Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/DGbM08ZTsAqYw2-cwkwYARO53tE.roa
File: DGbM08ZTsAqYw2-cwkwYARO53tE.roa (raw, json)
Hash identifier: vRmKPjIDxHKM6g2DoHk9sDKKAGwsNzCt7i6bkh/HxXk=
Subject key identifier: 0C:66:CC:D3:C6:53:B0:0A:98:C3:6F:9C:C2:4C:18:01:13:B9:DE:D1
Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517
Certificate serial: 01942748767F4B1A41D49215DA88E8A35081
Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/DGbM08ZTsAqYw2-cwkwYARO53tE.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212097
IP address blocks: 185.242.100.0/24 maxlen: 24
185.242.101.0/24 maxlen: 24
185.242.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:76:7f:4b:1a:41:d4:92:15:da:88:e8:a3:50:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c66ccd3c653b00a98c36f9cc24c180113b9ded1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:62:09:7e:76:b8:42:ce:86:74:8e:c8:78:
b8:18:b7:2a:e6:29:0a:65:cd:d7:88:c7:a3:e5:08:
21:89:12:dd:04:17:96:97:14:aa:4b:63:18:d7:67:
b9:7e:86:0e:d8:ee:34:dd:c6:ff:52:02:a8:ca:98:
07:83:5a:e3:74:0f:1b:3a:69:06:4a:26:e7:42:2f:
2c:0c:09:d9:97:82:96:67:3e:9c:a6:3e:b6:67:a7:
3b:1d:a2:73:04:7c:ce:c9:f7:a1:28:24:1e:26:4f:
65:11:7c:4f:c8:9e:72:6f:b7:50:f7:32:f8:0e:8c:
74:91:da:cd:ac:9d:c7:cf:c0:da:c4:45:ad:c3:72:
0b:48:5d:5a:40:d6:a6:57:61:f9:a5:f3:8d:34:b9:
52:98:17:54:51:5c:62:76:5a:f9:fd:99:51:53:23:
c3:d8:e8:46:07:86:fd:5f:78:31:c8:6f:75:aa:2b:
5b:0d:78:5d:15:10:b5:7e:e9:2a:a3:c2:c7:45:36:
3a:9a:74:dc:98:b2:6e:09:20:54:ca:79:f4:c9:fa:
65:48:b8:ab:5d:01:fe:db:a5:a8:3b:0f:84:ae:71:
3e:cd:b0:04:b6:e4:94:f8:43:8a:dc:72:b8:f2:f0:
ea:ee:72:b0:6b:d7:57:30:45:b3:0f:02:8b:27:88:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:66:CC:D3:C6:53:B0:0A:98:C3:6F:9C:C2:4C:18:01:13:B9:DE:D1
X509v3 Authority Key Identifier:
keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/DGbM08ZTsAqYw2-cwkwYARO53tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.100.0-185.242.102.255
Signature Algorithm: sha256WithRSAEncryption
bb:c3:cb:b1:5d:2c:74:6e:98:26:b4:02:fb:29:0f:dd:8c:a5:
46:2e:83:8e:32:1a:7a:63:22:83:2b:c4:7b:24:cd:93:5f:d2:
8a:71:11:0c:7a:4a:9f:59:d0:94:ca:cb:e9:ef:40:dc:34:bb:
9e:d3:8a:b5:f4:87:f5:8a:44:d9:e8:57:44:e0:8b:d3:ea:77:
ca:d1:9d:be:60:7b:79:1a:ab:6e:5a:2a:8b:36:d3:86:a6:63:
e7:b8:7c:16:64:b3:25:0d:7d:7a:10:ac:0e:72:90:7d:b9:43:
d7:9d:e4:b8:0a:e0:1b:c6:8b:c3:21:f0:eb:41:ec:3b:1e:fa:
50:13:28:06:b9:a6:da:e3:28:30:01:a1:e4:39:86:5b:6e:13:
2a:49:78:3a:45:20:53:57:61:df:91:47:c9:54:f0:a8:08:89:
2f:fb:bb:d3:33:4d:74:30:46:0c:be:de:fd:64:e2:d3:f9:25:
7b:c1:75:c0:0f:2b:f2:c9:8c:5a:d5:2c:46:91:51:ee:19:28:
fc:8b:d5:7b:e5:29:e6:f6:54:3e:76:c1:b4:e4:c6:25:38:ac:
50:e0:cd:f7:72:22:cd:c1:1c:13:0f:53:48:4b:64:13:4f:d5:
b1:24:fc:7f:9f:87:64:48:25:ed:dd:e8:b4:ad:61:b0:a2:72:
f3:0d:51:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:25:51 2025 by rpki-client