Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/Dlst4zdGN0XEjaRKAVG2aUW3Zys.roa
File: Dlst4zdGN0XEjaRKAVG2aUW3Zys.roa (raw, json)
Hash identifier: JUWMAM2lZQg8cUdPcrThF2mh7HbwsAT1N8ME9RsjW/U=
Subject key identifier: 0E:5B:2D:E3:37:46:37:45:C4:8D:A4:4A:01:51:B6:69:45:B7:67:2B
Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial: 0194266B2E3585E0F0C282D73C0C700F01E8
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/Dlst4zdGN0XEjaRKAVG2aUW3Zys.roa
Signing time: Thu 02 Jan 2025 09:49:05 +0000
ROA not before: Thu 02 Jan 2025 09:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20967
IP address blocks: 193.39.78.0/24 maxlen: 24
193.108.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:2e:35:85:e0:f0:c2:82:d7:3c:0c:70:0f:01:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Validity
Not Before: Jan 2 09:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e5b2de337463745c48da44a0151b66945b7672b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:a5:16:23:4f:cb:2a:88:60:b6:41:2c:5b:
9e:8c:c6:0f:77:26:1b:c7:01:2e:70:b1:5b:56:83:
58:6f:68:f8:fe:7a:99:1c:5e:e9:42:7a:89:c5:a5:
56:2d:5c:5f:dc:15:8b:91:45:2c:21:ed:27:03:6f:
60:8c:e2:14:55:16:1d:94:ba:22:67:0e:5c:4d:26:
c9:12:28:79:02:ea:92:58:fb:6c:79:07:ed:0c:ea:
04:8e:13:33:30:53:a0:12:87:db:bb:38:87:08:51:
1d:3b:47:a6:90:73:85:2e:28:91:53:1e:b8:f9:03:
62:e7:d1:26:ff:1d:81:72:e0:8a:10:db:23:b6:5e:
72:6e:90:fd:63:91:40:f4:f3:d4:8e:79:f7:31:30:
ab:12:99:b6:a6:a5:37:b5:6b:ee:f8:c9:90:11:61:
15:4e:fb:1f:a0:20:b9:e9:33:7b:d4:ea:b3:ea:65:
21:c8:8e:f9:c1:33:de:7e:17:fb:a5:27:6e:bf:c8:
21:b0:9b:98:42:fe:fe:b4:08:08:7f:9c:f3:9e:b1:
71:10:bc:d9:ea:c9:c9:c6:8f:40:34:6a:68:2c:56:
be:5b:d8:07:9f:ec:68:ef:63:9e:6a:b2:8c:6e:e2:
a0:3e:d3:5b:1a:11:fd:09:85:26:39:d2:b4:89:c1:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5B:2D:E3:37:46:37:45:C4:8D:A4:4A:01:51:B6:69:45:B7:67:2B
X509v3 Authority Key Identifier:
keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/Dlst4zdGN0XEjaRKAVG2aUW3Zys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.78.0/24
193.108.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8c:6f:61:2e:40:ec:20:9f:90:10:f8:c2:ae:c5:09:25:c1:
81:b7:b0:df:fb:03:e2:1d:c3:e9:a9:5c:8a:24:10:33:07:46:
00:06:f8:35:29:46:a3:10:c6:0b:dd:e1:8a:71:23:ec:65:f3:
3e:f2:c4:75:c8:b6:11:66:a5:67:97:f0:56:9c:b5:62:21:d2:
d7:b1:30:09:fc:5a:1f:0a:ff:bc:1e:dd:85:ed:c9:73:d8:1b:
fc:9f:ef:dc:42:94:55:d2:13:77:07:57:dd:86:fb:90:25:71:
7c:1f:2c:53:a4:31:e9:76:1e:fb:41:2c:19:26:73:8b:49:23:
ac:4b:67:39:24:99:eb:72:c1:3e:c4:29:e8:f9:12:c4:03:41:
57:95:a7:6f:3f:22:d2:7b:31:19:3a:d4:b1:11:fc:86:82:0d:
0b:22:1e:3f:68:13:87:1e:75:50:17:68:6d:d7:57:6a:35:88:
33:ab:49:94:cf:3a:31:a8:1f:e4:36:28:65:7d:02:2a:2a:fc:
7d:ea:d0:28:5a:1e:4c:31:a6:f8:52:f4:8d:f9:11:0d:02:ea:
62:75:27:8f:64:d8:01:66:8c:1f:b7:89:5f:4f:61:bf:cc:40:
e4:fe:62:89:1b:d1:e8:bf:bf:0d:a6:4e:80:15:c3:5c:95:a6:
83:03:c2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:18 2025 by rpki-client