Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/D1fRR18dq9Gv4qp3l9TcLZyyEDI.roa
File: D1fRR18dq9Gv4qp3l9TcLZyyEDI.roa (raw, json)
Hash identifier: +8YA8GsmgHc3axYa2P7GfhxaqtQ7FE/tjUAeHRPwr9g=
Subject key identifier: 0F:57:D1:47:5F:1D:AB:D1:AF:E2:AA:77:97:D4:DC:2D:9C:B2:10:32
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019427485A14FAE48D4BCD021E3A67AD1691
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/D1fRR18dq9Gv4qp3l9TcLZyyEDI.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57745
IP address blocks: 194.225.166.0/23 maxlen: 24
194.225.168.0/22 maxlen: 24
194.225.172.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5a:14:fa:e4:8d:4b:cd:02:1e:3a:67:ad:16:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f57d1475f1dabd1afe2aa7797d4dc2d9cb21032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:98:ff:14:ae:05:fe:eb:aa:e6:27:71:00:
18:30:86:23:ae:25:cc:34:e5:2a:04:80:56:24:56:
43:e8:95:d7:f7:1c:77:cf:2f:f7:00:1b:fe:dd:7d:
8a:ad:10:05:a7:c4:f6:c7:09:4a:41:46:1d:e0:9c:
6d:ed:07:66:72:aa:12:40:c4:b5:54:0a:21:6d:02:
57:c0:4c:f2:49:2b:15:be:71:c9:5e:af:69:12:20:
53:13:6c:e7:a1:3f:77:49:db:09:8f:e4:4f:8a:a7:
71:8f:18:85:ae:b8:3b:e1:51:be:3f:01:b5:d9:7b:
8b:b5:15:ac:80:2a:6d:1f:2d:b9:d9:a1:dc:be:92:
cd:96:d7:e8:f0:68:8e:44:6f:7a:61:fe:d0:66:df:
18:1f:07:7c:d6:5d:80:c7:b1:8b:9f:b0:d9:c4:15:
bf:48:32:8a:22:f1:b0:c7:9d:9e:e8:2b:02:9d:31:
c9:7e:cd:0d:d4:29:73:f4:ee:c5:60:f2:fa:f5:a4:
4a:e0:2f:75:c2:30:70:76:2c:dc:f5:bc:da:db:88:
7e:86:8e:6e:aa:3e:70:45:06:39:f1:5d:ef:20:55:
24:06:0b:6d:45:f0:45:d7:69:cc:0e:ca:2a:0c:71:
8f:86:3e:27:20:66:e1:3c:cc:57:1b:ca:84:3a:48:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:57:D1:47:5F:1D:AB:D1:AF:E2:AA:77:97:D4:DC:2D:9C:B2:10:32
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/D1fRR18dq9Gv4qp3l9TcLZyyEDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.166.0-194.225.173.255
Signature Algorithm: sha256WithRSAEncryption
1e:8d:56:10:28:42:26:b4:f0:c7:3d:5c:27:94:5d:21:46:0f:
ae:53:0f:e0:48:4c:cc:33:47:79:4e:cd:94:6d:40:1c:de:42:
cb:69:59:67:3a:8c:ec:97:13:11:35:ab:b1:3e:47:09:6d:24:
77:c9:ae:64:b9:f7:86:3f:48:3a:2c:20:26:66:2f:43:c2:b7:
0a:ed:c9:96:90:84:dd:66:d7:42:9e:18:14:b1:c7:af:80:41:
a5:f9:61:a2:3a:98:d9:ea:05:34:b5:09:41:22:85:9a:5a:7d:
a1:30:b0:2f:d4:a2:93:10:52:ef:aa:3e:2e:8a:8e:3d:31:0b:
4f:92:24:d3:b8:61:0a:3a:aa:6f:58:96:3d:23:10:c6:a0:09:
68:3c:c1:48:c7:f8:03:ad:e1:47:ea:f2:25:a9:7e:60:d3:f7:
81:bc:59:47:9a:6a:65:4e:a4:fa:c6:bd:8e:17:c0:47:af:8d:
9a:cf:fb:34:05:e5:9c:d8:52:52:4d:6e:82:7e:e5:15:43:50:
13:ea:7f:9f:99:32:c7:0f:5b:6c:02:fd:e8:dd:eb:a5:ab:66:
8e:db:38:4d:3e:b7:a0:08:0b:3c:2d:bb:53:41:b7:ff:d5:f8:
6b:2a:60:1f:1e:d2:a7:0a:32:ed:e0:0e:14:f0:da:06:b2:a7:
47:a5:81:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:09 2025 by rpki-client