FA:AD:2E:4C:57:B6
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/dwcCv3NEUpRe93cGQfH6rS5MV7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.211.0/24
188.132.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:33:0e:ea:2b:08:0c:d9:95:7f:c2:72:a1:89:bb:cb:2d:5b:
ec:20:3c:39:40:f7:39:cc:dd:88:24:76:44:77:ff:67:b3:dd:
d4:39:91:ef:35:bd:66:39:4c:94:3a:a7:a7:6d:e3:86:cd:b0:
78:54:ea:3c:9a:de:c4:79:9a:7f:16:8e:fe:47:08:1a:ce:d9:
bd:e5:32:65:b9:d3:84:71:b4:72:7b:e3:2e:29:67:e0:13:f2:
b1:7e:6a:26:e0:d0:1e:b1:bd:16:91:08:aa:d8:61:a3:b5:99:
34:2a:18:9f:11:01:e7:b4:cc:39:05:9c:e5:ab:14:e0:08:c1:
3d:6c:77:e6:dd:4a:d2:7d:24:7c:2e:3a:01:04:41:7f:57:95:
1a:ff:40:4d:5e:4d:a7:1c:6e:8c:64:ac:4d:de:23:05:14:de:
cd:a9:5a:61:2e:08:b6:4b:69:42:dd:ea:d4:a7:5f:ce:d8:1c:
49:9f:a4:8f:64:52:27:71:d6:e1:4e:64:fd:1c:48:ef:42:75:
1e:3b:2c:6b:de:f5:35:7f:cb:28:92:26:a9:c6:52:75:33:70:
f6:72:4a:72:53:f5:13:12:2a:15:e7:54:cc:54:b6:45:9e:5a:
d9:63:df:63:e0:b7:28:32:98:e9:8b:c2:0d:f8:e5:24:05:36:
a4:05:5d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:49 2025 by rpki-client