Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/dKs_OVLBRUdu5eRJeY09vs38U8U.roa
File: dKs_OVLBRUdu5eRJeY09vs38U8U.roa (raw, json)
Hash identifier: 2juP1UOIoyK0h+ulYDMXknIUbcCOY8A/8FAOZg52IL0=
Subject key identifier: 74:AB:3F:39:52:C1:45:47:6E:E5:E4:49:79:8D:3D:BE:CD:FC:53:C5
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 019424B3EBC9599199C3CBC391419DFD0803
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/dKs_OVLBRUdu5eRJeY09vs38U8U.roa
Signing time: Thu 02 Jan 2025 01:49:18 +0000
ROA not before: Thu 02 Jan 2025 01:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 786
IP address blocks: 136.201.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:eb:c9:59:91:99:c3:cb:c3:91:41:9d:fd:08:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: Jan 2 01:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74ab3f3952c145476ee5e449798d3dbecdfc53c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:78:c5:ac:02:ad:07:f1:e4:8e:91:70:fb:34:
1d:5f:ca:0d:34:52:82:26:7f:1d:c3:25:3b:29:e1:
2f:26:e4:95:a8:a5:19:fe:3c:4e:c6:ca:5f:b3:1e:
cd:b0:56:67:f1:7a:6a:b1:34:c9:d2:39:92:5f:d5:
08:67:c4:1a:66:33:81:ee:14:38:9f:12:e7:20:f1:
cd:d8:be:f2:8b:c2:18:c3:ea:74:93:c8:a8:d4:e6:
68:07:b8:4e:40:0d:eb:36:c9:56:aa:6c:07:e3:34:
02:d5:d0:bc:80:02:c3:49:b1:80:ab:6f:df:c1:59:
81:de:6f:2a:30:7b:f5:50:c1:fa:b9:09:a9:96:89:
3a:d8:d4:7e:85:bc:78:37:c6:99:94:b0:8c:53:09:
18:ca:a7:56:54:aa:82:98:58:fa:b5:16:12:61:e4:
13:60:64:74:60:96:5b:fb:5a:79:c8:8d:0a:15:c8:
3e:28:52:69:86:6d:74:c0:71:4c:1d:cf:34:5b:ff:
f6:95:7b:72:08:8c:44:bc:ef:70:22:dd:42:3b:35:
c5:89:38:20:c6:3b:a0:69:78:17:5f:5e:45:24:ec:
d1:38:9a:88:a4:83:89:c2:c2:f2:07:2e:ae:81:a9:
26:54:7c:89:57:b1:cb:d6:30:60:0d:8a:73:af:d9:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AB:3F:39:52:C1:45:47:6E:E5:E4:49:79:8D:3D:BE:CD:FC:53:C5
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/dKs_OVLBRUdu5eRJeY09vs38U8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.201.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:b4:c1:93:26:24:45:34:66:ef:28:7b:e4:1e:70:8c:8e:ce:
1e:f3:98:89:96:41:85:d1:44:69:85:76:db:56:b6:f0:aa:dc:
77:d8:62:52:dd:f4:9a:20:12:6f:cd:ba:65:65:ed:c8:ed:39:
a6:4f:c2:df:ad:24:a4:cb:b9:c2:98:23:5c:a8:3d:8c:7c:c5:
7c:1b:04:fb:f0:7d:a6:24:04:c7:b4:ad:8e:a4:f5:28:2b:80:
f6:fa:ba:ae:a4:35:ba:7c:19:cf:6b:90:34:10:86:1b:a2:97:
e0:30:80:0e:c3:29:1a:9d:6e:f4:0e:98:96:0d:dd:b5:e7:25:
00:30:d5:49:a6:b1:bf:d9:d6:be:36:96:58:95:cb:a6:e5:76:
6a:8a:ce:dc:d0:a6:9c:14:77:1e:89:09:e6:01:8e:24:eb:0d:
7f:7e:71:55:fb:bb:88:4d:49:75:99:98:2f:d8:f4:a7:0c:a4:
ac:1b:3b:5c:93:ef:57:c8:51:d0:cd:dd:26:50:f0:d8:8f:57:
dc:3a:f8:5e:32:b2:64:47:4f:a9:73:ed:1e:bc:d8:5b:df:77:
d8:90:91:f7:4c:65:5f:9d:7b:f1:0c:b5:06:09:f3:18:39:86:
b2:04:47:98:07:c2:ef:f8:e1:1a:ea:ef:57:f2:d3:e3:ad:c0:
f9:a7:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:35 2025 by rpki-client