Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa
File: DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa (raw, json)
Hash identifier: +g29EdBhXU2GeBhgFcLWLeXtQJs4K/ChJhjgEP7KbZM=
Subject key identifier: 0C:BA:50:18:F1:8E:7F:F3:98:BE:61:F0:7F:C6:F6:94:E6:32:3A:3D
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019424455D838E01ECAF88FD546431CD732D
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199312
IP address blocks: 46.28.160.0/21 maxlen: 24
185.10.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5d:83:8e:01:ec:af:88:fd:54:64:31:cd:73:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cba5018f18e7ff398be61f07fc6f694e6323a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:73:03:37:56:6b:71:b3:f4:fb:4c:31:a0:
fb:f0:42:68:9c:88:bc:f5:4b:3e:fc:7f:5f:d6:1d:
6b:d8:0b:fe:a7:4c:e6:ba:80:40:32:c5:6c:ef:2d:
bf:a2:79:72:be:49:8d:1c:a6:d4:22:8e:fb:3e:2a:
13:52:99:77:4c:af:e9:5f:0b:9e:5a:d8:4e:46:2e:
a9:d0:a1:3e:de:24:e8:d6:05:2d:af:fa:c7:fd:1b:
8f:a7:65:e4:59:ba:8a:11:2c:12:c7:57:60:f2:cd:
11:e5:0e:35:3e:86:fa:e2:4e:77:b3:4d:f9:74:61:
09:d7:d0:4a:65:2b:f6:37:b4:55:4a:07:48:30:f5:
b2:0c:02:3e:f5:b4:98:a0:53:c2:99:92:58:68:d8:
c7:32:8f:03:72:68:72:70:c9:75:4f:29:e5:8e:7c:
fa:5f:d8:dc:0a:c6:07:b5:f4:b2:9c:98:b1:2f:2f:
07:a9:93:1e:6f:30:e2:ea:4e:6b:1a:03:f9:a6:1d:
1b:5f:ac:b2:62:3a:4c:25:03:f1:6e:65:83:e9:3e:
64:21:cb:91:81:cd:37:50:f3:9a:f2:a7:14:89:38:
1d:72:5a:cd:51:85:12:63:c6:46:05:6b:dd:ce:aa:
f2:35:19:c3:57:56:03:01:64:59:e3:19:f4:02:2f:
e3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BA:50:18:F1:8E:7F:F3:98:BE:61:F0:7F:C6:F6:94:E6:32:3A:3D
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/DLpQGPGOf_OYvmHwf8b2lOYyOj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.160.0/21
185.10.248.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:e7:60:fe:07:9b:54:cb:1d:c5:a5:08:5d:03:cb:a9:c0:22:
0e:d2:2a:78:b0:f4:fb:4d:4d:c8:4c:a0:78:32:69:93:72:e5:
52:06:e3:37:2b:78:8f:ad:fc:6b:5f:3c:72:0b:8f:b3:75:1e:
5d:2f:db:1e:e9:21:21:8b:88:46:1e:67:79:31:db:9e:00:ed:
5b:98:c7:fe:51:91:44:5c:e7:9f:7e:d8:e7:b1:4a:ec:1b:68:
16:6c:2f:e3:ff:9b:60:10:ee:8f:81:12:01:20:3d:a5:ad:17:
e1:a6:be:d3:68:09:c0:66:e8:24:ab:fb:01:9c:32:a5:6a:7f:
cc:78:f7:8b:5f:64:02:31:b7:51:b8:74:28:64:24:cf:7c:61:
bd:09:3b:9a:72:99:45:03:30:47:59:c4:e6:6f:4d:0e:77:f0:
4f:b2:d7:7d:f0:f5:60:7a:27:e6:34:e6:55:ec:30:e7:53:1f:
5d:77:ff:65:4d:97:64:1b:a3:3c:14:e8:59:37:86:fb:47:b4:
8d:bd:b5:96:ea:2a:80:51:86:8a:0e:95:d0:65:82:8a:00:65:
7e:a2:ea:14:b2:71:88:59:e9:82:a2:b3:d2:68:17:0d:9c:37:
6d:e4:65:87:d3:a9:bb:5b:d9:46:af:28:2e:a0:98:b7:f4:71:
9f:c1:c4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:27 2025 by rpki-client