Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/DvlADeL3DKlMhpNLmRDNZZC9s_8.roa
File: DvlADeL3DKlMhpNLmRDNZZC9s_8.roa (raw, json)
Hash identifier: ppZ4t6nO0Jqn1uF68GC6tifAyuOnHQDQs17xRKMAVEw=
Subject key identifier: 0E:F9:40:0D:E2:F7:0C:A9:4C:86:93:4B:99:10:CD:65:90:BD:B3:FF
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0194252203FD6C266FE4196572D63E03DF9E
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/DvlADeL3DKlMhpNLmRDNZZC9s_8.roa
Signing time: Thu 02 Jan 2025 03:49:33 +0000
ROA not before: Thu 02 Jan 2025 03:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 194.39.128.0/24 maxlen: 24
194.39.129.0/24 maxlen: 24
194.39.134.0/24 maxlen: 24
194.39.135.0/24 maxlen: 24
2a00:fe00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:03:fd:6c:26:6f:e4:19:65:72:d6:3e:03:df:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jan 2 03:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ef9400de2f70ca94c86934b9910cd6590bdb3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:a0:f6:2d:19:f5:d8:8b:bc:15:8b:e7:bf:
1e:7f:8e:b1:a3:29:c5:32:9d:e3:33:16:f2:ee:62:
6c:66:ab:02:0c:e5:72:38:72:d1:40:b7:7d:cc:fb:
5b:33:0e:19:e9:30:8a:d4:27:ff:7c:75:a0:12:44:
8d:69:d4:2f:ce:f7:b0:5a:b7:e1:ae:a1:ea:84:1e:
18:7c:7c:24:ae:8d:9a:27:11:65:ec:96:14:25:e5:
8e:ea:81:89:60:a2:69:6c:a7:9b:b1:d3:c1:4b:42:
32:51:1f:2f:0a:bc:3d:fa:be:db:73:12:09:7a:e1:
8b:23:30:8e:c7:f7:6c:20:3a:75:8e:48:a4:fa:fa:
4d:37:50:61:7f:26:dc:ad:2a:61:61:97:4a:e7:ca:
69:76:46:b8:c3:34:c0:d9:f8:8a:3b:7f:75:c4:86:
f3:83:0d:6d:7a:9b:a4:d8:39:c4:ea:29:ee:aa:6f:
21:97:7e:20:d4:13:0b:91:7d:af:77:c7:3e:e4:14:
f5:e7:1d:16:5d:c4:77:6b:cd:66:82:ab:16:8e:f8:
21:26:99:32:2e:3a:74:e6:9b:e5:6f:b5:13:9e:38:
2a:bf:42:82:fc:4c:cf:a0:7e:d9:f2:53:5f:70:ab:
8c:76:4d:67:7b:3a:16:a4:38:58:aa:92:cf:e8:38:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F9:40:0D:E2:F7:0C:A9:4C:86:93:4B:99:10:CD:65:90:BD:B3:FF
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/DvlADeL3DKlMhpNLmRDNZZC9s_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.128.0/23
194.39.134.0/23
IPv6:
2a00:fe00::/32
Signature Algorithm: sha256WithRSAEncryption
0b:a5:10:6c:e3:eb:bd:2a:55:e2:44:bd:39:d8:3f:ad:20:cd:
3e:bf:48:90:4a:ff:72:1c:0b:08:c8:da:7e:f2:ec:c0:a9:f3:
1d:3a:09:b6:36:5f:83:23:a5:bb:52:3e:74:3f:d6:e5:f6:2a:
8e:39:8d:34:e9:2d:dd:25:ec:80:ba:c7:87:57:54:e2:24:f4:
37:e3:a2:3f:9e:df:5b:75:e5:4f:46:d4:ed:a1:7b:aa:db:62:
15:0a:3c:c7:49:dd:0f:19:8e:3f:16:29:f0:ab:56:9a:62:d2:
a7:01:32:36:b6:27:d4:d7:00:25:7d:a8:fb:57:cb:2b:60:75:
ff:ae:eb:19:c0:c2:43:22:3e:6f:8a:22:1e:d8:36:6c:5f:97:
76:43:bb:8d:e0:58:5d:d2:b4:e0:86:ac:d2:9e:b8:0c:d6:ab:
18:82:ab:bb:6f:17:67:88:d5:19:b3:eb:bc:16:15:bd:d1:23:
e3:70:8d:68:13:08:8e:35:bb:f4:b0:e4:5f:5b:31:82:55:d3:
8d:88:9e:fb:33:69:2c:2d:fe:a2:96:ea:14:3f:ea:2c:31:37:
79:a6:1d:ba:98:1a:61:68:86:de:41:70:bb:9c:4c:3c:ac:cf:
fb:c1:79:e5:18:79:31:d4:ac:39:6c:69:56:b8:c8:74:86:0e:
6a:55:8c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:40 2025 by rpki-client